Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: oKlNod6u9nQLr6kSGgqTzjeB/0uOTvQE2x33EZ1FJhQ=
Subject key identifier: E6:37:FA:81:12:D6:AD:90:81:18:CA:B8:6C:47:20:A5:73:90:E3:25
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 0194BCA9790310C7CD85A1E9998F0A4DE090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: ktgsQbkmdLeFK5wKZHJD+9lpZ+mMLJyllf9ezFQuzE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:03:10:c7:cd:85:a1:e9:99:8f:0a:4d:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=e637fa8112d6ad908118cab86c4720a57390e325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:cd:86:d1:d9:2f:8d:75:71:ba:ef:27:b5:
6a:e0:3f:5f:fb:d1:4a:c9:d9:89:bd:ba:41:9f:c7:
78:94:16:41:57:dd:2e:d0:1d:66:3b:fc:ba:14:b4:
1f:c5:c2:38:03:23:27:9e:d8:9e:98:47:34:e6:dc:
d8:11:7a:15:43:b0:4b:4e:0a:4a:35:32:9c:c9:bc:
5d:ed:e4:a3:0e:9f:b6:c9:61:12:62:ab:08:90:0d:
10:60:29:bb:8b:1d:67:f1:08:64:20:d3:b9:1f:5f:
6d:57:7a:ac:8f:fb:ad:56:5e:64:04:f7:1a:6b:75:
96:a9:c0:5c:21:72:8e:0b:fb:8e:15:ce:88:49:8c:
1e:18:9e:11:e3:2b:6d:b7:fb:5f:77:0e:9c:3e:79:
47:e7:2c:47:35:96:76:cd:75:55:4c:3c:db:f5:f5:
4f:95:5a:69:a7:57:9f:c3:88:9f:cf:44:7f:f7:1f:
dd:c4:f0:1f:b9:94:b2:78:77:a6:57:39:9e:a4:2e:
31:4a:3c:5e:b9:32:82:a4:cd:05:0f:d2:85:93:fe:
f6:20:2d:c3:d9:76:1d:38:29:8a:9b:65:98:95:44:
e7:28:b4:f8:03:8c:3e:ba:3a:e1:a9:b6:88:51:6f:
98:03:be:c0:f3:b2:b4:f0:d2:93:a7:71:a9:50:8d:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:FA:81:12:D6:AD:90:81:18:CA:B8:6C:47:20:A5:73:90:E3:25
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:3c:a1:6f:0a:ef:b6:00:b9:6d:e3:ab:15:83:a5:9d:86:
52:57:35:95:c8:db:ed:41:40:a5:1c:52:c5:b0:d1:a5:79:2b:
39:39:1d:82:33:1d:df:d4:fc:4f:8c:0d:52:c7:c6:a1:3c:a5:
1a:04:55:a7:b1:49:4c:1c:00:00:05:51:b5:92:af:38:2b:86:
f0:b0:ea:02:9f:37:31:5e:93:bd:0b:d4:5a:91:3f:a7:9d:e0:
2c:31:e0:56:ca:d7:d6:b6:40:77:5f:88:d6:2b:2e:d1:2b:4b:
ee:44:6d:5d:da:cb:fb:ac:64:c6:24:e0:47:5d:f1:f8:4f:ef:
e5:d3:07:3f:7d:c0:90:d8:26:33:fe:8c:79:99:6c:a6:37:8b:
6f:d4:50:61:ca:04:7c:6b:45:0a:4b:b7:f7:87:da:82:41:c2:
63:8c:79:d3:04:d5:44:1b:a6:fe:f9:d1:fc:0d:ac:d8:22:7c:
22:77:46:3c:6f:20:b9:12:99:7e:ef:64:b2:53:f9:bd:0e:88:
fc:71:dd:95:85:ec:f8:71:70:65:1e:52:a9:50:25:d6:6f:63:
4d:df:e4:31:36:e8:7f:22:22:87:88:3e:13:21:15:28:71:3d:
61:38:c8:e6:b5:af:01:f6:f8:9a:7a:7d:45:d5:b4:c3:4f:38:
e2:55:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:05 2025 by rpki-client