Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: J3zG9lscDJV6qu0X+6Hv+fqn4AG1oCef8zByKB/Ib5s=
Subject key identifier: DD:EE:D2:93:0A:1A:5F:25:52:34:BD:30:8A:EC:53:99:3D:24:B8:BE
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 0194BD17984E7AE508133F11344040D57C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=)
2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: QSd67nK8tFMMtx11Y7b+nnzYlgqZTpMX+6Z4q2/5+9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:4e:7a:e5:08:13:3f:11:34:40:40:d5:7c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=ddeed2930a1a5f255234bd308aec53993d24b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:9d:7d:09:86:12:f3:d1:e5:90:13:de:9e:
e8:03:2d:f7:ac:f8:9f:6a:6d:84:d2:1f:97:2e:45:
85:7e:b1:6c:ad:f6:c7:37:1a:42:77:81:62:fa:59:
40:98:0a:68:40:0b:19:6a:3f:3f:9d:59:b9:d8:73:
ac:e7:37:64:df:64:93:de:11:42:5a:88:01:78:99:
84:ce:17:af:3b:91:ca:91:83:a0:ea:26:54:0d:13:
90:d3:a5:7f:13:74:d1:81:69:bf:3a:4b:e8:b5:38:
78:1e:ab:c8:55:11:60:15:3e:dc:4a:dc:62:5e:f0:
a9:49:3a:d1:9f:fd:54:04:72:87:6c:b2:ac:a9:b6:
43:de:65:31:ce:fe:56:bf:73:eb:00:b3:3c:95:77:
8f:9a:8c:2f:f1:97:86:d1:e7:29:d1:b3:7a:a1:84:
9c:35:11:dd:58:26:a2:15:a0:2a:4f:08:35:78:c5:
97:97:bf:e3:06:da:b8:48:e7:8b:ab:b0:6c:27:57:
74:b3:83:2d:69:47:3f:45:95:b7:45:64:93:32:4f:
67:36:bc:93:f3:c5:4a:5c:7c:fa:fd:b7:c8:9f:b4:
4e:3d:62:ce:50:c4:0b:05:e5:86:d7:24:ff:58:8b:
5e:dc:2a:db:95:73:ea:a3:7f:1e:79:b1:bf:f2:b9:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:D2:93:0A:1A:5F:25:52:34:BD:30:8A:EC:53:99:3D:24:B8:BE
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:3c:04:8b:66:e3:40:56:24:cc:f6:b9:b0:fe:e7:fa:ac:
32:25:7d:e1:bf:a9:ae:64:d8:61:54:81:22:10:33:a3:e2:e0:
14:04:69:47:43:ac:49:9b:82:d8:70:27:26:59:ee:e4:74:48:
91:46:d9:ab:4c:48:bf:72:fd:b2:47:9d:7a:96:ba:16:27:22:
fe:50:65:fa:79:d2:db:c6:23:00:4c:6d:49:13:a2:0e:55:75:
45:7e:fd:f2:3f:a4:48:1a:70:03:1c:f2:62:08:d5:7b:a2:f4:
89:28:ec:74:01:10:06:af:dc:89:c8:f8:71:4d:b7:12:bc:89:
a9:e3:57:20:dc:5b:f2:93:3b:f4:cb:24:aa:55:5b:37:16:ac:
c1:61:7f:74:64:45:06:cc:b9:c6:e2:06:d4:0a:64:8e:16:73:
4d:b6:77:b0:d3:1d:50:66:63:a3:a2:0f:e1:bb:c5:66:94:1d:
1b:ad:36:6f:11:00:af:e8:f4:0a:99:96:73:d2:c7:90:ea:d6:
f7:05:0e:69:f7:d0:b9:7b:6a:18:2c:db:17:0c:e4:05:9c:26:
be:45:a1:29:0f:2a:bd:aa:c0:6e:84:8d:d1:23:eb:7a:20:94:
d0:44:05:8b:37:08:19:95:ba:fd:36:7b:bc:88:41:a1:29:e8:
be:f3:fc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:58 2025 by rpki-client