Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: 1TvHtGViY/bOnlEH5DYs8saQ7zZcVdluJGMROSnztWU=
Subject key identifier: 67:12:F5:10:4F:C9:45:CF:D9:4B:D3:5F:8C:7A:42:18:3A:94:E0:B1
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 0194BD85627ECB78B10EEAC77D35D0D4D6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: Y9rlHlFjFAEmLruiDLrXYC9x4QF/5/zLk4VrrFgAOcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:7e:cb:78:b1:0e:ea:c7:7d:35:d0:d4:d6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=6712f5104fc945cfd94bd35f8c7a42183a94e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:43:1a:82:25:3f:69:2a:f6:fe:b5:68:4d:
34:69:f9:15:73:32:08:b2:ec:d8:39:31:08:14:da:
0f:34:9a:36:6b:9b:53:10:05:a1:25:4a:dc:1b:f9:
48:aa:25:1c:53:41:44:1c:bb:31:5c:ea:59:b9:e4:
11:e4:02:62:36:ac:76:17:35:89:32:45:a2:b5:6b:
18:2d:75:28:28:e9:78:93:1c:de:5a:d3:a3:89:10:
d6:a1:ef:34:09:4d:99:4c:ce:f6:59:ce:b5:e0:f7:
92:8e:90:d2:8a:37:a1:5e:4a:3f:30:a6:28:84:4e:
eb:87:db:04:fb:1e:5b:ba:0d:85:2e:e7:d0:9e:b7:
57:ab:91:3e:e4:02:bd:3c:0c:50:d0:9f:59:2b:f7:
3f:63:30:7b:31:5f:79:99:88:0d:5b:d4:10:cb:0f:
e9:3a:d8:d5:07:f1:b3:06:89:d9:51:2f:f7:09:f4:
bd:98:45:f2:60:f4:de:8b:e8:b7:ae:bc:6d:c9:a1:
f5:34:f6:57:06:0b:d2:16:06:ee:16:2b:9a:36:a6:
e6:9f:44:d6:85:37:47:7d:af:4e:24:1a:34:ba:dd:
4c:91:ac:e8:19:5d:c5:49:99:89:cf:73:0f:0b:77:
9a:fe:8c:72:ef:d0:87:1e:d0:dc:a1:71:ab:9f:14:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:F5:10:4F:C9:45:CF:D9:4B:D3:5F:8C:7A:42:18:3A:94:E0:B1
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:54:46:a4:5c:29:fe:82:2b:a4:88:47:d2:bb:3a:ad:3b:97:
1c:01:48:8e:0c:ef:79:9e:0e:1a:02:ad:e1:56:8d:73:20:1e:
ea:ea:b8:10:b2:25:fa:f2:09:1a:e4:de:dd:2b:f5:b6:b8:0a:
93:bb:59:7b:4c:70:b6:92:3c:5f:fa:15:05:e1:4c:d4:34:bf:
1e:c2:03:17:9d:8e:58:5f:9e:fa:fb:15:26:08:ba:36:40:13:
50:23:99:a0:db:a2:29:4c:84:78:a2:a2:ef:82:ba:22:00:46:
9d:35:29:69:50:80:40:fa:13:4b:f1:a4:97:aa:b1:78:31:36:
17:25:04:c4:66:b2:da:0f:53:bd:83:40:c9:d6:14:48:87:2a:
1f:e2:24:6a:93:5a:4a:f6:c8:cd:9b:bf:1f:31:0a:9c:77:93:
c5:7d:96:3f:4a:50:51:e0:d7:96:86:02:bd:5c:2d:de:8d:42:
b7:7c:de:6d:25:9b:2e:92:f6:87:33:77:00:1c:33:4d:d2:5d:
19:c6:e1:52:4f:79:ef:87:ec:9d:24:ad:50:ff:32:1b:ac:6d:
6d:5c:ef:ff:ae:ad:da:3b:21:a6:60:0f:32:2b:5e:a8:89:49:
54:14:ce:a4:53:11:02:7f:46:09:87:99:2d:ce:9b:23:8b:b1:
16:39:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:08 2025 by rpki-client