Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: SZMyiYDrQO++kdnsyjYNkC14yJhn43NEovEl5sy1KSM=
Subject key identifier: 3F:8F:14:71:D5:9D:71:8B:93:DF:DB:5A:BD:21:C1:3F:83:37:D7:6C
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 0194BC3BBAF3457EBC8B4F05FCDE451661B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: Q6x31UBrmg0n3YOatyX7df5GL9hrNBCGgahbRjQaC6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:f3:45:7e:bc:8b:4f:05:fc:de:45:16:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=3f8f1471d59d718b93dfdb5abd21c13f8337d76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:ef:e1:92:7b:48:29:09:5b:10:7f:c9:9e:
3b:97:75:f4:e6:b9:ba:68:8a:7f:62:11:5a:f5:1c:
c0:4f:07:9a:12:64:64:6a:c9:36:3d:60:f1:fa:7a:
74:97:80:49:2a:82:db:f6:ba:89:17:e7:93:09:a7:
05:33:46:10:49:a6:3f:10:a2:ad:3c:83:de:c6:84:
80:a8:cc:46:bc:27:0a:32:4e:ed:f1:61:fa:3b:39:
7b:f4:63:7a:6a:62:7f:62:f6:32:dc:bd:4a:21:f3:
41:32:f1:ae:41:d4:57:df:29:fc:c7:c8:dd:29:f7:
8a:df:da:08:2d:4e:3e:83:dd:4f:b0:ab:83:01:12:
38:e1:3b:ef:36:f5:b0:8c:3c:21:21:7c:08:56:ae:
b0:b8:d5:35:6d:14:b7:f0:66:21:3f:1b:38:b4:25:
4a:b9:09:24:e8:fa:7e:87:63:ea:58:98:41:d0:a7:
86:b2:94:96:fd:7c:c4:fb:e4:7d:df:54:ab:e7:48:
85:81:9d:b8:d5:7b:43:c6:7b:34:a2:6b:56:48:db:
cc:69:c8:4a:4e:e7:6b:75:49:b9:a0:58:e8:ed:42:
81:40:2f:a5:35:f8:62:d7:48:f7:2b:63:88:96:ce:
a4:31:60:bc:a9:95:66:1d:6b:04:35:e1:16:38:4a:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:14:71:D5:9D:71:8B:93:DF:DB:5A:BD:21:C1:3F:83:37:D7:6C
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:eb:98:26:4a:a2:00:10:4f:f7:c1:6d:e3:7e:86:c4:cb:2d:
dc:30:52:a1:dc:fd:40:c9:2e:88:b7:44:f6:8d:a5:e6:d4:47:
94:79:5c:90:70:ad:63:05:2b:2d:1c:77:d3:67:2d:05:a6:74:
47:42:98:ea:55:54:a6:2a:3f:c7:56:78:d5:59:24:dc:18:2a:
49:d6:f6:33:04:0e:c0:31:af:6a:53:da:e0:13:35:a1:73:c1:
13:e9:1b:17:b4:c9:f5:ab:9a:a5:a9:64:8a:21:26:98:2a:87:
c1:6d:08:dc:3c:16:b6:e6:2e:14:4e:d8:0f:c6:ca:28:5c:9c:
b3:d8:9b:a2:f0:c1:5b:db:61:f6:38:33:60:36:f3:e7:71:7b:
6a:cc:88:83:16:46:b6:87:4b:d8:70:96:1a:85:2c:e1:ee:33:
80:92:13:d6:fc:73:79:3d:c2:3c:ed:13:af:a5:20:44:fa:ba:
f9:08:db:0b:12:a6:a1:32:ec:80:97:0b:1f:b7:22:49:99:eb:
27:de:7e:5d:2a:ad:9c:59:1d:29:f8:c4:32:69:ce:6b:61:01:
db:1f:35:e0:55:f6:73:67:90:db:36:43:8b:33:2c:c5:3f:ad:
9d:37:63:aa:99:3c:3b:01:03:d2:0f:12:8d:8c:41:2c:9e:af:
71:c7:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:47 2025 by rpki-client