Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: MHD2Ndx0FU3aztrItEEETTwErxhy6QoS6u8hdpLS4BE=
Subject key identifier: EC:0A:84:93:23:39:B2:C1:57:10:31:ED:93:69:75:E9:DF:31:82:3F
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 0194BCE0B64F80CD284336568E26F3232262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 0C2A
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: c5mTx+Shg4cuTUAgCR0XwRiNnvAygl8GcTGOdHXgJTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:4f:80:cd:28:43:36:56:8e:26:f3:23:22:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=ec0a84932339b2c1571031ed936975e9df31823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:1f:f6:83:33:ca:8a:b6:0d:eb:59:8a:ad:
73:8f:c7:03:e5:6c:b0:53:19:0d:f9:bf:46:1e:43:
bb:2f:44:f2:38:13:cb:c4:22:03:f2:17:a7:6f:95:
f8:a2:5d:46:17:7c:09:5d:f0:00:4f:48:85:e0:6b:
fc:9f:24:40:90:43:10:9a:71:64:5c:6d:2a:1c:7a:
d1:10:f7:97:1f:85:40:f7:9a:f3:c3:7b:f9:d9:33:
8f:95:a7:21:f1:f2:12:20:dd:81:29:11:b4:ef:2d:
d0:da:19:c5:7d:cb:37:99:06:e9:7d:03:4d:c0:54:
3d:83:d8:91:5a:72:17:38:9d:51:c2:22:93:02:63:
91:d7:96:12:b6:c1:48:53:68:8f:40:84:e4:92:94:
6e:ec:fa:00:21:23:8c:70:a9:b9:44:95:a1:4c:a9:
d1:13:42:59:5c:ef:eb:30:71:5f:5a:30:f4:ba:41:
b7:28:36:eb:ca:73:f5:91:c9:46:78:6d:a9:33:7d:
ea:99:8f:9a:c7:16:3a:ca:50:af:6f:5a:b3:9f:11:
8b:05:ed:a6:a0:4e:44:c2:ef:4f:14:4b:99:d6:b9:
0a:43:d8:19:27:29:48:d3:f9:2d:d1:ca:a1:de:78:
f1:43:8c:c1:90:92:6b:1e:11:64:c9:68:a5:ac:49:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:84:93:23:39:B2:C1:57:10:31:ED:93:69:75:E9:DF:31:82:3F
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c8:cf:60:62:06:aa:0d:53:db:ee:0b:f9:92:fc:0e:f9:22:
1c:d0:7b:32:89:5e:9d:16:3c:06:11:90:3d:49:95:8f:a3:49:
74:c9:5d:02:70:56:72:bd:0f:3f:73:fd:c6:36:fd:db:75:e9:
98:3d:5c:31:3f:8f:d0:88:6f:a7:98:fd:a9:d8:aa:1f:f2:06:
3d:cd:66:9a:b5:3c:ed:ef:73:bc:a4:dc:7c:39:88:1e:9a:2d:
99:cb:66:2d:e7:02:43:20:37:62:6a:a2:25:8b:25:d2:d5:7d:
72:62:f1:b6:31:48:b6:f5:95:5b:6e:c4:6d:90:92:86:63:ce:
a6:c2:85:fe:63:ec:44:87:c6:c4:16:2c:5f:b8:cb:3e:7c:06:
54:a7:d4:04:c0:a3:c3:83:61:04:da:7b:ab:5f:70:f3:1d:b6:
b2:ac:fc:90:20:82:2c:10:d0:81:14:dc:4f:da:f9:46:01:90:
d6:ba:1a:b1:ab:39:62:19:15:84:f7:3f:98:3f:0a:b3:06:71:
a1:30:1f:f7:aa:d1:fe:e2:af:18:29:4d:81:92:20:ae:aa:a8:
6f:f1:71:2d:0d:09:a7:77:b2:7b:5d:af:0f:e1:38:65:55:a9:
98:f6:d6:97:29:02:2d:eb:cf:73:c7:23:fe:af:b5:62:db:1f:
ef:f3:12:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:19 2025 by rpki-client