Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: oXMR6pmvhqkEtl0LL59GqZGgv99e8GG3/f0RvzolOEY=
Subject key identifier: B2:B1:DC:32:DB:D6:10:61:19:3F:1A:34:52:FF:0F:EE:D9:1C:DE:31
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0194BC04EE7BD35CB4A3970040E2153291F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 084F
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: VRRd+RJ22Mu5mkXczbi3O3OHQMVwbwBiptxOEAAg1GY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:7b:d3:5c:b4:a3:97:00:40:e2:15:32:91:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=b2b1dc32dbd61061193f1a3452ff0feed91cde31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:2a:b2:0f:f4:75:50:08:6d:76:b5:56:e6:
8a:02:3c:c0:f1:61:07:29:98:23:30:28:b9:0e:4d:
36:df:bb:79:be:2a:f0:39:3a:c7:69:0d:2d:a9:d1:
88:3e:1f:9f:d5:f3:d3:42:f7:61:e7:c7:ce:33:2e:
c5:95:09:9f:68:51:0d:46:8e:e9:91:ba:26:b3:01:
74:04:78:1f:88:60:e6:e6:9d:94:38:7d:93:2b:36:
22:b3:5d:7b:13:02:cf:90:1e:35:72:6f:fc:9d:22:
96:15:6f:72:7b:a6:d9:f5:36:13:cf:36:2c:6c:b7:
32:ef:36:61:a6:f4:c3:fe:fb:90:b4:20:44:52:8c:
4d:a3:cb:fc:d6:91:a2:b9:a1:d2:e2:38:6a:77:5f:
62:fd:2f:70:89:e7:0b:fe:24:c5:6f:6f:fe:36:52:
04:92:4c:d5:7d:bf:44:3d:6b:39:ac:3b:30:33:af:
e0:c7:21:14:83:2e:bd:c5:ab:25:b0:68:49:fc:71:
a9:6f:a3:a7:86:4e:5c:7a:33:47:01:55:d6:26:08:
a3:c2:5a:3d:70:ed:4d:b5:c2:9e:25:b6:b2:ae:b6:
99:68:20:6a:d8:e2:c5:a0:cf:14:60:7b:50:81:55:
f2:25:96:46:5a:0c:dc:ee:be:42:23:cf:b1:af:76:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:DC:32:DB:D6:10:61:19:3F:1A:34:52:FF:0F:EE:D9:1C:DE:31
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:88:1e:f8:26:ca:3f:b4:95:ff:17:6d:36:19:88:1f:b8:
95:02:af:a1:ed:7f:b8:68:4d:59:69:73:3c:aa:b6:c6:be:65:
7c:7a:05:b3:e6:46:ac:aa:bf:d6:b1:78:3b:55:66:12:1d:81:
44:a6:f1:aa:e2:b8:40:fb:2e:00:d2:50:91:03:e4:b0:5a:1c:
f5:92:d4:4b:c2:36:5e:55:e8:5d:b2:8c:88:7a:1e:f9:80:a6:
ac:81:73:54:d4:0b:ba:7e:90:ad:0f:35:82:2b:6c:97:db:24:
05:e5:45:f1:db:51:c9:93:e5:28:2c:a1:ba:48:38:f1:d2:ba:
bf:25:26:b1:59:46:3f:66:79:fe:d1:b8:eb:df:21:f7:be:80:
c7:01:77:12:24:62:ec:17:97:b1:a2:56:7c:86:56:6d:d3:83:
34:4a:59:76:91:79:c7:92:45:80:ab:dc:b0:0e:13:3d:08:8b:
26:27:34:1e:8b:b4:68:9e:1b:a2:50:f2:19:19:46:9d:e5:9f:
36:98:44:69:a9:ae:60:4a:07:03:40:4f:ee:ba:be:52:b6:42:
0b:97:df:22:ca:5c:39:43:56:0c:f4:f6:ca:2f:76:00:7d:41:
8c:65:f2:21:6a:99:df:90:c9:9d:70:eb:e9:b9:3e:81:07:8b:
25:ef:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:47 2025 by rpki-client