Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File: vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier: l0YFdXj7zc+IMB8mB8ixGfjAWr5kWhJpc3Ix/lO6+co=
Subject key identifier: 3C:DB:EF:E5:B0:72:69:2F:A5:4F:9A:9C:87:D8:67:32:3B:CA:A1:50
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer: /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial: 0194BD855DC7A3F95C5A6EBAC0C4F5661C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=)
2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: F1zUUvyE+maw7cAB4kemdtGZ4pyaGww0Ih2Z5MMuBS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:c7:a3:f9:5c:5a:6e:ba:c0:c4:f5:66:1c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=3cdbefe5b072692fa54f9a9c87d867323bcaa150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:1e:e1:ee:33:ce:9d:71:96:65:5a:29:b0:
36:10:d0:d6:78:46:4f:c0:1d:22:b6:10:70:cb:3c:
13:3f:60:c3:15:31:4e:e1:55:b3:0b:09:07:99:ea:
d7:88:71:73:6b:3c:28:88:03:62:e8:dd:91:69:21:
98:57:42:54:0e:4d:85:9f:3b:b3:5f:8d:b0:d2:63:
52:d4:90:ff:e9:22:ec:fc:da:cd:1e:e5:ba:05:5e:
fd:b4:07:51:c4:29:2e:fd:a3:0e:ce:5a:0b:e8:ac:
52:6e:5b:42:f4:12:c4:84:8d:70:63:43:50:79:d9:
1e:77:ee:bc:9c:02:80:b4:a7:d0:53:73:d4:81:42:
7e:23:16:ac:4e:69:99:cb:6a:9f:b3:04:2b:7e:60:
93:5d:f9:62:f5:f0:7a:73:3b:6a:3a:34:dc:ec:7a:
f4:5e:e2:24:6c:81:a8:e9:e6:9a:d9:08:3a:05:c3:
24:ef:71:00:99:e9:4e:e9:ca:6f:e0:d4:62:55:30:
09:34:a3:62:f7:55:a3:f3:75:4e:02:47:c4:7d:30:
07:b8:fe:f1:d6:f7:f2:98:97:1a:0d:04:db:15:70:
ff:1f:1a:e2:e8:44:2f:9b:ae:e2:91:4c:7a:3f:57:
0a:90:e2:99:b1:ec:93:d9:2a:49:cc:cf:f7:16:09:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:EF:E5:B0:72:69:2F:A5:4F:9A:9C:87:D8:67:32:3B:CA:A1:50
X509v3 Authority Key Identifier:
keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:b0:60:a8:69:28:23:98:fc:58:24:36:eb:2b:8f:4a:c7:
eb:37:91:c4:d3:f6:39:b6:5c:f5:63:e3:91:c7:60:80:88:76:
36:12:ab:bd:11:fc:26:38:df:52:04:51:7f:69:e6:b1:51:cf:
50:c2:ab:18:ca:2f:62:aa:dd:96:ba:30:68:30:0d:af:37:38:
4c:c5:56:d4:d8:64:99:fc:5b:89:aa:96:8a:c7:ef:3c:eb:c3:
c6:35:fb:cf:45:e3:16:46:77:2c:cb:b3:c2:a3:95:7b:f1:89:
21:6e:24:d7:a1:8b:9c:f9:ef:19:0b:c4:90:71:ee:d1:26:00:
ae:91:cd:6e:a2:47:03:76:71:81:cf:2d:3f:9f:72:79:d4:32:
29:f6:5e:be:56:3a:f5:9f:f7:55:5c:55:33:21:fe:03:39:75:
3f:5f:85:fa:2c:f9:01:c3:ae:99:5f:26:59:b1:d3:2a:3f:4e:
1b:cc:29:7b:73:5d:27:cb:b5:23:b7:76:d3:93:56:29:39:ae:
ab:02:51:69:d4:ff:b5:b5:4b:33:25:b6:08:db:bc:b4:ff:4b:
51:fb:70:88:02:57:d6:b8:bf:f6:82:3d:7f:18:70:57:0f:5e:
f3:b0:89:fc:bc:1f:f0:1e:d0:e8:7f:68:8c:7e:15:39:1e:8f:
d6:50:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:21 2025 by rpki-client