
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: rNyFNEZl1TnO+ff8wZE/txDTrgeTlNKMzVMPwC+5ZLY=
Subject key identifier: 18:EC:3C:EC:13:48:13:B0:62:F9:B2:92:A7:6D:80:D2:AE:17:3F:37
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 0194BD4E652B8432D0F44202BD635C1386EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 1271
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: LNoOTkKKYORanApTeEP+/q3wXJRHMWUJR3Ho9AdLpSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:2b:84:32:d0:f4:42:02:bd:63:5c:13:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=18ec3cec134813b062f9b292a76d80d2ae173f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:39:2c:5a:99:c6:55:96:3d:9f:22:71:c8:
33:ed:18:b7:06:9d:c5:ca:fa:42:ab:64:42:21:12:
e3:71:e3:fc:35:7a:62:fb:5c:4b:d6:96:53:91:f7:
d3:dc:cb:3e:17:51:16:8d:a5:9f:91:d5:61:c7:24:
a3:94:1b:e5:90:f1:54:e7:77:f4:5d:32:5c:4c:85:
2a:68:a0:9c:ad:dc:c2:4e:9e:90:26:32:69:e6:5f:
04:87:4c:22:3d:d8:ef:7e:99:79:66:46:7f:64:81:
41:4a:cf:de:e8:b1:f4:78:cf:55:d8:f6:2a:5b:7a:
1f:57:a5:63:87:04:69:cd:4f:55:08:64:4c:bd:50:
47:fe:f7:c0:4e:eb:54:ce:70:4a:77:ae:90:a2:96:
f5:0f:a8:b5:8c:73:fd:09:40:72:d4:85:6e:9b:d1:
a5:bc:b9:db:ef:15:cb:66:9e:a7:b9:93:4d:e3:09:
bf:a6:c8:95:fe:d2:2d:67:a6:f7:e6:fe:d5:be:7d:
c4:49:ee:96:d4:fa:d3:a0:c9:7d:08:75:42:b5:2c:
a1:d4:b9:52:8e:d3:51:65:b8:b4:82:a6:63:4f:fd:
0a:37:df:38:7e:e1:76:4a:9e:06:b1:a8:88:9e:f8:
3b:2e:39:58:01:a9:a5:b5:01:f3:ca:87:08:dd:f4:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:3C:EC:13:48:13:B0:62:F9:B2:92:A7:6D:80:D2:AE:17:3F:37
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:a0:2d:d3:09:57:9c:40:d9:1d:f1:3a:86:59:e9:dd:f3:
23:04:fe:41:7b:23:8a:d5:13:b8:e9:ce:b4:64:2d:90:8a:b5:
77:0b:6c:8e:ac:6d:c4:f8:ea:0c:3a:a9:ad:0d:54:53:ec:5d:
c1:ce:11:f9:1c:7e:27:18:42:f5:ae:f0:49:74:6d:36:ed:d3:
a7:e8:70:23:4d:db:00:19:10:b5:52:22:56:8f:8d:83:c7:55:
89:a0:c6:20:ac:f7:27:e7:bc:8e:0f:4a:bb:29:8a:de:04:bd:
d4:87:dc:3f:d8:50:0a:3e:b3:66:9c:25:6d:37:2c:6e:58:a8:
4d:77:39:ab:f6:47:61:24:f8:3a:96:cd:1c:eb:a3:95:55:6c:
c1:81:d2:01:56:5b:3a:69:af:94:8a:1d:57:89:99:39:c5:7a:
0c:35:d0:eb:a6:2a:56:62:30:c2:ec:58:8a:71:4e:aa:ba:98:
f8:c6:da:7d:8c:ef:79:a6:dc:f6:fa:18:20:7e:e0:b6:0e:fa:
9b:04:f4:ce:6f:f5:28:22:d2:3a:a3:da:0d:d3:00:2f:1f:8f:
36:c4:02:4b:a2:6b:5b:f6:61:11:d0:d7:f3:03:49:3d:6f:d5:
0c:58:91:8a:b2:c3:87:91:fb:10:52:1e:b9:de:ac:7f:cf:e6:
6c:98:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:12 2025 by rpki-client