Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
File: vflgsO5rxdD2oMZKafL4Yln9zVg.mft (raw, json)
Hash identifier: +Y21X8OfZ3wgXmUwo/hpGRSqrEv1WhprdCuNU3PftHU=
Subject key identifier: 6A:59:C9:77:3E:4B:D4:FB:99:4A:DF:92:FE:0A:95:64:76:B2:64:AA
Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Certificate serial: 0194BD4E9DA64C575942713F9A0B95EAEAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: rEdLOhgJ5xMWvLwmv0wizm-cOW0.roa (hash: 5KEvRv7KqMLhpYGvFA0tU5bp6PFE1qlP3ELvibmeSX4=)
2: vflgsO5rxdD2oMZKafL4Yln9zVg.crl (hash: 4DKdoX12/NQaIxY5eajx8mtQ3JKdYUCXP7lkwbv8wwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9d:a6:4c:57:59:42:71:3f:9a:0b:95:ea:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=6a59c9773e4bd4fb994adf92fe0a956476b264aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:a1:42:ac:83:f4:1f:55:11:ac:23:a1:72:
a0:a7:c2:59:5d:bb:6e:53:5a:04:a6:f4:0a:1e:50:
a1:73:fc:b6:aa:55:5a:9c:aa:90:d0:cf:9f:aa:cd:
cb:c9:d8:36:6b:84:d0:91:13:b4:54:42:68:02:7a:
11:11:c7:6d:87:39:78:35:dd:f9:a3:25:7c:1c:37:
17:a5:69:74:1c:37:5e:2d:1a:a7:ef:11:46:f4:28:
b2:3a:57:cd:77:d8:10:95:27:5d:ac:23:c1:57:ef:
1f:5c:b8:a4:42:ce:48:02:68:83:39:80:f0:c7:51:
b3:9e:13:20:a1:cd:fc:00:ec:43:a6:cf:d1:4f:cb:
7d:0b:ef:dc:ff:76:b4:a2:24:98:ca:0a:bb:34:08:
ab:e7:87:ba:15:14:ca:e0:98:91:4a:a2:d9:b5:a0:
a9:22:b4:aa:d2:5e:dd:23:9f:a5:de:6a:a2:b0:e3:
40:dd:f4:0e:ab:3c:74:88:2c:87:7a:bf:27:27:b1:
3a:a6:9a:77:f3:d2:d4:21:b3:c6:49:1e:b6:fb:fb:
c4:5a:b0:56:65:f9:e6:cd:c5:1a:42:ac:c7:79:86:
ec:fa:3a:b9:29:f0:78:8b:99:61:52:43:df:1d:97:
d2:6b:e3:67:e5:6f:b4:3b:73:1f:cc:40:0a:4b:0a:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:C9:77:3E:4B:D4:FB:99:4A:DF:92:FE:0A:95:64:76:B2:64:AA
X509v3 Authority Key Identifier:
keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:12:e5:ae:8d:1e:00:3e:d6:10:e4:6d:3e:c1:29:82:34:
48:3c:63:f0:e3:81:46:c8:6a:94:65:d3:40:80:12:14:e6:68:
f8:14:f1:6a:62:1c:48:d5:18:c4:b6:13:cf:28:d0:5e:34:2e:
57:b6:44:bd:ef:71:5c:44:a2:e2:fb:1e:cd:27:d2:a1:91:b0:
23:cc:ce:fa:ad:57:2a:d7:5b:cb:10:88:3b:86:61:35:d1:7d:
c9:42:c8:e2:44:ac:8d:e4:fc:87:b9:d9:ba:5e:1c:15:bd:37:
96:96:67:e0:0d:d1:a2:15:2c:d3:01:59:6d:ce:6d:3b:bd:34:
bb:05:66:05:20:cf:e7:f2:e2:00:e2:0f:53:cf:e4:8b:e3:38:
b0:0b:05:3f:d7:90:ee:dc:01:6f:80:27:18:da:2c:21:10:a0:
91:67:19:63:f7:e0:22:01:4f:eb:7e:41:d1:e9:58:40:b5:12:
c8:20:9a:a5:f4:30:4e:0f:f3:1c:49:38:ae:1f:59:09:f4:45:
06:ff:24:00:64:e8:e1:ca:ec:72:5e:6e:df:b1:c1:7d:bd:a4:
24:6e:02:de:7c:4d:8c:60:fd:7f:19:1e:db:9c:91:cb:8f:72:
47:36:66:4d:39:92:d1:02:60:d2:f5:36:66:5a:ac:f1:88:3d:
1e:ee:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:54 2025 by rpki-client