Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: P4z8sHb0bVf4Ulv762FJJ/skXW9elW3CL7c/00qB2Vc=
Subject key identifier: 5F:C4:85:71:D7:C5:F0:D1:92:25:18:43:B9:99:D8:1E:10:0C:FD:CF
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0194BC3C469E1D16B8F765F7A42386643CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0672
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
2: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: A1RibayVn7cO2rFLOe8Z9X/2+BZGiH749oQ8SpHn4zA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:9e:1d:16:b8:f7:65:f7:a4:23:86:64:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=5fc48571d7c5f0d192251843b999d81e100cfdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:07:81:cd:39:87:56:c8:61:b7:6d:7f:e2:
3d:b8:34:b7:37:9b:ed:9c:a9:53:83:c9:07:f6:19:
4d:fe:ee:c1:48:98:42:3c:63:d0:5c:68:2d:29:0f:
cc:83:5b:d3:28:ca:78:08:d9:8c:e2:7e:b1:be:f6:
20:c2:ca:de:4c:54:24:6e:9e:57:e5:77:70:f2:ba:
b3:ff:39:33:e4:56:6b:2c:e1:c6:74:9c:91:56:78:
0e:99:8e:23:24:4c:75:2a:fc:08:c0:fc:54:f6:63:
26:77:8a:59:cd:c8:b3:a9:a0:d0:0b:e9:09:f5:fe:
0b:ec:67:70:2c:75:16:2a:3a:83:82:cc:73:39:72:
a8:44:05:dc:3c:7a:af:e5:5b:81:1a:c2:6d:9c:af:
23:e3:49:ba:90:66:d3:ba:b8:2c:e5:06:3d:88:61:
66:fe:63:92:60:b8:b8:3a:22:85:34:6d:f2:15:42:
6f:e8:d4:d0:24:ad:55:99:f3:4b:09:85:5f:9a:31:
56:c6:f0:9c:b8:c6:32:c2:38:7c:98:31:54:5e:a7:
82:0e:d7:69:bb:3b:a0:a8:b4:7c:1c:69:b3:09:5e:
bd:12:e1:21:e3:23:14:e5:a1:e0:35:be:b2:5d:90:
de:65:41:ec:15:b0:e7:6b:fc:da:7b:d5:e8:f2:21:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:85:71:D7:C5:F0:D1:92:25:18:43:B9:99:D8:1E:10:0C:FD:CF
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:b1:17:f0:63:7b:89:57:87:4e:d9:7a:a4:b9:9c:1a:ef:
ab:87:6a:aa:ed:76:00:9c:41:fd:8d:9a:1a:fc:a6:1a:52:62:
fe:a2:9e:d0:da:6c:c2:ed:eb:17:98:c3:6e:3d:cc:bf:ca:91:
e5:60:09:63:38:de:8b:39:df:05:1e:d1:4c:ee:35:66:00:08:
68:de:c7:45:51:1a:b2:3e:89:1d:d8:5f:ca:f4:ee:15:7c:44:
30:a6:a1:3d:ec:91:4e:d7:47:c5:82:fe:71:89:9b:d2:9b:4d:
81:3a:02:a5:08:f6:ed:f6:b8:9f:06:4d:48:73:0b:40:1f:ff:
b5:68:c8:f5:5a:26:98:0c:8b:55:18:07:e4:01:f7:6f:02:56:
c4:d8:10:a7:1d:51:9a:90:a6:dc:c6:6e:3e:d8:b4:61:83:4a:
34:65:2b:32:fa:b2:9c:13:19:f4:07:dd:0e:d1:5a:6e:af:fb:
97:70:01:ce:45:5b:9e:4e:45:65:b4:9b:51:b1:7f:e5:0f:60:
59:8d:40:79:6b:eb:52:08:48:b8:ee:cd:34:0d:38:39:63:91:
97:6b:07:ea:13:be:45:71:b6:1c:75:ae:dc:a3:f7:a6:e6:c1:
c3:07:f5:c9:ef:f1:47:06:cd:10:0d:05:58:d5:14:14:2c:5b:
99:a5:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:25 2025 by rpki-client