Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: mfHiRYZ44DyVC5rvNa3sLUjm6Pa8NQnO+MPlXpdynbA=
Subject key identifier: B8:94:CD:44:EC:65:59:40:DC:A9:56:93:8B:D8:4A:B9:47:FE:15:27
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 0194BD4EC2B55DE0665A7E0B439A59AAF722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: RYZ_HUggvvOzHTuXBACbgajQpo0.roa (hash: Fp6s79hRrwq+bZ12gZrNnH0nQeo4puoviWIdP4EjMXQ=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: RzOVw97WFIy6KG22AZSMn00lksiv39au5OzdEc58ATA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c2:b5:5d:e0:66:5a:7e:0b:43:9a:59:aa:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=b894cd44ec655940dca956938bd84ab947fe1527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:a9:90:aa:33:16:08:de:a9:06:10:eb:08:
b6:63:05:7a:1c:fb:99:a5:8c:a2:14:90:6f:13:d7:
3d:01:d1:47:f2:9d:ba:a3:7e:0f:47:03:26:ef:d4:
6a:a7:03:1e:2b:1b:18:1b:8c:1f:12:f1:6c:53:28:
ec:16:29:3a:4a:89:70:ca:42:b2:40:74:4c:bf:f5:
04:48:3a:0c:de:0b:00:16:95:e9:81:ec:1e:5a:6e:
1e:25:e2:3b:77:6d:1b:ec:0b:36:d0:8f:43:26:ec:
c0:01:f7:20:0c:32:2b:da:96:bf:46:50:b2:24:7d:
f0:05:d8:95:e4:f7:33:6d:8f:16:43:c5:f0:5d:c6:
fb:b7:60:40:64:ac:83:e0:01:a4:e4:5b:c9:c0:5a:
7e:4f:be:7d:0d:f2:17:b4:40:c7:60:0a:c5:44:8e:
6d:12:15:c6:e4:15:c1:25:a5:89:7d:ae:fe:2f:48:
11:6e:98:33:3b:c7:34:e4:2b:43:55:92:9c:93:ac:
0c:c5:f1:f1:79:f2:b1:b3:a8:74:4e:d3:d5:d9:d5:
5a:bf:80:1f:b0:c0:a1:41:ee:a4:4e:09:6d:c7:3e:
95:7e:5b:f7:7b:b4:cf:08:84:47:8e:2f:93:dc:46:
0d:37:50:dc:f7:e4:8d:c5:9d:a5:8f:4e:c2:10:a0:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:CD:44:EC:65:59:40:DC:A9:56:93:8B:D8:4A:B9:47:FE:15:27
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:27:b9:8c:4f:32:fc:75:16:24:7c:00:71:bb:3f:14:f1:b8:
c5:c3:82:06:70:d3:0d:fa:e4:46:df:a9:a6:11:7c:e1:6e:17:
43:83:1e:e4:f5:76:f1:20:9c:f5:68:fe:ad:89:2e:18:05:f0:
df:cb:1c:dd:60:81:6f:10:ae:55:dd:03:db:72:e8:ea:9c:e1:
0e:c6:b4:19:64:89:8d:d0:99:1f:8e:22:d3:d2:0a:98:f8:72:
bd:28:04:ca:dc:67:ee:03:62:d7:b6:74:ee:a9:02:ad:60:c1:
82:7c:d7:0a:13:45:18:60:35:68:82:e0:a5:25:db:4a:cd:9f:
b6:97:ba:a6:a3:49:15:f3:db:48:98:b5:92:66:93:67:c8:94:
b1:2c:a8:c3:f4:a3:3d:3a:f0:65:41:8a:9d:fd:e5:b7:3c:cb:
ae:d5:64:b8:ed:b3:d1:d8:ec:18:6f:d8:3f:b0:07:e4:0b:b4:
93:ac:5f:f4:1a:ec:32:dd:83:2a:1b:ac:7b:3a:5a:59:e9:d6:
46:b9:48:7e:ad:cb:b9:75:cf:62:22:7f:61:2a:6a:f6:27:2f:
b3:15:1c:d6:21:f5:45:49:66:1e:92:b8:f5:e8:9c:24:97:77:
8d:c9:28:91:df:01:c0:84:ed:e2:10:21:fb:14:67:13:82:e5:
23:12:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:46 2025 by rpki-client