Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: a/5qI/2FCsXfvL3uG4XEfV55lbRCS4deFNZ2LY3g9Mo=
Subject key identifier: 11:6A:FC:F8:20:AE:E0:60:4F:68:DB:80:63:D8:11:DD:81:21:7C:78
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 0194BD85B3B972DD20AA17516FE731456D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 0405
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 2Kr-1XLrgROhbD1jcsbK-FilLdY.roa (hash: 5GfsQOtJA+CgwxuKGKTuCz73LK7pVElXz0y95QkCQq0=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: SvaPzbV1V0dBid/jgkM8bWkZsFYyhiTpDJQjh1Poog0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:b9:72:dd:20:aa:17:51:6f:e7:31:45:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=116afcf820aee0604f68db8063d811dd81217c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:e6:58:ac:09:cf:ad:e8:b7:14:90:99:28:
58:8e:0a:1b:ee:4d:c2:0a:94:57:29:9a:81:9b:62:
27:64:78:5b:1e:13:43:63:10:a3:8e:1f:28:a8:4c:
32:ff:41:d0:93:1b:87:b7:1d:9b:e6:0c:1e:a8:1a:
9f:24:36:e8:4e:99:b8:a5:ca:ec:d1:17:11:73:6c:
aa:72:c4:c3:3b:ce:9d:92:e5:b8:95:bc:9c:5d:d6:
6a:8c:f9:bc:bd:74:43:05:62:a0:f4:0d:3e:64:1a:
85:a4:4a:8b:72:e4:e1:15:20:d2:78:91:6a:32:4a:
60:8a:57:46:07:39:e2:e6:ac:42:1e:2a:86:2e:bc:
1a:05:12:9d:dc:14:3a:a7:36:ec:6e:07:b6:db:be:
22:7a:b1:05:94:1e:71:c9:10:b6:67:d2:da:01:5d:
c1:7e:d4:ef:dd:87:96:3f:20:8b:15:ec:28:32:4a:
49:90:a0:b1:66:5e:de:c3:d9:a9:19:58:fb:2b:db:
06:85:db:72:57:78:12:78:44:de:44:d7:bd:9a:c8:
13:61:3e:d7:0c:00:76:0b:1f:09:55:d0:fc:f2:67:
90:28:72:d4:bc:60:21:79:1e:d1:38:24:0c:27:50:
71:81:b2:25:3d:3e:5e:6f:50:03:00:54:ba:dd:a1:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6A:FC:F8:20:AE:E0:60:4F:68:DB:80:63:D8:11:DD:81:21:7C:78
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:82:33:aa:e5:d2:85:40:c9:c5:90:9b:33:ce:cb:64:6a:fc:
57:d0:a3:db:d8:2c:98:80:50:96:7a:b2:c0:09:89:55:c5:8f:
a2:2b:08:a6:8b:cb:4a:44:71:77:9a:a0:2a:5f:8e:88:05:1d:
36:de:3f:ed:74:3c:71:e7:bc:bf:33:2c:8d:89:02:02:e1:3b:
1b:6d:e9:1b:f6:84:44:f8:23:42:80:38:64:e9:31:4c:fb:68:
6f:19:3c:71:41:63:d1:0f:0e:90:25:14:7f:1d:52:82:75:c0:
df:c8:94:bc:33:40:42:8f:cf:0b:54:16:f0:ec:26:e5:cf:26:
f9:c5:23:55:ea:19:d4:d8:29:76:b8:15:4f:00:a5:93:e9:8f:
00:4b:04:e5:30:cc:4a:45:74:2e:ec:e2:6e:d6:2a:ff:e4:18:
6e:7e:09:4f:8d:1c:b5:fd:59:52:7c:55:3c:9f:be:17:d3:e7:
6a:20:b1:57:d1:6d:5c:0a:a9:4a:80:e5:a0:8a:e7:61:bf:38:
42:a4:e0:85:9b:20:17:b7:42:f7:03:e7:22:46:2e:1b:ce:60:
bb:c2:4b:32:1b:33:69:a3:c0:c8:50:bd:37:3f:57:e7:fd:e9:
bb:56:f7:ed:7f:87:73:74:16:5a:2b:72:84:35:6a:a6:60:77:
01:1f:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:08 2025 by rpki-client