Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: nG2foMVK8/w4Zm46DaMrzsJG7FjOq+jKip8QRMH7N2M=
Subject key identifier: 64:D8:3C:09:51:4D:1F:AC:CC:93:63:05:14:98:D2:2E:0C:8B:62:A8
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 0194BC04F56EDD4FACEA641F3E90C900274D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: fj83OICA2dXkb7sofXdOoGdjzq4.roa (hash: pOA5XIvHm6EKh1V95/EfmbQrXTJ90+bGbqMr2BZtsSk=)
2: pDkCQjQVPegQOP278WmolhHSrkw.roa (hash: VPjogK0/dxD5LybI2fhbuslUMxpJB7AerXcZh/G3cj4=)
3: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: 4PKeQ6BJ7M580RPFRvaaSpTjU90hmompEv2K1eP/4Ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:6e:dd:4f:ac:ea:64:1f:3e:90:c9:00:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=64d83c09514d1faccc9363051498d22e0c8b62a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:3d:a9:7b:aa:d3:3a:15:39:2a:8d:db:1d:
6e:f7:77:cc:d5:35:17:4b:cf:3e:de:ec:61:0a:94:
80:d3:e7:d6:48:cf:84:97:20:5e:f1:0a:82:fe:1b:
4e:ca:aa:20:5e:e4:81:26:a2:36:88:21:21:e1:8f:
5b:12:34:b7:0d:99:17:da:b5:10:f3:50:14:42:0f:
ec:c7:9f:1f:82:d0:f9:3b:1c:a4:c5:76:63:28:77:
2b:4e:0a:77:13:53:9a:e0:a7:32:6b:30:d2:f0:55:
6f:96:58:77:dd:06:3b:b8:61:04:cf:2d:80:f5:9b:
78:c5:56:0f:68:ca:4c:6a:28:c6:8d:00:2b:f8:04:
eb:42:aa:a5:34:f2:86:b7:40:dc:84:bb:b4:04:1a:
63:5d:aa:b9:c9:fb:ab:1e:31:49:13:54:0a:07:c0:
0b:59:c7:04:a8:33:21:86:f1:25:81:c2:7f:99:8e:
46:f0:0e:e1:c1:27:57:26:73:e0:c8:7d:58:0c:93:
d9:a2:0a:92:84:6d:be:7c:53:9a:9d:2a:76:01:bc:
dd:ec:f7:e9:13:43:82:cf:e3:b1:a3:fa:74:0b:65:
02:1c:53:36:d5:77:98:16:4a:60:2e:56:56:7c:d5:
8c:7a:9a:48:61:f3:be:27:15:ab:22:93:ea:59:49:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:3C:09:51:4D:1F:AC:CC:93:63:05:14:98:D2:2E:0C:8B:62:A8
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:e7:43:83:0f:21:7c:91:fb:08:c8:b3:42:19:6d:90:cc:
1b:bc:92:9a:ba:e6:8c:e3:33:9a:12:af:d3:54:c3:2b:3d:f7:
7e:2f:aa:0d:d7:c7:3b:22:de:7c:bb:ba:bb:ce:b6:7c:99:dc:
19:d8:38:b7:dd:59:2b:95:1d:6f:19:6f:7b:5c:3d:41:20:75:
fe:84:94:c4:e0:99:dd:12:10:e5:7d:67:cd:c9:3b:3c:64:96:
6d:75:eb:d3:3b:72:0b:08:97:14:85:ab:96:39:72:99:f7:27:
68:77:4e:3a:bc:6a:55:35:ba:ef:a9:68:5b:b5:56:e9:60:66:
fd:b9:ed:48:ea:28:ef:fc:00:6e:9e:99:8f:94:b2:2f:2b:55:
b8:e0:bf:4e:b3:21:9a:df:c3:57:f6:c6:43:4d:10:ad:1f:74:
6e:52:dc:4b:8f:e2:61:fa:0d:8d:df:0f:1d:34:d5:64:ef:be:
fb:f3:62:16:0f:06:21:b6:27:64:ed:44:e2:dd:55:48:7c:df:
51:71:ff:74:b9:50:d1:59:47:65:d4:44:d6:86:c9:47:ad:c4:
61:fe:8e:d0:82:83:94:fa:27:a1:f6:b2:8c:14:4c:d6:7b:56:
08:d2:f6:00:ff:32:8e:af:34:d2:ae:48:4c:72:c8:61:0a:04:
2f:b1:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:51 2025 by rpki-client