Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: G5h4ifxiQsGOx35PF7jXUpEFTTCDH2Ss4ntDmPu8sEM=
Subject key identifier: C9:4B:7A:22:29:22:B0:D7:79:18:65:8F:1B:F5:C6:65:DB:79:64:53
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 0194BD4E990BD10118D66FC6B776D4476514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: g+bfoR+rdJmwzP5vF1BnmG7WjiY1hoY8VDq5f3VhULs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:0b:d1:01:18:d6:6f:c6:b7:76:d4:47:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=c94b7a222922b0d77918658f1bf5c665db796453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:91:4b:c8:a4:ce:02:a6:9a:c6:15:e1:1d:
a5:51:e5:35:65:21:d9:5c:b7:2f:5a:ae:99:9e:27:
0b:17:b3:4b:e1:9d:f5:0c:d5:d7:67:aa:da:b3:49:
ae:08:9a:dc:60:9b:8c:1c:3e:25:20:27:eb:d5:58:
4f:26:a4:86:90:64:ca:66:cc:6c:d1:1c:32:41:4d:
3a:5d:57:ef:f5:25:0b:d1:ba:66:51:e2:99:f7:ae:
00:69:a9:9f:84:e1:b4:d1:72:1f:ea:33:da:57:26:
8c:aa:6c:25:cf:a6:bb:0f:b8:17:78:41:de:35:05:
73:31:62:5f:7c:fb:d7:e3:c2:86:24:18:4a:85:5c:
e6:c1:54:b8:cc:c7:3c:00:a7:1e:3a:8a:01:0f:01:
47:7a:12:20:46:23:d4:03:85:4a:ba:f6:37:83:44:
f5:2f:a8:19:3d:fd:08:00:60:61:54:76:ca:36:1d:
ee:de:c3:e6:66:82:b1:81:71:dd:37:d6:0b:17:d8:
09:a2:44:92:ca:13:91:88:4e:3c:ea:fc:f5:a4:80:
e1:c6:66:f0:b3:dd:56:e7:bd:19:26:46:c5:82:df:
16:31:51:8b:88:76:4d:c5:31:5a:70:41:86:f7:3a:
e3:71:5e:da:c1:1c:e0:8c:88:34:d8:66:b8:a1:52:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:7A:22:29:22:B0:D7:79:18:65:8F:1B:F5:C6:65:DB:79:64:53
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d1:3c:9b:37:6a:03:40:2a:2e:87:8e:8a:9d:eb:a2:d9:e0:
3a:b9:5c:23:cb:bf:fd:5e:82:03:e0:c3:1e:0d:0c:5f:19:bd:
0b:ac:39:4c:64:71:5e:19:c8:bd:6c:35:8f:6f:b8:08:76:22:
b8:be:67:c1:f5:b7:09:f7:94:67:47:21:e5:cc:16:8e:a2:49:
34:6a:71:bc:41:09:f1:7a:f3:7f:51:64:bc:5a:03:a7:e0:21:
00:7e:06:79:0f:77:ee:5e:0c:c1:ba:f2:0e:c4:5c:81:da:ea:
5f:86:a8:a4:67:b1:8a:36:27:06:28:a5:19:b5:cb:4a:51:13:
98:c1:18:91:d1:7b:7a:c5:1d:65:31:87:95:5e:4f:7e:8e:01:
ff:79:e8:cf:f2:14:1c:5c:d2:06:18:78:96:4c:f4:78:47:30:
c5:32:8e:fd:88:50:a1:0a:f3:1c:87:0f:2f:50:96:8f:90:08:
a4:b8:02:71:9e:b0:83:c2:71:49:c5:53:06:f0:b8:f9:7c:d1:
10:c3:7f:43:ff:ec:77:92:49:4a:69:80:d5:8e:06:46:8a:cb:
85:b0:c4:35:78:5e:d6:07:49:27:1f:db:1b:b9:42:8a:0b:a2:
5a:e6:c0:22:51:95:01:93:f7:c6:6f:1d:57:22:5d:ad:a1:49:
bd:1d:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:25 2025 by rpki-client