Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: xnUH1rIYLwG66MX2JjYWMAO0lqyzirr64dmJm+zhupQ=
Subject key identifier: 7E:B1:47:27:AB:CA:92:30:13:97:0A:71:3A:07:98:52:F7:12:1F:FC
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 0194BCA993C2F70E50FD667ACE2C36309748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0824
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=)
2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: CYiUJlCDLDSCwrzjXkEYphEufoVkyJ8BDIb+UlUsd/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:c2:f7:0e:50:fd:66:7a:ce:2c:36:30:97:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=7eb14727abca923013970a713a079852f7121ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:2a:f4:75:c4:37:2e:75:1c:23:8a:c7:cb:
06:c7:9d:2f:aa:d6:6f:60:8b:16:e2:ff:ed:d7:ae:
6e:5b:a3:6e:00:59:28:8a:a8:1b:8b:61:86:16:7e:
80:5a:6c:c3:93:9b:3c:dc:25:ff:b8:d3:58:34:b1:
bc:73:6f:f1:e9:3c:a8:aa:25:a9:15:23:98:ae:31:
ec:38:ca:ff:a8:67:fc:00:55:ba:11:cb:76:0a:8a:
ef:35:67:7d:eb:02:fb:95:73:fa:f8:98:9b:73:f5:
55:e2:cb:17:e0:e4:6c:70:76:39:85:7e:25:e0:b9:
d4:c3:7e:1a:9a:1f:b1:52:dc:2b:28:6b:8d:2c:57:
67:f4:79:b4:a2:7d:c4:29:b8:b5:a5:d1:88:dc:bc:
b3:d7:b7:26:f7:1a:61:1d:7d:a6:24:77:08:17:e6:
d7:8c:0d:e3:44:31:14:6b:21:49:92:b6:3a:34:87:
c9:c9:31:2b:15:45:27:17:bc:95:05:06:1f:82:89:
1a:22:0f:11:4c:b7:34:c9:44:f9:7e:59:25:e0:c1:
cf:c1:4f:01:30:89:49:08:4e:46:5b:32:83:83:f4:
15:84:02:c1:f8:bb:8c:9b:a3:46:46:6d:da:d7:cf:
ad:04:58:eb:0f:19:b8:27:12:54:32:70:20:18:c3:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:47:27:AB:CA:92:30:13:97:0A:71:3A:07:98:52:F7:12:1F:FC
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:da:14:93:c4:60:dc:ec:87:e9:f4:b5:53:30:22:82:86:
aa:4e:9d:10:9b:39:11:2d:0d:78:2c:4c:c9:2a:94:8c:4b:f8:
22:d1:0f:75:cb:43:6f:85:0d:c1:a1:68:f2:94:fe:75:b6:dd:
1d:8a:e4:95:11:25:ec:1f:b2:07:70:95:7f:c6:f6:9b:04:c6:
74:e5:c2:25:bf:74:80:c1:d9:72:9d:aa:84:a3:23:cf:65:22:
f8:52:55:31:60:0d:68:ed:17:ae:9b:22:9b:f7:34:01:e5:a6:
c5:30:49:74:33:22:c9:ac:a5:27:59:5a:cc:66:f8:b6:34:c5:
03:d2:27:92:f4:98:09:49:b9:5f:8a:b0:ad:5b:e9:1d:2b:7e:
41:bf:e5:08:5d:70:d8:f2:d1:24:ce:02:0c:b6:69:ef:44:44:
34:41:58:7d:b8:9d:c1:75:94:8b:36:5a:12:ee:5a:88:27:2f:
29:a8:d8:d2:f7:35:af:f7:ba:f2:4f:ce:36:52:28:0b:43:46:
c9:c1:e5:99:47:a1:b2:72:f6:7a:a5:08:5b:88:3c:68:7f:8d:
d8:56:b4:b6:3b:9d:e5:da:67:53:67:04:27:1e:83:8a:8c:7b:
2e:c8:a8:01:f0:60:e7:cf:92:6e:4b:30:75:ab:a3:9a:2f:6c:
ea:ed:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:17 2025 by rpki-client