Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: AlkVDa9oaTqQfvpVn22W4pFKPurqtck1LH1Jb3ba7K4=
Subject key identifier: 4B:B6:50:A0:7C:2C:1C:4E:2E:4C:4E:AB:46:17:C1:FB:1F:16:F6:92
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 0194BC72DE2B5E8C579BBC5043B00A78CDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: YAEXW/AL2qeccPb4IljK+UsfLhDWIgoUiPh56h7ubLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:de:2b:5e:8c:57:9b:bc:50:43:b0:0a:78:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=4bb650a07c2c1c4e2e4c4eab4617c1fb1f16f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:2a:9f:50:0a:78:f2:38:f6:f0:d7:43:a9:
34:72:11:0f:ed:34:30:14:dc:e0:07:70:2d:ff:d6:
8f:21:05:e9:b7:53:e4:41:29:3e:fc:47:f3:8f:f4:
63:90:bf:a6:87:a1:18:e9:4d:ff:ff:e6:ea:2b:43:
dd:34:a7:3c:f5:a9:83:77:2a:b0:41:08:04:34:1b:
19:1b:0a:01:77:35:0f:d3:83:b3:35:ac:a2:ac:c2:
e5:ad:17:50:7c:57:0c:00:61:74:3a:25:ea:f3:35:
5c:e4:79:a2:57:76:40:6b:73:d1:33:68:c2:5a:da:
a5:5b:e3:99:81:fd:1c:26:15:5f:d3:ee:cb:4e:76:
ee:c1:7f:bc:b6:31:5b:84:bb:cc:53:46:af:5a:28:
fd:10:d5:b3:a0:d5:de:93:fb:42:68:75:2d:ed:b4:
95:72:a1:ec:e6:62:fb:97:29:58:90:46:fc:29:2b:
da:0a:b3:c4:3b:55:00:94:ae:46:cb:01:71:6f:8f:
c2:16:cd:04:0f:1e:59:4a:66:dd:9c:ae:4b:56:14:
50:a9:e0:fb:ec:2d:00:28:dd:d1:6c:47:f8:e8:b4:
95:a4:07:33:a1:f4:77:30:8e:11:ef:f2:64:ca:29:
68:18:eb:2a:2c:a2:bf:93:83:8b:25:cc:84:fe:00:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:50:A0:7C:2C:1C:4E:2E:4C:4E:AB:46:17:C1:FB:1F:16:F6:92
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:43:2e:be:5e:a2:23:a0:16:3d:3b:41:7a:44:de:a7:13:
62:df:c7:3b:59:fb:a6:04:29:40:be:e5:14:ff:b6:15:5a:51:
b7:46:97:2f:85:78:8c:91:5e:b4:65:37:9a:9c:89:cc:23:70:
df:23:9e:52:da:b8:a5:e6:a5:ec:56:f0:b4:d6:78:ae:b2:3d:
8d:a1:ef:7b:31:7d:e0:b4:31:91:41:3e:96:4e:ed:fa:5d:ed:
9a:e7:49:6f:79:89:4a:f3:c6:80:ca:11:26:22:6c:dd:95:21:
fa:7c:bb:9e:e0:59:1c:6c:b3:e4:3f:d0:9e:67:1d:bc:bc:25:
1f:0d:df:95:c5:46:4b:8d:5a:6e:a3:68:33:ee:7e:f0:fe:0d:
83:d8:b0:aa:b6:e6:53:eb:57:85:e0:49:a7:7b:81:49:ec:9b:
bc:4f:ac:e8:90:fc:d1:be:82:3f:8d:e5:cc:9d:9b:66:05:b6:
0b:1e:1c:db:1c:96:e1:bf:72:55:79:4c:90:48:56:0e:0b:73:
e6:0c:6d:8f:91:72:93:1a:22:66:b9:3a:5e:79:e3:6a:c5:3b:
38:2c:df:8d:41:8a:bd:65:a8:64:e4:88:45:4e:e1:7f:af:ed:
4a:be:ee:23:12:25:b9:a6:5f:55:4c:1c:2b:a6:4c:63:e8:80:
ba:af:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:18 2025 by rpki-client