
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: K3YQJ60WO/9BHLbGNn/BbCoXxZMKnBeLBdKJoBqnnMk=
Subject key identifier: 16:2E:8D:CC:63:D9:25:4B:E3:02:5B:59:4B:AB:F0:C1:71:25:A5:34
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 0194BD4E5BCC922DB543285B3CD87C9FB4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: qTDPj1H1rw6l/JM8kkoXE0Aan/Sx6DdSKbvbc7kIX+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:cc:92:2d:b5:43:28:5b:3c:d8:7c:9f:b4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=162e8dcc63d9254be3025b594babf0c17125a534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:e4:f6:a9:9e:b1:8f:92:5c:37:e4:57:d0:
84:f5:8c:bc:5a:51:8e:42:dd:74:99:d0:a4:af:c4:
02:90:ff:d8:34:f1:e0:ca:c0:30:1c:15:81:36:4c:
7c:e1:5c:3b:8a:8d:9c:bd:86:7b:d9:02:a1:08:11:
f4:12:67:d9:45:f4:b3:50:b4:87:d0:33:e0:50:8a:
56:74:ae:18:0d:5a:45:6d:ae:a1:6f:9b:fc:f6:7a:
ca:d7:69:22:88:d7:c0:a7:fa:8e:96:cd:84:76:ed:
c4:5e:4d:42:f2:69:4a:e5:0e:a9:02:52:a5:2c:37:
15:59:be:30:ee:6f:e8:12:86:9f:11:44:e8:1a:d6:
f5:3d:dc:af:1a:3d:88:25:f7:22:8b:e2:a4:9e:5f:
d4:f2:50:10:31:79:eb:de:ff:89:9b:7b:8e:57:47:
41:2e:d4:ba:7d:78:8b:a8:ec:78:44:0f:98:75:bd:
e3:2e:0a:43:7b:f8:19:96:54:97:75:35:fb:a4:a8:
47:81:30:2b:1d:a3:a0:8b:9f:53:d2:f7:1f:12:ab:
01:f7:ae:9c:8d:0a:21:ab:1f:2b:06:a0:2a:03:7f:
cf:86:2a:e4:7a:c4:c2:f1:20:ef:20:41:b0:64:98:
53:03:30:2d:6d:08:06:c1:79:5c:57:f0:bc:cb:e3:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:8D:CC:63:D9:25:4B:E3:02:5B:59:4B:AB:F0:C1:71:25:A5:34
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:5f:3d:d7:ff:4d:4c:9f:67:aa:33:e6:56:28:fd:a2:7f:
40:de:1b:57:3f:27:5f:0b:ed:3e:ac:01:f0:f6:72:d3:d3:85:
bf:be:89:08:f1:a7:95:c8:ee:df:cc:76:a9:94:29:7d:fd:d2:
03:c6:8a:a2:ac:c5:f1:6d:2c:bf:f7:d8:67:8a:cb:0a:3b:97:
46:13:d7:69:e0:de:3c:94:f7:cd:b6:7b:4d:4c:d1:bb:31:47:
09:e5:cf:95:c7:4a:1b:2c:19:d7:cc:7b:d8:01:62:a7:83:a7:
f0:e7:c7:c4:0a:a6:79:6d:b7:b6:73:6f:5b:d2:80:07:dc:d1:
85:3a:c7:67:cf:97:9d:d1:50:a5:45:6b:69:88:1c:a1:4b:f8:
08:77:67:a6:62:91:29:25:34:af:e2:dd:f0:97:f2:89:29:3e:
63:30:2e:ff:c3:2a:98:37:2d:98:55:79:fb:db:4f:fc:c1:4e:
33:73:96:fd:b7:fa:c8:8a:1f:57:57:95:92:8f:9b:d9:d4:cc:
7e:5a:81:5f:24:58:a1:f3:41:51:62:62:13:af:39:bd:b5:c5:
ef:02:f9:0e:9e:5e:bd:59:28:a2:d0:5e:df:63:9e:f3:0b:67:
38:16:a7:a0:85:bc:0e:03:3b:94:3a:fb:5e:b1:ee:e4:77:a1:
23:40:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client