Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: t9Qr+bEHXzP4PpB96URQ/Cv60AWn5OdCd2ldd0Hnwkw=
Subject key identifier: 5B:1F:04:D1:1E:9A:DC:F4:A8:83:44:C8:3F:52:34:FF:06:76:01:AD
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 0194BBCE52633A8F6F94FA6D816F30AE822B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: tqXUJLP90V05endCA7x5WL1wYnQgSHly46NgfdbA7bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:63:3a:8f:6f:94:fa:6d:81:6f:30:ae:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=5b1f04d11e9adcf4a88344c83f5234ff067601ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:63:d8:42:2b:46:c5:3f:ab:0d:24:5f:9d:
8a:af:09:4f:c9:1e:a4:a2:85:fd:1b:a5:32:78:95:
b7:f5:89:bc:65:1f:76:7d:0a:48:1d:9c:f6:b3:51:
f2:77:90:95:c0:b7:a6:7c:2e:b3:ec:78:24:d6:7a:
b3:03:30:02:f0:8f:3d:85:0a:b7:1f:0a:93:b2:7b:
4c:28:ae:9b:3c:99:e7:ef:d3:dd:4a:34:0c:10:9a:
82:79:b6:f0:54:3e:88:c1:ef:2d:a9:f2:64:f6:fb:
0c:34:9f:56:69:d2:43:c5:00:ab:d0:43:ab:9b:c0:
8c:ce:22:cf:b5:a5:3e:d4:28:42:d6:93:0a:56:e6:
8b:61:26:04:46:e5:46:a5:51:3d:0a:bc:f6:f5:f9:
16:f4:fe:ef:ad:29:69:af:63:9b:22:30:4d:32:88:
c1:1a:6d:6d:fd:eb:4b:25:74:70:35:f4:b8:05:5c:
03:ab:b4:17:16:38:ed:4d:9a:10:3f:bb:14:9d:5c:
85:b0:23:0b:a8:3f:5c:1c:20:5a:a9:73:9b:9a:9d:
36:3f:f8:a1:b9:a4:0d:2f:ec:f0:2c:55:aa:63:d5:
d3:7e:73:08:52:9b:7d:90:65:dc:a1:57:f7:67:c8:
c2:91:52:b0:01:a3:9b:83:0d:03:f0:f1:76:ee:3d:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:04:D1:1E:9A:DC:F4:A8:83:44:C8:3F:52:34:FF:06:76:01:AD
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bd:71:ab:a5:77:96:8d:48:89:a9:f5:18:0a:e1:60:6f:f1:
d6:43:25:64:47:45:8a:48:28:6e:73:db:7b:75:d9:f5:db:d5:
80:07:ff:6b:8f:86:93:84:49:a6:9c:8f:f3:42:26:e3:bf:31:
ef:4c:63:f5:f6:fb:a7:ec:df:ac:95:69:79:24:df:1b:6a:18:
f4:e4:ac:6d:e0:73:8a:de:09:35:da:af:18:d3:61:a5:69:bd:
7e:0f:e8:29:63:1b:8a:5e:0a:95:08:ad:fc:5c:21:c0:98:d8:
6d:37:7c:dc:72:98:69:53:a8:53:c6:2f:f9:8a:a2:30:fd:ab:
b8:03:78:f9:71:cf:85:70:ec:84:53:6b:0e:1b:f0:a7:11:3b:
45:b1:b2:18:76:fc:ae:72:10:ca:e7:0c:00:14:be:c0:bc:29:
62:2e:15:c3:52:9c:5a:54:0d:ae:28:24:16:46:22:0b:27:a3:
5b:9d:47:ca:8c:e5:8a:08:57:47:21:1b:fa:ae:51:03:6e:22:
f7:fd:61:c0:71:3a:36:9c:ce:16:31:aa:f7:dd:7b:07:2a:1f:
01:24:7a:f1:46:71:ec:09:a8:bd:00:bc:86:01:34:df:98:f8:
38:36:fe:8d:71:4a:07:a6:9c:15:88:a3:f5:f7:36:30:20:ad:
00:a2:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:57 2025 by rpki-client