Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File: vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier: uGhDAg0iZukKewO1+kDfH5gHJJU84CaCirUAkgoQaFw=
Subject key identifier: 4F:8E:B5:8F:B7:07:43:6D:A8:0D:F1:7E:FB:D6:E5:74:AC:92:19:2C
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer: /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial: 0194BBCE29EE9447210F7EB4BD43989C3A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number: 0B5B
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: Wov-rogss9nwzo0EqvEMesDtem8.roa (hash: ajFMqrFV3/ilI/Icdeg3WVYYBJHDgZFZXDWmXuDh9DU=)
2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: kIurkG9+XddgkADgqKsh91lCOlqf8dQK7+s88FU7aOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:29:ee:94:47:21:0f:7e:b4:bd:43:98:9c:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=4f8eb58fb707436da80df17efbd6e574ac92192c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:4e:27:31:04:45:c6:62:e6:fa:c9:f3:9a:
dc:97:54:51:c0:73:10:66:be:47:88:24:96:6b:74:
61:6c:8a:77:95:fa:10:03:fd:c2:60:54:58:03:2f:
a9:f0:26:cc:4f:f1:6e:92:04:d6:2d:40:48:05:5a:
0c:12:d8:b9:88:37:1e:3d:83:d3:f9:c4:f6:91:98:
8f:18:98:74:a3:1f:de:70:ba:bf:47:94:b5:4f:c7:
72:b3:23:3f:74:fa:f7:6d:dc:83:36:d2:9e:56:41:
f9:f7:a6:6c:74:91:d0:92:4b:03:cf:1e:6d:4f:58:
ba:78:6d:5f:44:55:94:e7:4d:14:83:24:a8:36:61:
5f:c1:e1:3c:80:53:ae:ac:c7:c7:f9:4a:ad:d1:c9:
a6:57:1b:15:42:cc:2a:af:d7:ea:4e:21:84:eb:1a:
24:3c:b4:77:95:6e:fd:8e:30:e6:3f:13:dd:c8:67:
97:18:c4:67:5b:00:eb:61:e3:e9:6b:40:16:23:e9:
05:88:4c:75:fa:12:e1:77:c6:e0:27:0d:65:a8:ee:
79:8e:87:b3:be:f9:69:54:07:ef:9e:ab:0d:58:a1:
ba:71:ff:48:de:b3:8e:32:e9:d4:f6:25:a2:63:cb:
b1:d8:44:1a:6b:de:16:e6:1f:c4:73:a3:52:7b:62:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:B5:8F:B7:07:43:6D:A8:0D:F1:7E:FB:D6:E5:74:AC:92:19:2C
X509v3 Authority Key Identifier:
keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:4a:7e:19:1a:0c:1f:05:c7:59:ea:5f:cd:72:d8:09:ce:
fe:cd:a2:4b:3f:51:dc:e3:cc:1f:cc:c9:48:96:c7:3e:ff:2f:
33:26:d5:ed:a6:cb:00:b8:f4:b5:78:37:2f:f3:04:a0:86:07:
58:d3:35:0b:48:07:07:6e:7b:08:55:05:5b:9a:58:33:83:23:
f1:1c:ca:3f:1b:2d:60:1d:89:56:21:2a:10:7a:93:22:41:5f:
6a:2d:fe:67:e0:ac:0a:28:bd:73:d6:de:9d:6d:2c:90:83:be:
cf:40:66:ff:a2:0f:56:11:ff:d4:f0:84:fb:d0:83:b1:56:58:
ee:a1:55:fb:4a:1f:16:3a:c3:a2:58:5d:0b:c4:25:18:b8:2c:
64:52:f7:30:42:25:80:4d:2e:76:02:b7:b5:db:05:08:79:d1:
a4:04:a2:42:56:49:49:86:62:ed:cb:0e:18:b8:50:d6:0c:cb:
b3:44:43:3f:03:87:51:3b:3e:13:1e:a3:e2:95:0f:ca:2f:66:
20:6f:7e:33:e1:a6:88:40:46:0b:d9:b7:e6:87:8e:9a:4c:71:
0a:b6:48:2b:0d:2b:91:4d:5a:42:7c:d7:06:2b:e4:8c:4f:b5:
49:e5:88:ef:39:2b:0a:75:fd:b9:36:cc:16:36:be:2c:8b:7c:
dc:78:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:52 2025 by rpki-client