Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: u+sEqspvKHNh3oClmLEBkl31D4Nc8dcHO24E8SDuq5U=
Subject key identifier: 60:06:8B:E3:F6:67:2B:56:04:38:2F:43:BE:B7:95:7D:6E:BC:47:6F
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 0194BBCDE4B64AB1F7F736EAF0A8496DB545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 0E4D
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: E1BYiawRKxvmKPqWm2Rcys1dVY2ZdSNN0K1rO6vvqlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e4:b6:4a:b1:f7:f7:36:ea:f0:a8:49:6d:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=60068be3f6672b5604382f43beb7957d6ebc476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:a8:9f:e1:5d:b5:f6:33:02:2d:1d:f6:07:
7e:63:8e:70:ba:93:48:b9:c6:f6:b4:63:36:8c:42:
1c:a6:ac:99:17:ef:68:8c:7f:1b:8c:eb:16:48:d5:
ec:30:ee:05:48:f6:92:0c:e7:4b:ac:a8:0a:24:38:
c9:27:84:f7:ea:b2:fa:60:b0:52:8c:88:7a:89:b1:
57:45:6f:95:f6:93:13:bf:a3:d2:5c:40:e4:1d:78:
9e:0d:45:38:c6:0f:08:f3:60:1b:34:1c:2c:02:ae:
88:54:8f:bd:58:f5:ab:6d:01:bc:0c:97:18:14:45:
64:f5:bd:ec:68:0b:9d:cb:fa:00:d8:f8:c0:a4:c6:
17:1c:25:92:e8:22:4b:c0:f0:7a:b1:9e:a2:85:5b:
6d:7f:65:47:c7:34:35:51:59:c4:af:d3:72:32:52:
cc:ae:e1:a7:53:10:1e:ea:53:b2:19:4e:e7:54:f8:
8d:00:b2:90:4e:7b:07:1f:0f:fa:48:e3:00:05:5b:
19:14:5f:23:e8:a8:5d:88:f1:9b:1c:42:03:2c:bd:
eb:88:33:e4:fc:22:db:d0:42:c1:ad:1e:bc:8b:d0:
ca:a4:86:47:0b:f4:4c:62:58:6a:ba:c3:99:80:10:
0a:5a:c3:4d:eb:7f:9c:3c:9a:35:9c:78:52:36:ea:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:8B:E3:F6:67:2B:56:04:38:2F:43:BE:B7:95:7D:6E:BC:47:6F
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:32:54:82:3f:13:19:e8:74:2d:7e:c0:09:14:f5:da:fc:b5:
d4:ad:77:32:75:5b:3c:cb:88:03:33:45:fc:35:cb:85:f2:c4:
97:11:3b:a5:61:f1:3d:19:e1:d3:8f:7e:d5:16:05:34:ea:13:
59:52:ec:cb:18:54:a2:6d:0c:a2:df:70:9b:69:5a:16:98:da:
5d:14:28:9f:62:47:69:e8:8b:32:87:d6:98:e9:b7:9c:1d:d9:
4a:c2:4a:28:73:29:75:6a:5f:52:8c:4b:96:b1:18:33:10:06:
13:36:58:2d:15:70:9f:b0:c3:ef:b4:17:67:9b:09:d6:3c:7c:
5d:6a:50:00:1a:4f:e9:77:a2:64:48:cc:e6:29:df:19:ec:e0:
d8:6a:b3:ec:e0:27:b1:7e:29:5c:be:7d:e5:07:f9:10:92:b6:
61:af:ec:25:47:c3:26:aa:e5:61:b1:e8:0f:fc:91:99:a5:dc:
9b:cc:0e:74:d3:f7:b2:ef:65:4e:ab:aa:73:f3:fd:34:53:12:
d8:7b:36:4c:15:a2:39:aa:4d:f9:e3:af:4a:9d:b1:33:1c:55:
ac:6a:3a:2d:92:0f:be:59:84:de:37:ec:9f:f1:e5:a9:af:d0:
1f:0c:f5:d8:68:62:ac:8d:a6:6b:9e:f0:7f:a2:0d:47:73:e5:
7d:4d:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:48 2025 by rpki-client