Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: PyvWfCgKA6e+OezIS7Uh1MIV/Za2xnr5jpKEOMWOFWw=
Subject key identifier: D1:DF:C8:62:B2:39:B6:40:9F:2B:1B:2F:94:D7:19:2A:40:87:BC:86
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 0194BBCE210EDB8D13B82CCD0EE639F4B4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 0545
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: edqpFxYbFZD9GTBa5GpRpKv3n7VaeLniSkYe40pePGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:0e:db:8d:13:b8:2c:cd:0e:e6:39:f4:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=d1dfc862b239b6409f2b1b2f94d7192a4087bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:12:53:ac:07:ce:61:02:6e:b9:b5:3a:0a:
f3:e5:9f:25:36:d1:9a:11:16:b5:a1:6a:85:d3:f5:
04:7b:74:6a:58:e5:ce:57:c0:8b:1c:58:93:90:f9:
fb:e2:6e:2c:d5:54:e1:7b:49:76:7c:d6:2f:09:e1:
3a:1e:92:e1:36:a4:16:d7:00:77:f8:08:c9:54:b8:
c2:3b:3d:d3:f2:d2:57:2e:02:88:a3:b5:65:e3:c2:
8f:7e:39:bb:97:af:15:48:5c:5c:e7:57:0a:bb:21:
da:37:37:3b:a0:a9:e1:f0:93:aa:18:33:11:d7:18:
58:72:60:71:b0:15:2c:f2:23:8e:55:94:3f:6e:86:
45:1f:84:f8:a5:05:5e:07:c1:8f:c7:fd:71:61:c1:
dc:26:97:89:7a:43:e7:68:7a:b5:c2:36:be:d3:11:
8f:ad:86:2c:eb:8f:b0:ca:c5:d5:cf:dd:7b:1c:31:
5f:fe:e4:6d:d4:a6:a4:51:72:f2:80:5f:f0:4a:ad:
e0:8b:c6:8d:5d:c0:c4:18:86:30:94:80:1a:d0:f3:
fe:3b:a6:0c:32:6f:7a:dd:f5:93:45:bc:c5:6b:a6:
11:04:dc:15:65:be:de:b4:f8:d2:31:87:ce:47:0b:
8d:7b:2f:2c:fc:b2:51:8c:5e:16:ff:66:50:71:a1:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:C8:62:B2:39:B6:40:9F:2B:1B:2F:94:D7:19:2A:40:87:BC:86
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6d:fa:e1:64:e5:1f:8d:b1:9b:40:92:34:a7:89:6c:51:a2:
78:52:5b:84:d7:31:7a:d0:6c:00:6a:00:2b:1e:19:82:8b:f7:
95:99:13:77:f4:41:61:4f:4d:91:23:57:e0:c2:c6:fa:ce:90:
27:2f:18:01:eb:68:79:fc:e1:86:a5:cd:8f:ce:0e:59:eb:43:
78:ad:b7:7c:4f:6f:f6:af:40:0f:78:53:56:7a:b2:13:4d:12:
ee:64:f4:f6:57:05:ec:3e:35:b1:48:fa:18:91:52:79:24:97:
40:fd:26:d3:a2:2f:0d:4b:b2:6c:6e:7e:f5:19:42:df:b5:52:
f0:3f:5e:d8:78:38:f4:90:33:04:29:20:4e:43:b4:42:3d:b1:
50:23:00:60:be:00:9c:7b:bc:b7:7c:63:ea:b9:ac:d0:6b:77:
ba:a9:63:e9:12:08:03:e4:8f:5e:4d:17:38:01:f6:68:46:19:
0c:6d:b3:ba:9d:cc:fb:50:c0:ac:e6:14:70:1a:6f:5c:04:06:
20:e7:9a:5b:2c:ea:be:86:2d:52:bc:e8:79:6c:12:85:62:48:
b5:56:ee:48:55:fb:c2:ad:89:16:85:f6:63:82:d0:d0:a4:79:
c0:de:a2:a3:18:1d:19:c0:b0:92:df:6a:e4:77:20:5d:08:04:
fe:e1:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:38 2025 by rpki-client