Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: dRl+mKqhS4k8rAE8er0xsdxpDnpupYewsJeiuIVcuyU=
Subject key identifier: F6:28:81:F7:C3:4E:BA:79:37:69:E8:AC:DC:09:70:8E:A1:D9:33:3D
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 0194BC72F70A44FE81DA000EEB192F65A673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: JRtBr0akfq0RH4AU40BfDrkt3vIcfg/Hxii+hRr0DDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f7:0a:44:fe:81:da:00:0e:eb:19:2f:65:a6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=f62881f7c34eba793769e8acdc09708ea1d9333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:e5:a2:16:44:6f:26:63:02:e4:02:f6:d0:
cc:d5:55:02:92:80:3a:20:2e:35:72:6a:03:1e:4f:
08:9c:ae:5d:ff:30:d4:8a:18:c0:a6:db:44:00:a3:
b0:24:6c:ee:7c:f0:2d:65:a9:14:a6:44:c6:14:f1:
bf:19:1d:35:11:58:6c:78:34:b1:fe:8b:1b:ef:d3:
12:8a:4d:05:dd:ea:c0:54:5e:56:8a:a2:0e:d6:99:
e5:93:db:6c:f1:c2:0f:df:73:ff:5d:4a:63:54:ee:
16:6e:9e:c4:46:32:78:0d:4d:b5:4a:99:ef:af:93:
2f:3b:03:10:0c:7b:66:3e:ea:b9:08:3d:55:15:c2:
bb:8d:38:61:d9:d5:2b:08:41:a7:7b:a0:f8:cf:35:
f5:bb:c0:28:67:f9:74:58:f4:60:41:fa:c8:e2:eb:
d2:c3:df:21:6b:63:92:26:42:00:c1:2e:d6:e7:f2:
0b:cb:65:84:7d:1e:0f:0c:c1:b5:79:8c:dd:fc:17:
a7:17:97:b2:16:92:eb:0c:9a:1b:c4:96:b1:92:76:
6d:b6:6b:a0:7c:dc:5d:27:0a:56:3b:55:0f:1c:07:
5d:71:20:d4:9f:b5:a4:f6:3b:3d:f4:b0:3c:ca:f9:
ae:4a:c1:a9:22:8a:6e:4f:b7:aa:5c:1c:59:3e:ee:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:81:F7:C3:4E:BA:79:37:69:E8:AC:DC:09:70:8E:A1:D9:33:3D
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0a:45:bc:13:db:10:b0:5a:d4:f7:40:8d:96:56:cc:0f:b5:
c0:a7:57:4c:b9:1c:9b:54:a8:df:a5:c2:23:99:bd:57:d8:6a:
c9:16:f4:7a:37:dc:aa:a6:e6:1c:97:4a:2b:dc:9a:86:99:58:
72:63:95:f9:9d:b6:31:46:b3:49:c4:01:fd:4f:d3:a0:f3:00:
91:ad:d2:50:88:8c:67:4f:24:2f:db:9b:43:69:04:71:95:0b:
5d:40:7a:95:05:93:2c:e6:f4:ba:a7:56:1d:45:6e:79:e4:d1:
65:03:71:1f:8b:94:ee:90:68:74:b9:a5:ab:d9:52:dc:e7:cb:
2b:43:56:a1:f8:32:65:97:68:17:e0:6c:59:e5:51:c9:c5:56:
fe:e8:56:bd:d0:c2:08:39:b4:81:8c:6a:cf:e2:13:9e:0f:c3:
61:27:4c:06:c5:b9:c8:b4:c0:0d:68:04:42:53:b4:31:10:34:
ea:54:bd:11:3a:9c:1a:cb:aa:e8:ca:e1:68:03:b2:3c:41:96:
29:ae:22:32:f5:df:1c:67:61:05:45:ed:b1:1d:16:5f:e2:29:
fd:6a:34:43:07:44:7b:c4:67:38:2e:08:49:4a:9f:9b:fe:19:
8f:6b:ba:91:78:41:e8:d0:43:de:da:bd:ee:83:27:26:d0:93:
3c:32:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:32 2025 by rpki-client