Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: DhaZw4G8/KHg+4FItte/goDo0pJgQU8sTI0qu7kj96I=
Subject key identifier: DC:98:3A:1B:75:49:03:56:1D:05:86:C3:50:8B:71:40:2F:34:07:C2
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 0194BC728650AD7CCCC77435CFEB51E97C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0CB1
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: 5VLPvdXT8PwcL0FALINx8inVH/F4jMVy8Z5A0XUx7QM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:50:ad:7c:cc:c7:74:35:cf:eb:51:e9:7c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=dc983a1b754903561d0586c3508b71402f3407c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:f2:fc:2b:cb:e9:ca:14:62:de:99:81:a4:
54:85:b6:2b:c5:00:ab:f5:d8:a6:7a:3e:bd:61:d2:
3e:28:b2:15:3f:fd:a9:38:e7:7a:e6:51:ae:0e:b2:
26:a8:94:d9:86:8e:e9:fe:d8:15:3d:e6:d6:2f:3c:
ab:27:b6:05:1a:f2:46:1b:84:3a:96:1a:ba:f2:b5:
b1:77:38:90:84:a3:f7:33:e1:1d:64:07:c4:14:15:
c2:4e:b9:b3:ec:a1:a1:d6:2a:33:77:21:f9:93:8d:
26:12:16:49:e1:1a:33:5f:47:b0:cb:3a:29:18:6f:
85:f9:c5:ee:d5:7d:07:fa:61:51:18:2f:a7:1c:8c:
0a:3b:7f:26:0c:4f:61:c5:d9:88:ad:57:55:ff:96:
25:fe:15:35:ba:81:9c:99:5f:a6:f9:fc:ee:4c:12:
58:f4:3a:fc:91:2c:fa:46:74:db:96:fe:86:7f:06:
2f:74:54:7c:68:d2:2b:80:33:70:5f:f7:ae:e7:ab:
05:04:8c:29:94:cd:25:f1:68:1d:ac:a5:c2:5f:74:
11:41:89:09:d9:e4:c2:12:66:89:5d:f5:55:da:b0:
d9:25:f8:ce:65:8e:61:a4:af:95:c3:85:06:32:da:
00:d8:97:9c:a2:01:e2:76:02:a1:c8:7d:1d:a4:e8:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:3A:1B:75:49:03:56:1D:05:86:C3:50:8B:71:40:2F:34:07:C2
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:23:85:90:75:23:03:65:54:67:9c:58:c2:55:5b:f7:eb:
66:a7:ed:de:e9:fb:35:c6:f6:db:f7:cf:76:3a:58:eb:f6:50:
4a:23:4b:4a:2a:72:95:1f:03:ac:48:a4:24:c3:fb:cd:69:bf:
00:3f:ee:03:8c:b2:cb:85:0f:33:02:9b:1c:e8:9e:48:45:fb:
00:e3:1c:9c:14:e1:bb:eb:0e:c7:cb:8b:42:b8:96:b3:8f:7b:
e6:50:ff:40:5f:b3:65:7f:83:7e:79:e2:53:75:d0:98:28:8a:
f0:cb:d1:28:02:ba:14:35:76:d3:73:d9:a4:f7:4a:02:8c:ee:
c7:29:4f:48:70:27:3c:ad:58:09:51:b5:81:72:25:d7:31:9e:
41:99:64:c2:6b:6f:dc:9a:90:20:aa:f6:f9:bb:53:87:b6:97:
1f:ea:b9:77:8b:de:42:2f:5b:21:a1:e5:d6:39:af:9d:89:7f:
8f:20:9b:a5:ed:56:8d:ae:ec:13:90:e4:fa:a6:03:49:a1:f7:
b9:fa:43:8b:cf:9a:7d:91:bc:8a:6a:8b:24:f9:88:0b:78:9a:
18:e9:d3:f9:c4:52:ef:9a:29:22:83:91:8d:e5:a6:34:03:ae:
0a:ec:b0:db:8f:38:f9:ea:f8:d2:d7:a1:7b:e6:22:ef:0e:69:
bf:fb:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:41 2025 by rpki-client