Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File: vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier: q4WsGt/Pboz/bW66LTThWa154bcB3fRLryeHP2Cvdxo=
Subject key identifier: D5:A1:E2:49:01:2D:F9:9D:1B:53:F4:21:E6:D2:5C:C8:0F:3A:CC:A9
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial: 0194BCAA1BA00908C240B1B499959ABA1294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number: 0EFF
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (hash: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=)
2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: lyY4n7CwqkO3umqW69WRKrIPCyMnur0kyfaEEYT7A9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:a0:09:08:c2:40:b1:b4:99:95:9a:ba:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=d5a1e249012df99d1b53f421e6d25cc80f3acca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:a1:98:85:b7:e0:a7:f8:53:56:80:7e:08:
d9:0c:63:74:19:ad:03:82:c3:60:ed:a5:8e:ae:73:
d5:19:53:03:17:f2:d7:31:43:3b:7a:c3:9e:42:34:
d0:79:c2:df:7f:ae:d0:fd:5f:65:c4:5f:d5:fc:1e:
44:35:d4:32:b7:e9:62:72:47:7f:48:d2:7b:67:b7:
6d:cd:70:4b:be:10:b7:57:44:c0:ab:13:cd:86:ef:
1f:1d:29:75:1d:aa:09:5d:a0:71:b8:d5:9d:1c:36:
66:91:0c:11:5b:84:14:c0:b1:37:32:63:63:d5:20:
14:c9:a3:42:f1:0c:55:b2:b9:77:a9:43:76:d8:f3:
3e:5d:24:3a:85:39:09:66:20:e9:42:e3:22:f9:15:
08:6d:09:8b:c2:70:42:5f:2e:b2:f8:6f:cf:36:48:
68:03:50:00:f5:f8:9d:fb:8d:7e:a9:e7:99:f4:45:
8a:ca:32:dd:37:63:63:82:7e:70:17:d4:90:e0:56:
d8:f8:4c:6c:7a:ba:fa:d1:0f:fd:e4:82:1c:c7:75:
ab:db:67:46:a4:75:15:02:66:97:e5:c8:b1:67:d1:
35:9a:0a:d6:1d:42:d3:c9:53:9a:76:7c:6c:45:6a:
73:a4:6f:2f:61:23:ad:be:81:0a:67:9f:c1:a8:b8:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:E2:49:01:2D:F9:9D:1B:53:F4:21:E6:D2:5C:C8:0F:3A:CC:A9
X509v3 Authority Key Identifier:
keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c0:b6:ee:2b:78:bd:c4:c7:89:38:7f:2f:d9:28:18:5c:06:
a5:aa:a5:56:9b:a8:6b:27:92:06:61:87:75:1a:36:59:32:d1:
18:b0:aa:e2:e4:6f:fe:b5:dd:83:aa:82:a1:76:c2:dd:94:36:
c8:5d:a6:e9:19:54:09:90:ca:3b:1f:ab:d9:69:b0:a6:67:af:
19:fb:b2:8b:77:c3:50:3f:98:6a:fb:ee:58:d5:7a:04:7a:aa:
48:41:b9:f3:23:ba:c1:49:51:33:e5:d4:d4:b2:68:ee:3c:f9:
5a:98:a3:6a:75:f1:0c:ab:52:29:3c:ee:ac:20:67:19:f7:57:
3c:74:73:47:b2:ed:ec:d0:d5:1e:75:5a:45:10:af:52:c2:00:
bf:bc:d8:89:d6:ab:05:4b:79:2e:0e:70:6b:07:b3:14:bf:cf:
a1:62:fb:c0:98:d2:4b:7a:ab:5a:d4:4c:cf:53:ea:4d:27:4c:
39:9e:68:de:57:e7:e0:15:d6:c3:74:6c:e9:90:23:72:f9:27:
38:ca:a9:be:4b:73:8d:e1:65:07:1a:90:b8:9d:33:3e:5a:a1:
aa:c6:f3:d9:82:3a:ce:58:24:e7:05:d5:cc:e6:9d:24:fb:c3:
50:e0:6f:56:ac:60:52:ea:f0:10:24:4f:d7:54:77:f5:e8:e0:
52:99:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:46 2025 by rpki-client