Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: cI3sBht0CGZly+U8O+gQn2Dq/3jfLlGuDCqOh5Ncy7c=
Subject key identifier: 5D:28:70:03:7B:7E:DD:E8:3B:EF:5A:33:ED:24:EB:4B:45:21:05:80
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 0194BBCEE0AD9FE6CFE18AC6292E2F2524D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 038D
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: LhWtQR+ANfN3FmqHgEojCp7fTQK5c/rcqHvJz6OF0ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e0:ad:9f:e6:cf:e1:8a:c6:29:2e:2f:25:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=5d2870037b7edde83bef5a33ed24eb4b45210580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:a2:86:7f:2d:52:3b:6c:3e:88:f0:47:72:
5c:09:93:41:7b:eb:92:a4:b7:35:fe:73:f0:a5:4e:
8e:b1:e1:a0:1b:6b:b3:1a:ed:63:15:40:cf:a4:2b:
e8:31:aa:44:58:7a:ee:3f:93:bc:25:f8:6c:a0:0d:
0e:5f:3b:ca:49:2c:90:25:f8:09:a3:44:b4:81:87:
df:4d:bf:c1:8d:56:1b:39:42:61:1f:60:fb:88:1d:
65:6b:a2:17:f7:6e:e1:b7:3a:a2:3c:c6:3c:e1:fe:
7a:f1:98:bf:4a:19:d2:a2:33:a3:be:75:d5:59:59:
7e:81:dc:97:98:c8:88:8a:1d:bb:4b:4e:2b:1e:6c:
38:6d:cb:e5:63:9b:53:3f:2d:5d:71:0f:9d:d1:91:
7e:ca:0d:0b:b0:58:1a:c7:6a:6b:04:05:14:1b:c2:
1b:ee:a4:62:51:30:90:57:b7:d1:d2:a0:49:fc:4f:
aa:85:b7:74:3e:11:3f:b1:b0:1a:f6:17:b9:f1:41:
e5:09:e3:0b:8e:16:ed:eb:10:f1:97:7a:18:e5:db:
a5:04:77:de:f0:e5:38:3e:07:1d:83:eb:c1:8f:51:
36:2f:70:da:ad:a5:c6:a2:36:82:c6:e1:99:66:9d:
cc:0f:80:7b:e5:17:02:e1:e9:d0:f6:a4:4a:33:a0:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:28:70:03:7B:7E:DD:E8:3B:EF:5A:33:ED:24:EB:4B:45:21:05:80
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:33:8f:00:47:dd:57:97:ae:ad:26:26:b2:4d:54:c9:1f:35:
27:9e:30:9c:74:ef:70:2c:42:2d:59:13:b0:5e:f9:df:d3:ab:
3a:36:05:c4:b6:ad:d8:17:b5:16:db:89:e2:3d:c2:c7:6d:41:
89:33:2a:df:06:2d:80:f6:86:eb:d5:b8:4e:0a:33:c6:c3:8b:
7b:7e:16:6f:59:84:af:b6:5c:53:6c:9b:79:3d:5f:7b:a0:08:
0f:56:30:f8:e2:4d:b3:53:dd:8b:a4:e8:3e:bc:d3:b8:dc:45:
21:e3:11:20:ec:b5:cf:4d:8f:e9:1f:0c:1d:57:bc:7a:1f:62:
bf:0f:c7:b0:47:d1:e1:58:b3:26:cb:f7:1e:5b:77:eb:8f:7f:
70:25:74:f0:85:e7:96:30:59:63:6f:ee:19:5f:e3:80:0d:d2:
ee:00:d2:21:5e:54:68:c2:1b:a2:03:9a:40:9e:7c:ff:59:c9:
01:4f:d7:b3:b3:05:8a:91:8e:3e:69:23:d0:c5:94:ca:cc:c7:
97:8e:a4:2b:4f:55:39:fe:8f:4d:cb:b8:29:25:45:91:14:47:
6d:c3:f9:3e:48:20:5a:7e:ac:46:b5:50:f4:01:d1:9c:7f:2a:
5c:cb:08:3c:ca:67:bc:b8:68:5d:ec:e0:60:5c:89:6f:02:52:
80:d6:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:40 2025 by rpki-client