Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: r6Pe182w/ORO05ABowQlMh4PLUUthQ+0J23RheIxKtY=
Subject key identifier: 7A:BC:25:08:79:EE:3A:BE:26:0C:F1:2A:48:C4:5A:6E:91:F2:75:60
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 0194BD4E828ED868C75237A7B21C696A6F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 0864
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: 5TGBWw1ZUD5mk3XFa8p1L3+w+W63OdKzhrFR+k4EDB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:8e:d8:68:c7:52:37:a7:b2:1c:69:6a:6f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=7abc250879ee3abe260cf12a48c45a6e91f27560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:5d:a4:a7:46:e3:ef:3e:41:4f:c5:0f:17:
a2:83:f4:97:5b:40:fd:f1:3f:2f:56:65:2e:a3:ce:
49:e5:74:e4:c2:9d:fa:ae:f3:dd:34:ed:85:c0:32:
ce:cc:70:51:77:13:3a:f8:6d:7a:69:e0:ed:90:51:
b8:f3:5b:44:31:7f:e9:5e:43:d0:5b:31:05:b8:4c:
f5:63:1f:2b:b4:e2:0e:a1:e9:95:aa:0c:d8:51:42:
aa:b3:cd:85:4c:3d:78:0f:3c:05:8d:da:b8:39:f7:
09:91:72:6f:21:47:f8:88:99:a7:a9:90:ad:d7:7e:
3c:10:23:26:af:ae:38:8d:51:ac:cc:64:d9:10:c3:
4a:01:ed:ce:7e:9a:3b:2b:c2:ab:65:a2:90:29:9d:
a7:9e:70:f6:0b:4a:04:b9:34:ec:49:9c:27:f8:ef:
2d:67:d2:ff:10:fe:03:a2:fd:de:69:32:6b:1c:65:
4d:58:43:72:6e:48:3b:0c:7f:63:9a:6a:a0:71:d5:
85:b3:e9:91:55:d7:7e:9b:c9:b0:ed:8d:ef:99:07:
31:2b:65:6f:ee:c7:01:15:b5:43:5a:58:29:cd:2f:
08:ac:dc:5a:19:ae:38:39:99:1f:f3:c2:b3:d1:92:
17:02:26:57:e7:10:44:68:d4:99:c1:75:07:64:6b:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:25:08:79:EE:3A:BE:26:0C:F1:2A:48:C4:5A:6E:91:F2:75:60
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:e4:4a:01:bb:4b:cf:2a:2a:26:87:8a:9c:4b:56:1a:12:
41:a6:e1:e5:d9:c8:37:26:97:4b:4c:6f:b7:b9:5f:38:42:ce:
2e:28:0d:b8:2b:be:cc:63:13:db:29:ef:ab:7e:17:68:d4:43:
40:70:55:05:fc:72:41:f7:0d:92:27:54:f2:d6:23:58:46:b2:
7a:db:72:95:56:54:4c:38:ec:0c:6e:d8:c6:df:12:35:24:5d:
d6:f3:e1:33:f5:62:b1:58:a8:de:c1:3e:e7:cc:67:43:15:55:
82:69:d5:8e:83:97:c8:04:9f:be:26:bc:68:ad:8b:1e:b7:94:
c8:40:9f:b1:5e:7c:aa:ae:19:d2:af:b5:53:74:15:f5:c8:2b:
f9:6b:5c:d3:78:f2:76:2e:5d:e4:18:54:db:77:a3:12:8b:38:
a0:ae:4a:21:4f:11:77:db:1e:dd:88:9c:fe:e0:03:33:1e:69:
bc:9b:4f:7b:24:f4:cb:59:24:dc:dc:7f:d9:0d:ae:bd:94:7a:
e6:bb:4e:28:6e:ec:fe:63:38:d5:3d:ce:48:76:cd:5b:de:b0:
35:21:2b:59:7b:aa:c3:ac:b8:01:86:a9:9f:9a:dc:bb:55:94:
13:33:09:0e:ad:a9:81:4d:fb:c4:c8:6d:eb:e9:3d:d7:26:2c:
bc:4d:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:11 2025 by rpki-client