Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: BYMldzfIX2IIvESvdcnEqSfjhCTFFWB7Jfs2yy8CUTQ=
Subject key identifier: AC:9C:55:C4:72:F4:EF:48:4B:16:23:70:75:87:02:57:AF:D2:31:6F
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 0194BCE065D51CB0FD4821E266F284CEEED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 0FBD
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: nqqbJla3yJlYtMHR1CTgWMTZFWep0hrsaJf14XINoDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:65:d5:1c:b0:fd:48:21:e2:66:f2:84:ce:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=ac9c55c472f4ef484b16237075870257afd2316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:86:e5:d6:72:8f:bd:dc:d2:b8:fa:3b:47:
f3:69:7d:ab:7a:5c:a2:f9:0b:80:5a:68:26:a7:03:
52:8b:f2:3d:95:11:d5:40:0a:c9:1e:2b:a8:d2:a5:
6c:e8:4b:98:1b:29:06:fe:db:15:43:c8:d9:a1:79:
5e:95:3d:9d:99:4c:50:f1:f9:43:f2:88:a5:ff:9a:
f0:ba:d5:47:4f:bd:cf:e6:dd:dd:bb:fd:3f:e2:f2:
6d:10:82:0e:4a:ed:e8:26:77:b5:e4:b9:c5:ec:22:
84:8a:fe:b1:a2:5e:1b:00:94:47:f7:57:26:eb:7e:
1c:63:c8:32:c1:ca:af:33:87:1c:eb:5a:74:98:c1:
fb:bf:55:8f:23:48:72:de:f9:71:ba:07:f0:6f:b0:
fb:cb:3a:c6:d2:dd:38:fe:9e:a2:33:49:af:83:34:
71:d6:80:e8:ea:e4:53:60:a8:9c:24:47:09:dc:10:
13:50:bb:4d:2c:53:d2:c5:96:6d:f4:e4:b0:1f:9c:
93:e7:fd:ba:ed:2f:25:ca:e3:fb:6c:b2:86:a3:da:
21:4a:a0:bc:ec:ad:71:a7:55:c7:49:f0:82:84:2e:
9b:78:54:a4:ca:4f:59:4e:ca:61:0b:f5:1a:fb:af:
f5:c6:54:0c:2e:aa:15:ef:d1:93:8a:91:48:d0:e9:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:55:C4:72:F4:EF:48:4B:16:23:70:75:87:02:57:AF:D2:31:6F
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9a:6f:a0:b5:88:a7:e1:e3:6c:d1:3a:ab:a4:fd:ad:e4:3e:
c9:9a:14:8c:07:0e:aa:9c:da:5d:74:c5:fc:81:c4:ed:01:94:
ac:87:b1:e5:07:bb:98:de:e5:23:cc:98:f6:e6:d4:9d:77:d1:
d2:5a:a6:63:1a:8b:6d:2d:f1:49:4d:8b:ff:eb:56:05:97:1e:
53:7e:c5:38:15:4a:2a:29:57:74:64:a0:4d:79:c0:34:5f:8d:
ab:ad:4f:d0:b5:48:50:70:16:ac:0d:0c:26:4c:ac:79:6a:3c:
b8:72:9f:80:50:b1:c7:d3:c1:6e:d4:32:34:08:ff:85:05:71:
d1:31:cd:8f:fd:b2:35:53:65:63:0f:af:f3:45:02:19:c1:a3:
63:25:a3:2d:ca:56:56:d7:4d:6e:95:7e:94:e4:fc:40:10:d4:
c0:5b:ec:19:ad:d7:4a:db:4f:db:18:32:28:9e:bb:5f:c4:92:
b0:a9:7a:3a:0d:b7:26:dc:f7:01:69:3f:9e:ef:4c:6c:c3:33:
27:87:77:15:10:64:d1:e9:c0:c8:1a:88:bb:12:22:dc:db:ef:
13:59:12:09:b3:0a:bd:10:f4:6c:81:f7:5b:63:9a:b3:93:ff:
62:e1:9e:8b:81:8f:c6:5a:13:96:4c:35:2b:89:9c:6a:2a:2f:
e9:d7:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:29 2025 by rpki-client