Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: BDe3GxSWHhJVBqZMoevjVib/0mpj46x96690zeDALPQ=
Subject key identifier: 53:E6:B3:20:76:80:06:91:6C:5B:C5:63:C3:A1:A5:B6:98:75:33:CE
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0194BCE07ED0606EAEF660B716998F8BE4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: mUqZq0lmTslCREpctUb0Wk0g4XjkVsZZWLPtOLi0cro=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7e:d0:60:6e:ae:f6:60:b7:16:99:8f:8b:e4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=53e6b320768006916c5bc563c3a1a5b6987533ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:ad:ab:37:b0:34:fe:af:a8:3c:ca:70:88:
7e:07:0a:2d:f4:f5:80:bc:0f:85:83:a4:89:6d:bb:
12:d4:fe:83:6b:0d:17:86:3c:4b:dd:9d:66:b3:36:
86:bd:83:bf:91:fd:19:81:c0:49:39:1a:8c:3e:f7:
03:f5:16:82:63:b7:87:b6:23:58:3b:d1:7e:a3:f8:
6a:0a:b9:00:63:55:d1:3c:a7:e6:fb:b0:6a:10:12:
5d:93:53:06:f8:ff:e9:d1:31:d4:9e:4c:b1:21:75:
16:d1:22:2a:91:70:ae:7f:c6:d3:17:96:0b:69:9e:
37:b0:0f:c2:7b:90:b8:87:e8:10:ce:a6:9b:75:1f:
99:9d:75:61:fc:da:b6:a8:46:b8:1c:6e:6b:bd:c5:
12:d6:f4:ab:5c:f0:03:ee:3b:b8:3e:cb:84:bf:85:
5e:71:96:3b:41:1d:22:98:5f:71:3b:01:5d:25:71:
96:da:b8:a2:6b:77:7b:4c:9d:17:9c:88:72:9e:59:
fd:eb:4f:90:e5:be:ba:4a:fd:a3:5d:d0:aa:0f:69:
02:64:37:25:71:30:a9:a2:a6:b3:d7:f3:17:92:3d:
24:fa:20:01:19:c3:e2:60:19:33:d7:e5:19:fa:f4:
4e:cb:58:fd:53:f1:00:8f:e9:79:f8:13:90:e9:66:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:B3:20:76:80:06:91:6C:5B:C5:63:C3:A1:A5:B6:98:75:33:CE
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:b7:82:d4:78:30:1b:0e:c7:29:ee:0c:9a:d6:85:9a:76:
bc:18:59:87:e0:9c:a9:79:ec:7a:ec:33:e5:e3:cf:72:a2:cc:
cc:6c:ae:6e:d7:0d:0f:c7:97:15:7e:dd:cf:0c:7c:60:ba:60:
34:00:c9:9d:a1:86:ff:d3:b2:8b:f8:69:51:16:45:fc:99:80:
a5:cc:97:c8:ed:e2:2c:04:53:20:7f:7e:37:ac:2e:7d:6a:82:
04:18:65:0d:e3:ff:32:31:3a:2f:2b:8e:91:68:5b:c3:07:17:
6b:21:43:8c:59:20:07:86:e9:d1:c5:fe:21:b5:24:34:bd:1a:
ee:8d:87:2b:17:d3:65:04:07:ae:0f:bd:23:29:39:c9:a5:a3:
b8:95:dc:16:86:06:c2:e6:8c:60:b5:b2:8d:be:18:a2:f0:90:
3c:e7:ef:fa:39:d3:5f:9b:33:bf:ac:3a:c3:2a:e8:c0:6e:36:
9e:75:81:f9:3c:ae:32:b5:4d:d9:f6:fc:9f:14:f0:c4:00:13:
70:ab:60:9a:8e:90:b0:9a:fa:6d:95:43:93:08:c5:d2:f9:c5:
d2:ef:fd:58:f9:c4:4f:9e:00:16:50:17:13:37:54:58:f3:2e:
e8:aa:6e:90:bc:9a:78:af:8f:3e:0b:1a:19:14:c9:5a:47:02:
0f:db:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:03 2025 by rpki-client