Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: xbBWTsRstBG+e//fLPsgMAHyZz5EUPExNXbTziXEPz0=
Subject key identifier: 8C:9B:82:D1:C2:D4:CE:2B:EE:F1:B4:4F:9A:1A:84:BA:65:BE:6A:C0
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 0194BC3C179F78197F3443922626FF18F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: +hrFjSRPKi3f4WynCQdRIxQzTK5QAcZoXQXB6kB1myM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:9f:78:19:7f:34:43:92:26:26:ff:18:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=8c9b82d1c2d4ce2beef1b44f9a1a84ba65be6ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:6f:02:a8:6d:cc:af:3a:7d:20:e0:47:ed:
78:3e:1c:9d:8a:a3:90:8b:49:a7:13:b3:c4:24:e3:
a7:9b:ff:80:ef:45:de:05:97:a8:ca:94:e5:0f:b1:
7e:76:e1:cf:80:b2:0e:4e:c4:45:c0:40:4a:36:dd:
05:cf:30:5a:0b:8c:72:d0:f1:5a:64:90:d5:f9:a7:
5f:0a:6c:29:f6:19:7b:39:15:00:d8:19:e0:ee:e0:
b6:4d:26:49:c6:8f:ba:f5:df:af:bb:76:13:17:31:
b4:47:a7:15:83:4e:e5:a5:88:9c:3f:d9:1c:21:f8:
af:b3:b9:0f:28:2f:cc:ad:e5:4c:08:e0:ca:1f:b6:
a2:59:76:27:e4:cd:ae:4b:37:e0:63:72:be:5f:ca:
37:8f:d1:3a:7d:d5:f4:56:06:61:7a:d1:d7:d2:3b:
90:f1:44:d4:c1:c6:ba:7a:50:64:6c:08:f4:17:e7:
98:27:74:93:47:db:fb:b5:d9:54:eb:f9:c5:e8:20:
1f:ae:08:5d:17:24:dd:e8:41:64:2f:db:c0:da:25:
0d:fe:a8:8b:5f:4e:01:ee:92:df:8e:17:54:52:8f:
a1:48:10:9c:9e:d6:cb:b0:1d:92:23:00:8e:8d:1e:
e7:be:1b:07:03:0d:02:3b:03:8f:df:83:60:e6:84:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:82:D1:C2:D4:CE:2B:EE:F1:B4:4F:9A:1A:84:BA:65:BE:6A:C0
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1f:f4:5f:f6:04:58:cc:d0:0a:80:fd:61:38:dc:ed:e4:c2:
15:8c:dd:87:2b:1c:4d:e8:a5:55:25:34:6d:8e:4c:d1:e2:a1:
8f:c8:72:64:29:da:e7:b7:0c:b7:0b:4d:1a:14:e5:71:cc:d5:
34:15:27:da:a2:98:0f:21:cb:05:53:42:36:a6:03:3d:31:12:
5b:e7:67:3f:74:df:8a:30:0a:cf:b3:28:1d:79:e1:18:97:12:
dd:8a:50:a9:98:c9:31:24:ff:bf:be:58:f0:41:db:58:40:cf:
d8:2e:54:02:2e:7d:60:c6:cb:56:6a:f0:92:72:9b:4f:db:df:
b7:e9:c3:0d:c3:01:0f:0f:90:85:8c:04:49:58:f0:82:c8:61:
21:f3:02:7c:d2:15:bf:11:1f:fc:87:3f:ec:d4:4d:08:62:bd:
89:c1:55:46:24:53:c3:b3:4a:5d:b5:14:b2:53:04:31:a9:db:
1c:59:f0:90:5f:4e:ac:15:21:5d:b7:b8:af:6f:2b:af:fc:e5:
51:ee:4e:70:53:de:63:ea:ac:0a:41:40:16:6d:a7:47:d6:a3:
33:92:2a:4b:16:34:5d:d4:0d:89:9c:f9:21:50:b4:79:bf:f3:
e4:13:11:fa:f4:ce:e4:ec:c5:b3:03:08:c3:9e:12:bf:4c:51:
67:1f:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:50 2025 by rpki-client