Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: FBLSvaLaqrKw2wnEAZ+iDDeDmjJFleQ/4D330Ox8hl8=
Subject key identifier: C2:06:88:F9:8D:6D:BF:29:B8:3A:FC:D6:CE:FB:C8:F8:BD:B4:E1:24
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 0194BCE0A8CAA4F2D7F26D0C24932EF70CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 01B4
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: xXIN8UfDwtbUbgx0cb33RCtv1oE78zu0RQHWN9oFAaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a8:ca:a4:f2:d7:f2:6d:0c:24:93:2e:f7:0c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=c20688f98d6dbf29b83afcd6cefbc8f8bdb4e124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:5f:ce:df:c5:42:b1:e8:77:f9:f9:c8:88:
14:d5:8e:6b:ea:14:09:2a:26:56:5c:00:36:55:7e:
f4:92:f9:ed:5d:8e:ad:a8:a2:ed:2b:bb:42:39:96:
5a:03:ce:15:cf:59:8f:76:b3:01:06:6e:33:97:af:
b5:90:07:3c:72:4d:ff:21:02:9e:60:18:eb:21:8c:
bd:07:51:94:07:31:9a:9d:0d:50:7d:12:42:28:21:
ff:88:2e:79:a6:c7:64:0a:2f:0d:3d:fb:21:66:72:
8a:32:c1:a3:e5:8c:df:17:a8:6a:54:07:ad:0e:37:
fa:ac:57:a1:46:0d:44:8a:fe:ff:71:ea:a3:b0:9e:
95:7a:d7:7f:d4:c2:4f:1a:57:df:72:11:3a:5b:3e:
f5:a1:05:5b:93:3b:ac:9b:c0:6a:85:a4:f7:75:0e:
e4:01:a2:40:15:ce:1f:9b:45:f4:eb:48:e5:84:51:
4c:42:6c:98:77:2c:a4:df:72:f9:4d:1e:87:e2:7d:
30:39:e4:a2:53:cd:ea:44:e7:46:e0:51:12:d4:96:
21:55:ae:7c:de:1d:8e:a4:6e:cf:7a:b9:17:63:9d:
30:05:7f:c5:39:3c:78:c9:7c:7b:11:19:6a:4f:0e:
ed:4c:04:64:a5:d4:7b:9c:b3:b0:82:26:be:eb:7b:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:88:F9:8D:6D:BF:29:B8:3A:FC:D6:CE:FB:C8:F8:BD:B4:E1:24
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:21:4a:d3:72:7b:db:be:df:8f:0a:fc:33:4f:89:d9:9a:
0d:97:17:63:c2:e9:ef:51:0e:c4:b2:e5:5f:eb:e1:97:44:80:
d4:a2:bd:71:73:c2:61:dd:34:d1:7f:e0:e5:01:ea:1b:8d:d2:
ef:c6:fd:09:14:1d:ac:af:f7:25:e7:37:61:8b:ed:2b:71:86:
1a:61:7d:9e:5b:a6:c4:e4:dc:e2:75:a4:eb:0d:8f:20:1a:4a:
40:1c:77:f5:2f:de:0a:1b:32:5f:c4:fa:eb:69:48:fa:99:e7:
67:82:00:a1:ec:cb:b9:b6:a6:09:ad:77:86:3b:e8:62:39:fe:
af:30:1a:64:e7:93:9e:f1:52:a7:7c:53:fa:af:d1:35:5a:6f:
8d:96:b4:1f:82:30:1a:5d:22:a2:5e:32:12:e1:33:e3:93:54:
fa:bd:fc:8c:33:b9:fa:ac:f7:00:46:52:e3:81:20:31:73:8e:
23:f5:35:87:70:d7:90:b7:e2:47:5b:52:d8:76:e3:0b:26:a8:
6e:46:dc:1c:f7:11:06:54:66:eb:5c:f2:b9:ef:6b:95:84:4b:
bf:7c:88:fc:26:bf:6b:2a:55:8d:ad:3a:6e:6e:2d:0c:87:ba:
76:01:dd:e8:f8:07:d6:a4:9d:ff:ca:8f:11:02:f1:0b:4d:7e:
1a:a4:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:16 2025 by rpki-client