Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: zaiJlVvRGhNHLhd6hxZAzkWauTunxUpbTDiZJe6hKIM=
Subject key identifier: 8C:5A:79:36:5B:9A:E0:FE:C1:96:CE:08:E2:6F:44:9E:D9:F5:92:9C
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 0194BC3C50311689E6190EF65BD878FE40BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: rBpu2uT9K5HmFR32ai+5bv1FWdrKc5KTYiRyd/mEQjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:31:16:89:e6:19:0e:f6:5b:d8:78:fe:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=8c5a79365b9ae0fec196ce08e26f449ed9f5929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:c6:94:24:b0:43:c8:bc:a2:2a:1a:8e:42:
69:83:ac:ac:03:01:23:36:0e:b1:e5:f0:31:61:7d:
7a:36:fe:a8:40:d3:90:0e:0d:1c:a1:f4:f3:d7:3f:
57:c9:bd:2f:dd:bc:e6:60:3b:e1:19:2b:1e:3f:4f:
7d:eb:4f:7c:f4:4d:ec:c5:f1:0f:42:dd:e2:42:16:
36:68:9c:a0:e9:f1:38:e9:16:9f:bf:9e:cb:65:e2:
3f:ae:4c:2f:34:ae:50:dc:ef:ca:44:23:31:e2:74:
32:04:e3:5e:e7:e1:d6:ce:9e:78:55:b2:94:2d:2e:
b3:98:a2:b7:c1:f3:f8:15:8c:d2:30:99:3b:94:68:
3c:7a:41:ba:96:5a:17:ab:1b:f5:84:8b:42:73:e4:
39:bf:f1:00:f7:82:04:28:08:93:70:4c:45:19:be:
24:46:ef:0b:82:4c:18:41:0d:47:a7:b7:05:8b:3e:
64:00:ab:39:88:3c:06:b7:d9:1a:9c:c4:3d:78:39:
2f:95:91:2a:1c:56:82:0f:47:3d:2e:2e:2b:a0:d1:
83:6c:26:98:bb:b9:3e:9a:25:b4:73:28:6b:b8:9a:
21:75:69:a3:7a:b3:b0:25:ce:62:c1:ca:f5:86:43:
c3:42:ba:33:9e:05:bb:ad:14:0d:97:dd:99:cc:fa:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5A:79:36:5B:9A:E0:FE:C1:96:CE:08:E2:6F:44:9E:D9:F5:92:9C
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:f0:01:c7:ea:56:27:4d:15:7e:5f:ee:f7:4f:ea:fc:d9:
60:af:ee:21:c4:1e:77:a0:4e:e9:a3:9d:0f:a0:bb:bb:d1:4a:
27:a9:f6:8d:a6:9c:e1:15:70:dd:f8:c2:b7:e5:3d:86:a0:9d:
6b:b1:7d:43:fb:af:46:b3:03:ae:a9:0a:ee:da:64:cb:d6:0b:
bf:fa:2f:53:c8:d7:f9:6c:bb:54:4a:f4:07:2a:31:60:ba:fa:
c7:14:cf:cc:68:08:a2:57:80:9f:4a:36:9f:53:9a:83:17:eb:
1a:37:d5:90:01:cb:fe:85:25:26:63:a3:24:04:fa:ac:b9:ec:
0c:45:81:aa:13:1f:09:47:45:6e:21:b7:5d:4f:48:38:7d:f7:
b4:9e:cc:be:e3:49:7c:69:da:47:d6:3c:ed:80:d8:31:0e:88:
cd:0f:04:df:55:c1:0b:45:70:cd:2a:09:ed:07:dd:20:17:72:
b6:c7:32:e7:39:c6:88:33:cf:93:5c:4e:69:8a:ad:14:54:6d:
fb:08:53:0f:1b:b3:8e:0e:50:70:a8:45:05:10:3b:b2:22:3c:
8a:5f:e8:e4:ca:11:85:88:7f:11:0c:c0:42:14:20:62:55:75:
63:b7:1a:c5:83:c2:cf:d3:5d:16:99:68:12:7a:ab:8c:4e:40:
76:04:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:51 2025 by rpki-client