Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: 1aVflRmIJxF2YDvseZFcexJmvsbYueuKMD4KRpBXAdE=
Subject key identifier: 38:E6:3F:A3:6B:71:23:F1:87:86:8D:C2:98:7B:29:C2:43:8C:19:74
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0194BC3CAB2F5D3920A41C417F7C210C0CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 8I/osyefraYdtXK6rO9nlp5qUgBS4Garyy9cIExiUDo=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ab:2f:5d:39:20:a4:1c:41:7f:7c:21:0c:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=38e63fa36b7123f187868dc2987b29c2438c1974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:64:67:da:61:3e:07:ae:0c:48:ad:da:0e:
55:11:b5:55:60:3b:06:a4:4b:5e:34:cb:e2:be:c9:
63:8e:2f:57:6a:65:45:c6:cc:5d:55:4f:21:3a:0c:
fa:6c:65:fa:bd:c9:c8:b6:0e:c2:d7:20:94:1c:9b:
eb:12:00:5f:14:d5:6e:89:cb:c9:26:e8:e9:cb:b8:
e0:a5:9c:a2:dd:7f:82:08:c5:75:77:77:e7:98:a9:
87:22:2e:a0:40:4a:6a:2a:12:25:dd:ac:35:fd:d8:
08:68:bc:83:71:a6:a2:1e:07:cc:49:6a:4e:8f:42:
59:71:6c:e1:a6:70:91:ff:81:16:51:a9:07:54:5c:
e1:83:cf:c6:cc:df:b4:de:62:76:5a:0a:7d:02:98:
c4:9b:b1:4c:ab:39:e9:fb:ef:a9:25:49:e5:51:1a:
06:c3:94:24:5c:6a:1e:99:38:56:1b:da:fa:ea:95:
9e:cf:4a:e5:74:69:05:73:4b:d0:21:d7:0c:6b:08:
f0:ad:6b:a8:96:69:3f:f0:f8:7f:68:bb:a7:43:90:
7a:a7:53:c1:f8:22:45:87:d7:e6:c9:17:af:1a:d2:
e9:da:6a:76:05:98:e6:c2:de:e4:98:96:37:cf:35:
23:da:8a:63:1b:56:ef:d6:55:31:fc:73:ac:dd:5d:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:3F:A3:6B:71:23:F1:87:86:8D:C2:98:7B:29:C2:43:8C:19:74
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:21:cc:5e:39:c2:ed:f7:9a:11:99:24:e0:8e:66:4b:30:9a:
94:98:22:9c:cf:23:04:b1:02:32:29:01:13:3c:38:c8:b4:26:
6b:1b:8c:ec:d6:a0:f2:07:b9:6e:55:3f:a9:7b:30:b2:02:c5:
1a:fe:2d:f5:86:c1:2f:66:fd:32:2f:bf:58:23:36:62:f6:02:
60:de:5c:a0:3a:b3:6e:f9:23:35:3f:81:68:0e:8a:d4:ea:94:
f4:8c:6b:2a:dd:a6:eb:54:a1:d5:4c:24:f7:42:96:21:ac:43:
eb:77:40:00:5b:82:89:43:1a:0a:b1:e9:0f:dd:ee:37:f7:07:
6b:96:a4:84:b1:b9:2c:a3:63:f9:3f:0c:1e:2d:9c:14:35:81:
cb:cf:2f:f7:1b:fe:7d:e2:5c:9f:c2:00:6c:71:e7:10:02:ed:
f3:d9:56:94:a4:56:d1:81:a6:43:c6:79:6d:2b:bb:32:fe:ed:
38:4a:e9:f9:9a:2d:8b:85:0f:01:a8:8e:25:d9:0a:49:8d:89:
64:87:45:f1:ed:b9:38:88:ea:9c:6a:05:d7:9e:09:0d:c5:f1:
6d:5f:c2:bf:e5:ae:86:06:64:ab:53:ce:04:70:94:fc:f2:34:
a1:93:e0:c8:d4:06:cc:0c:93:7a:e5:4d:ec:d2:ea:1a:3d:bf:
97:55:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:25 2025 by rpki-client