Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: nlwluEf0OkmLQtIULoxe9+Idaqkr8bBYEEteMiVAN5s=
Subject key identifier: 34:2A:DC:C5:2E:EC:E7:CA:3B:CA:17:D0:A2:8F:51:72:88:29:23:28
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 0194BC72B84195D633BEE1CB862722081364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: RmCMpkqBzKU5uwE67dWXECYDSLM.roa (hash: zJlDKrTh1cp4KFmyuXvGXO2yUQg/mOVDOGARDE3Iulg=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: 0L6bBrMdN9/MrqBcPiiCQaukAhp25GmdqSw2MLqcrK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:41:95:d6:33:be:e1:cb:86:27:22:08:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=342adcc52eece7ca3bca17d0a28f517288292328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:3d:f6:d8:3a:0f:01:34:17:f0:d4:04:ad:
e2:cd:90:11:cd:e9:e8:78:19:04:74:63:97:38:c7:
c4:4f:80:46:9a:ce:42:f3:40:02:dc:6c:0d:94:fb:
2e:17:72:64:7b:ea:af:78:b3:5b:25:19:e5:45:9b:
91:71:0d:fb:ca:a1:f3:28:ed:5a:8f:20:97:f7:68:
c4:a0:0b:fc:fa:a5:e0:58:db:80:dd:d9:36:09:fd:
65:18:c1:9a:46:18:33:b3:10:fc:05:e0:91:4e:f1:
44:a2:a5:96:35:69:30:47:45:2a:8b:40:41:09:b6:
a0:41:e3:9c:93:fa:ec:a4:b7:88:04:c6:85:ff:9b:
ea:f6:38:08:98:13:48:25:62:d1:85:d7:08:c3:59:
a7:9a:a7:b5:82:db:4f:2f:5f:46:1f:91:9f:14:d9:
99:7d:df:3a:35:4f:35:31:d1:b0:2c:b6:e8:f3:a0:
0d:d9:cf:3b:83:38:6d:d7:3d:e8:35:97:05:b5:a8:
fc:c0:f3:f5:8f:24:a3:2e:52:00:8f:ba:ee:e0:da:
92:f1:bd:db:a2:b5:b6:92:1c:f8:4f:72:9f:22:3c:
03:9d:43:28:88:d5:8e:6b:d7:fa:ca:6d:62:23:4b:
aa:50:40:a5:d3:2c:a9:08:e9:a2:14:17:9e:8c:f0:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:DC:C5:2E:EC:E7:CA:3B:CA:17:D0:A2:8F:51:72:88:29:23:28
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:54:b2:7f:74:ce:f8:a8:06:6b:0e:0b:dc:ad:a2:34:54:99:
bd:24:e8:16:e9:87:d6:74:e6:2a:f6:4f:0d:dd:e1:5d:3d:e0:
0e:03:e9:1f:05:79:4c:f0:70:f5:ab:ca:de:51:5d:0e:1c:31:
ab:be:3d:61:14:4f:99:50:0b:87:42:72:03:f2:06:5d:3f:f4:
31:57:95:ee:6f:dd:4a:93:24:e6:f1:80:06:62:b5:87:8a:21:
16:60:5d:41:03:e3:4a:7f:ca:ca:5b:27:f8:87:1b:97:fc:ef:
d7:49:f7:ec:2d:1c:a2:f3:b1:0f:df:46:17:24:66:6c:33:d9:
de:b5:e0:14:4e:55:7f:d4:ea:ae:98:04:f3:2c:82:53:54:b2:
f3:c8:4f:9f:c8:b5:6d:ef:9f:b3:5e:ba:3a:21:a6:db:5b:67:
06:f9:a5:0f:b6:bd:6b:9a:39:13:b2:6d:de:be:79:31:1a:2e:
d0:87:4c:c0:c1:5d:a9:63:58:ff:4a:d2:0f:8f:0d:68:45:ca:
e1:c8:0d:6e:17:88:c0:f2:c0:18:fc:fd:30:7a:92:9b:73:16:
5e:a1:cc:73:13:2b:ee:a2:d1:b0:bf:eb:bf:34:eb:4f:2c:f8:
a9:70:d9:50:72:32:52:44:d8:7e:ac:e1:4f:1a:99:dd:9b:e1:
d7:05:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:20:57 2025 by rpki-client