Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: FBW4BjqITop5PfkyN4S35MusAwWZmgZsoTyIVIH4zD4=
Subject key identifier: C4:2E:58:87:AA:CD:A3:33:AC:26:5B:E7:A5:CC:AB:4A:06:60:AA:36
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 0194BCA9FAD780CD19ED001958AA6250FBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: ZkKCtjbehpsrXd8QwlVWCZEc/2k8yWTLEq0l2ypxClU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fa:d7:80:cd:19:ed:00:19:58:aa:62:50:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=c42e5887aacda333ac265be7a5ccab4a0660aa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:c5:63:78:49:e7:0c:44:e6:8a:c4:ac:06:
19:ce:b2:8b:34:ba:0b:7b:8b:07:b9:a1:2d:e7:78:
95:42:9d:79:e9:d9:22:0b:3f:ec:fa:7e:67:a9:15:
98:1b:50:4b:ee:f9:5e:47:1f:57:e6:ba:76:a8:d3:
0e:90:83:7a:32:bb:f0:d0:34:7b:46:23:98:7e:58:
09:68:c6:67:13:48:f4:e2:2d:bd:32:9a:5d:e5:ba:
81:58:8c:6b:69:6c:88:48:de:c3:09:ea:7c:52:b9:
40:f1:44:ee:82:c0:20:a0:4f:cf:73:c4:fc:ff:26:
41:68:72:d7:a9:f3:b1:ba:3f:66:56:66:b1:c1:08:
b1:ab:d1:2f:01:2b:07:6f:93:28:b5:53:c4:60:8d:
5c:dc:7f:52:9d:75:96:a9:8c:78:eb:c2:00:d5:8b:
76:39:72:dc:0f:a0:83:c1:54:ef:a2:d3:59:08:37:
a4:72:5d:a6:e0:fa:9a:40:9e:d1:8a:70:3d:55:bc:
df:db:0c:62:8e:c9:02:7e:fc:39:09:76:dc:f4:db:
65:a4:3f:54:fc:b6:b1:6b:93:92:3c:32:12:cc:79:
1b:0b:35:fc:87:fd:41:b8:36:04:bc:24:23:04:55:
85:78:3d:0a:05:17:1f:04:ff:a4:a3:b8:f5:48:02:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:58:87:AA:CD:A3:33:AC:26:5B:E7:A5:CC:AB:4A:06:60:AA:36
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:42:79:bb:f3:cc:5a:21:0e:f9:7e:0b:a9:fe:0f:b5:ed:
cd:7f:25:85:bb:8f:11:1b:fc:91:0d:24:4a:60:a2:96:a4:f0:
04:e7:de:50:d7:12:ac:40:32:f3:94:c6:5b:d6:32:0d:30:a5:
43:b0:49:80:6e:0e:cc:e6:95:1b:b5:46:47:34:3f:fd:0a:5b:
a0:56:9c:8d:e7:bd:4f:84:5d:9d:b2:c3:b4:e0:06:c1:cd:98:
4f:58:df:ff:86:ee:a9:cc:0f:7c:94:b8:99:92:79:7f:6a:e6:
f1:79:4f:32:3c:ce:05:e5:d8:71:32:4a:26:cf:44:89:a4:9c:
ce:8c:4d:d7:f0:3a:9b:f6:eb:cc:1e:3b:73:8e:39:30:bd:08:
d9:b3:47:6f:09:23:a7:10:37:d5:28:7d:ad:df:f5:b7:9b:8a:
61:ce:6f:91:e8:d9:30:d0:d1:12:e8:9d:c6:08:c3:b4:1a:6e:
42:01:2a:62:66:84:dd:8b:bb:db:5e:0e:9e:4d:cb:5e:6b:59:
32:a9:fb:cb:b2:d1:3d:e3:3f:e1:6f:1e:84:66:31:cc:31:c7:
4f:88:fe:e1:41:ec:f6:6c:fc:f8:bd:6c:48:c6:c4:e9:f2:92:
fb:3b:f0:16:a7:b5:6f:db:c8:b8:df:5a:dc:1f:d3:38:ef:13:
3f:19:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:29 2025 by rpki-client