Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: kMYCmH7a8U+nTbudnsE3iIT1485/XpvGQD60XzQm1Hw=
Subject key identifier: 18:38:30:C8:1F:C9:B4:62:4F:85:B1:7E:B2:5E:D6:A6:75:6E:29:CB
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 0194BD85A6BEABB385D39B0E4D42E83E87EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 09F2
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: awnCmNxQWx40wRh6hjP5gCv59YDyGIBhyPCus96cjH0=)
2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a6:be:ab:b3:85:d3:9b:0e:4d:42:e8:3e:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=183830c81fc9b4624f85b17eb25ed6a6756e29cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:f9:d1:f2:20:2b:dd:23:a4:5b:1d:05:48:
ea:54:a5:4d:40:06:66:4e:f3:e6:e5:36:90:cd:91:
d2:da:6a:c6:18:3f:d1:2b:56:f1:0e:ca:cb:6c:50:
0a:a7:17:3b:68:2c:10:7f:82:fb:e5:01:b6:0f:40:
84:8b:c6:e6:d1:7d:c9:e0:26:c3:46:da:c4:1b:0c:
02:10:f9:59:3c:30:c9:b8:9e:c1:11:9f:c8:8f:c6:
1d:0d:48:c0:ad:86:aa:cd:20:fc:c9:49:8e:0e:86:
4d:a1:49:f4:4b:fd:f1:a6:6b:f8:63:03:6b:6c:79:
02:61:b9:6e:4a:8e:a5:8c:db:b5:da:79:bb:9a:ab:
fe:84:8f:44:cb:5b:0e:eb:94:c0:87:83:10:fe:da:
71:70:6e:f1:63:c3:7d:82:d5:77:80:2e:0c:12:50:
59:df:17:ad:41:20:b4:3e:ac:47:70:13:8b:4e:00:
1f:f5:86:3b:6d:a9:88:b7:d1:a7:79:39:5d:df:d4:
62:47:07:3c:66:7f:ca:ba:12:a1:15:e8:ea:c8:35:
f0:28:4a:7f:13:24:ae:96:82:85:30:95:19:c7:c1:
ff:89:b3:9c:18:4a:8c:3c:1e:aa:f1:cb:b3:9d:33:
7f:89:e7:3c:b7:fc:45:97:22:b7:bc:d6:9f:03:60:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:30:C8:1F:C9:B4:62:4F:85:B1:7E:B2:5E:D6:A6:75:6E:29:CB
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9a:13:59:d6:a6:27:e1:54:0e:7f:ed:b5:ce:3c:03:75:93:
53:63:f3:89:1a:85:2f:99:f7:3b:29:b5:65:dd:d5:c3:ef:0f:
be:f6:63:63:13:80:6f:cb:93:f5:77:41:19:17:23:53:2b:f5:
7c:e9:13:30:d8:0a:5e:16:42:51:c8:ed:f5:15:4c:81:13:14:
4f:ae:f6:96:09:ab:ae:9e:8f:23:67:c0:75:2f:09:28:13:19:
aa:9c:71:e0:34:9f:e9:fd:d7:50:e1:4a:4f:d2:2d:1c:df:77:
04:d5:cb:67:a5:03:28:05:7e:67:ac:ec:7e:4e:63:ba:79:13:
9e:86:70:16:07:41:f3:08:a4:da:8e:9e:52:f2:7c:0c:af:50:
ff:01:cb:e0:bc:07:f6:82:03:0e:10:68:97:1c:bd:7e:75:0f:
e4:bc:ff:81:fa:0c:0d:f9:61:fb:f9:e8:36:c3:d4:4c:1a:a5:
86:06:4b:cd:93:d3:da:2b:8f:ab:98:fc:aa:66:9b:22:74:d8:
29:72:d1:e2:8f:21:73:e6:5e:09:88:17:96:6a:c4:ee:ef:57:
04:7c:5b:6f:ab:10:3d:e3:64:47:78:05:6d:f9:b1:c3:e6:d2:
61:84:d3:05:76:08:b0:88:79:89:36:72:08:42:c8:71:99:cd:
6d:05:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:11 2025 by rpki-client