Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: m88pdWTHPCHjg9e7WdMEUe3SET/7kGirBlFh3qPPZtw=
Subject key identifier: AD:2C:77:C9:6E:92:DC:9E:DE:6C:0F:D5:52:A7:58:84:AE:73:8D:48
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 0194BD4E3B52AA87E375764BBBB2CDF8672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: WGewvYkMI4oxV5/EBP3cG1W0eOO+/sJ2LYfMr9vfvrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3b:52:aa:87:e3:75:76:4b:bb:b2:cd:f8:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=ad2c77c96e92dc9ede6c0fd552a75884ae738d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:e1:5b:4c:19:7b:b2:4b:84:a2:2e:ec:a4:
27:0f:9a:17:9d:e5:d7:c2:e3:14:ea:35:e3:5b:14:
59:85:bb:5e:55:12:c1:f8:9e:9e:df:2e:f9:a4:e7:
c0:02:74:e5:57:ec:13:55:7d:e4:af:62:c1:a8:ee:
68:1a:1b:e7:11:2b:ee:e3:f6:12:a3:e3:8d:76:6b:
c8:29:83:84:49:e5:2c:c6:17:21:1f:16:af:ee:ae:
72:0e:56:1d:39:88:20:f9:7f:1f:7e:f7:5d:31:58:
3b:0f:dc:01:65:37:66:63:e3:77:3c:97:54:43:83:
76:55:cd:37:67:ce:0c:f6:f0:3c:77:55:99:d9:e7:
01:a7:f5:6e:5f:2b:e0:e0:ad:19:e3:8f:be:eb:59:
e3:7d:d0:c0:af:a8:9b:cf:11:6a:de:46:dd:25:b9:
01:31:f8:1e:94:d9:d4:e6:ca:1d:0e:89:a0:d6:c1:
e0:90:e6:e0:64:5f:d2:dd:92:b6:d6:7e:b7:9c:e4:
99:63:5d:c2:d5:db:c0:ba:c9:74:14:6a:93:42:dd:
c2:43:07:f2:92:c8:1c:80:bd:f6:f4:23:e9:55:b0:
1f:9a:63:ab:8b:9c:d9:53:1b:ea:11:22:6a:d7:b7:
1a:5d:82:f3:1d:b6:25:bb:5e:47:87:93:ba:a1:f3:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:77:C9:6E:92:DC:9E:DE:6C:0F:D5:52:A7:58:84:AE:73:8D:48
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9d:bb:c5:d2:bb:58:2a:2a:4e:8d:66:76:0b:20:29:f5:ec:
ba:09:e6:fb:bc:68:b4:eb:4f:f2:8d:5e:7b:55:fd:49:1c:f4:
c2:48:d3:72:dd:c0:f5:1e:97:0b:d9:d9:0f:fb:fe:76:b3:4f:
c5:6b:36:f7:a4:09:d3:21:31:f1:aa:dc:41:09:eb:81:b0:4d:
37:86:21:98:9e:66:88:dc:00:8b:2f:b9:7a:cb:1e:63:e0:52:
5f:af:eb:d6:96:05:2d:18:fb:37:1c:43:52:b5:10:73:8b:8f:
f7:44:7e:cf:4b:ec:80:63:ad:fb:19:f5:0d:3d:23:ff:e9:c0:
63:88:ec:9f:7b:82:02:8c:40:15:7c:9d:2b:bb:ad:1f:05:e7:
36:48:74:26:9d:2f:5a:0a:bd:06:4e:0c:71:c6:c8:a0:7a:b2:
42:7a:0b:00:bb:15:ab:10:05:b6:ea:c3:ad:d2:79:b0:f5:2f:
3a:ac:48:e3:c1:f9:31:01:ac:93:8a:71:e7:5c:22:5e:fc:f7:
f3:1a:39:5a:6f:20:f9:48:af:de:ca:76:6c:c9:22:55:11:89:
90:5b:c7:7f:12:77:b5:1e:77:65:2c:d6:4e:0d:a5:cb:c4:00:
83:7e:4b:72:4e:eb:2c:f6:6e:75:fa:c5:2b:af:3f:8b:19:65:
01:a1:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:27 2025 by rpki-client