Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: tURg/W8yGfYCkN0yC0Vt/j+oDg7LRZbZs7QSh8Svesc=
Subject key identifier: C4:1C:61:6B:82:4F:54:99:3C:D7:C6:98:B4:16:2F:74:D8:0A:4D:B2
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 0194BBCEDF387DDFE0ED2B1B8E96CAD917BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 1146
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: cYiTTeytnSroN/Wq65N2TUshHni3+xEKmkiiqIo9Twc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:38:7d:df:e0:ed:2b:1b:8e:96:ca:d9:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=c41c616b824f54993cd7c698b4162f74d80a4db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:8a:7f:26:46:af:e5:5c:88:2f:94:af:f8:
6a:88:3d:3a:89:32:56:a1:3f:9c:8f:8d:f7:bc:1c:
84:8e:10:8c:9e:a6:b1:0c:d9:cc:39:9b:1a:59:90:
d2:7a:f6:94:db:34:f8:a4:f0:c7:c1:ec:3c:90:ea:
15:22:5c:1b:4d:e6:c5:7f:de:67:ab:f6:69:e8:2c:
1e:04:a1:3d:65:b1:52:88:2c:e6:df:86:90:c7:09:
fe:89:5c:d4:d6:68:a5:9a:6d:a6:cd:f9:be:a4:d7:
50:c5:ae:8d:03:9f:19:4e:ee:87:f5:2e:3d:00:ec:
e2:58:d5:40:4c:23:59:af:f9:bb:f6:a3:4e:30:5e:
29:6f:60:ad:7a:6d:5c:1b:42:a0:1a:04:60:69:a6:
31:52:b5:05:6a:90:55:f9:2c:86:c6:fd:38:b5:9e:
ad:e3:f7:49:b3:a7:81:06:e9:68:8a:73:c9:25:51:
15:e5:b8:b0:e2:44:5a:ca:18:c0:07:82:9e:33:23:
73:78:00:d1:34:f0:95:ec:32:b3:1d:71:6d:19:1a:
0c:ae:6a:eb:c5:5f:fd:fe:14:91:be:08:b2:c5:7b:
9e:e2:48:c1:b8:bb:a3:6d:bc:9f:c1:0e:60:1b:65:
00:7c:c7:f8:5f:52:cf:07:c8:2d:e3:69:ea:d6:01:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1C:61:6B:82:4F:54:99:3C:D7:C6:98:B4:16:2F:74:D8:0A:4D:B2
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6b:0a:39:f1:d5:5e:fc:1c:21:37:da:78:b5:12:10:b2:26:
d5:02:8e:ae:df:aa:2f:5c:cf:52:34:d9:76:e1:98:64:00:c2:
62:e3:1c:0e:96:bb:65:75:b6:a6:f7:7d:6c:dd:3a:47:80:04:
ac:09:d2:34:bd:7d:cf:bc:2f:44:f9:3a:e1:18:e4:a7:a8:2d:
22:5e:29:11:72:d6:7b:6c:55:16:4e:42:43:d0:62:e5:51:d0:
ca:82:3b:e7:31:70:c0:0d:14:32:52:ae:47:a8:77:e0:76:28:
ec:5c:ff:c4:25:85:12:52:94:99:b3:72:3f:37:9e:35:99:80:
1d:fc:bd:83:f5:4c:72:8a:b1:ac:e3:1d:bf:f1:66:29:09:8a:
08:ec:c1:51:7f:21:9e:46:43:6c:8a:a8:99:97:b5:43:a8:f9:
19:13:57:d4:c3:4b:b4:33:9f:ec:55:76:c8:b8:26:d0:9c:64:
57:4c:d3:cd:2e:0b:16:a1:73:a6:33:80:ed:77:65:e3:34:67:
32:ee:89:a3:2f:8f:f7:4d:00:fb:fb:5a:a5:85:39:a7:1f:e6:
b0:16:89:7e:28:b9:c3:5d:1c:3d:78:a6:20:f9:00:24:a8:e1:
88:ab:ce:32:e9:a7:4b:05:6d:7b:90:f5:30:fa:54:2f:2a:9a:
d9:b1:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:12 2025 by rpki-client