Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: G54cXg3zu4tZOuO1mfaktM1Hs6Xjyzw63KWGZgrxlgU=
Subject key identifier: 2E:47:58:C9:33:7F:C1:0D:F5:4A:0D:C2:51:AB:E3:B1:ED:9F:E2:6D
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 0194BD17DCD66E68B48E20351B1493DEEFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: fMh81b72z+eghJwOP2lRJiYdlqgjECMqgWpNU6PtJvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:d6:6e:68:b4:8e:20:35:1b:14:93:de:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=2e4758c9337fc10df54a0dc251abe3b1ed9fe26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:3c:2e:d8:5e:50:31:5d:23:d3:16:1c:47:
b6:03:84:b3:56:56:09:ae:6d:cf:bd:47:b2:66:b9:
05:f6:d4:59:09:98:df:4c:bf:4a:d7:a6:f4:73:44:
a7:81:67:55:32:11:87:ad:2d:09:19:38:0f:ca:f9:
7a:bd:58:dc:f1:83:9b:7c:ec:ef:00:f6:2e:2a:8d:
30:30:93:43:b6:37:11:7d:cb:51:74:54:15:f9:f9:
3b:27:1c:30:df:d8:45:05:4a:6f:6b:96:29:4b:d2:
a7:ef:09:89:b7:6e:a3:5c:f6:e5:7d:79:54:e2:ae:
db:ea:b2:8b:7b:06:e3:be:08:d9:9b:f4:bb:30:b5:
6f:38:b3:35:de:2e:41:2c:db:58:4d:c0:8b:80:ce:
53:46:4f:b4:ce:17:5e:bd:d5:74:05:4b:68:d3:2a:
fe:21:52:81:62:ea:b7:e8:6a:96:0b:ed:75:21:cb:
c9:e0:88:16:0c:a8:84:82:55:f3:71:c9:a0:e7:f0:
70:fc:fe:7b:db:80:63:02:81:cc:9e:c5:34:22:be:
b9:9b:3e:b2:43:3f:09:5d:c0:68:c5:91:d3:54:99:
d2:01:ab:11:eb:5d:0e:43:a2:a0:6f:32:81:a1:e4:
d2:ec:39:83:32:19:55:2f:c3:17:c3:02:1b:e9:fc:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:58:C9:33:7F:C1:0D:F5:4A:0D:C2:51:AB:E3:B1:ED:9F:E2:6D
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2a:a3:0c:3c:ca:1b:d9:90:72:2c:4e:c4:ce:ee:22:23:81:
ff:2b:1e:18:c0:d8:82:21:63:fc:63:a6:fb:6b:d5:1d:5c:af:
4b:60:7b:65:04:2b:56:2c:4c:d8:d2:45:4b:a2:ba:56:2b:b8:
51:9f:6c:c7:ff:cb:d2:7b:06:38:1f:5e:84:d7:47:24:c6:f6:
79:51:29:57:25:b8:10:61:77:c6:f9:ca:ca:f3:83:ff:4f:1f:
bc:95:cc:14:99:a7:bf:ed:1a:7d:50:1c:d3:02:49:b9:32:94:
72:d5:d6:18:33:dd:ca:68:8e:89:4e:9d:24:b0:a5:41:6a:ea:
5b:5c:2e:04:fc:00:a4:6b:96:b8:81:7c:75:9b:14:72:48:ce:
b6:15:5f:6e:df:92:5d:ac:7a:89:92:44:82:2b:fd:de:23:a6:
57:59:4f:cb:30:15:9d:57:a3:10:25:8c:1b:27:9f:09:ba:5d:
1d:85:56:25:26:95:b8:83:94:4f:88:8e:22:26:4c:ab:e9:83:
4e:1d:73:de:43:da:34:0d:20:57:ca:61:41:42:38:4c:c0:cb:
cd:15:a7:70:b3:28:36:48:38:f1:55:ba:de:bd:e0:78:24:6f:
f6:cd:eb:da:24:f2:da:e8:c9:13:cb:e2:e6:fc:57:73:7d:08:
71:5e:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:15 2025 by rpki-client