Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
File: vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json)
Hash identifier: ie2ALx+zurLJ8E06EyNnRdDraw0kiqHTgN8Pt1DKXPQ=
Subject key identifier: 3F:F8:95:8A:D1:60:7C:C5:CC:8F:57:63:7B:8A:30:C2:41:D4:4D:50
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Certificate issuer: /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial: 0194BCE082B39D0B83162DAE50E1A33AD9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
Manifest number: 06A6
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 2ea_Ght-OBVvtgKuaEhUjFGnCIo.roa (hash: dArjpyisxrgvkT5h9NbQ4Zg16ShXRNvAx7t0mMervEs=)
2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: RMieigkeE0ssWpaZOwm3VF2wgtF5NH6+rz7yEEbZcT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:82:b3:9d:0b:83:16:2d:ae:50:e1:a3:3a:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=3ff8958ad1607cc5cc8f57637b8a30c241d44d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:de:12:af:c6:cb:19:05:51:3e:48:51:44:
72:5a:e8:c9:c0:31:84:b3:2a:9e:6d:79:3e:f4:9e:
ae:87:98:56:83:c6:70:23:f0:67:ef:45:57:43:57:
ee:85:d4:9f:92:c2:8d:7e:55:ac:e0:6e:20:f0:9e:
da:19:a2:cb:7d:80:1a:8c:6f:4d:cb:dc:dc:8a:06:
7b:de:66:61:0d:5c:aa:01:c3:ea:f1:8d:29:1b:55:
23:a4:4c:5a:63:6a:98:ce:fd:2c:8d:fa:ec:72:91:
8a:ce:77:f3:ac:78:1b:8d:ff:03:a4:ad:d8:6e:03:
99:83:87:d9:eb:43:4d:1c:60:39:ac:6d:83:13:25:
2f:46:0c:98:a6:24:37:d2:86:7f:1b:2d:9b:f0:08:
17:18:33:86:4a:23:82:7f:2e:01:0a:66:1c:a4:52:
02:d2:c6:32:bb:e6:20:91:19:87:4e:44:c7:c4:36:
ff:2e:fa:2f:3b:6a:5a:2a:d9:69:8e:f6:c6:a2:b3:
4c:3c:33:59:1f:be:f6:e6:c0:1d:28:9b:a4:dc:c2:
15:d0:33:18:e8:78:3e:8b:db:c8:68:19:f7:ef:6c:
93:f9:bc:5e:b6:75:c3:a5:24:f3:cd:eb:b3:4f:6b:
4d:f5:33:42:a8:c0:ea:2b:16:47:69:55:b4:f6:90:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:95:8A:D1:60:7C:C5:CC:8F:57:63:7B:8A:30:C2:41:D4:4D:50
X509v3 Authority Key Identifier:
keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:4c:4f:7e:b0:e1:c1:9b:35:6b:95:6a:ba:9e:6e:0e:0e:
4c:58:a5:2a:34:f8:c7:c8:53:1d:aa:42:ff:08:05:33:a6:db:
79:9f:31:b7:43:d7:d4:8a:78:91:18:a2:e3:ef:09:bf:65:57:
ae:87:8f:c3:c4:8c:0a:94:1e:99:02:f7:73:3d:44:29:5e:3b:
5c:a8:6d:df:6d:3f:f3:0f:d4:f0:ee:ab:bf:bb:5b:5d:b3:89:
4c:2f:43:04:83:d2:1c:23:0e:a6:3d:2b:2d:f7:3d:e7:c0:16:
c9:b9:56:86:80:78:37:b8:f3:aa:2e:fb:0f:a3:85:8b:4f:70:
65:8b:b6:b8:5b:55:b1:e5:e3:22:4b:ae:f3:0f:88:c7:64:86:
3e:aa:c1:d1:73:58:57:86:04:53:cd:a6:22:f6:4b:b8:2a:f5:
d5:c8:ef:bd:8d:42:f7:00:38:f7:75:2e:e4:68:ac:3e:27:b4:
0e:56:8d:b2:be:f0:b7:6a:b2:d3:fc:bf:ce:6d:eb:d8:20:56:
df:4e:fb:58:d2:2a:eb:f5:29:33:65:ef:57:60:b0:f8:67:df:
6e:b3:c7:fc:bc:08:24:16:60:eb:f7:b9:cf:ad:96:70:2c:42:
4c:43:b7:23:a6:dd:ed:de:4a:07:d9:fa:b3:7b:3b:c5:f8:f1:
db:e5:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:49 2025 by rpki-client