Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: wbOEGnoZCDe4PIBrJL6DcesiXhAYsrcgAsdLiwlr4GQ=
Subject key identifier: 4D:FC:F4:A5:87:EA:A9:46:26:57:E6:6F:42:5A:43:98:A9:9C:84:E6
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 0194BBCEC1EEDECEB2A6EC72AA96477135FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: WwPzVU2qET9gZBed1Xl/5LxPO+nMPJw9ktvDXAnKpog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c1:ee:de:ce:b2:a6:ec:72:aa:96:47:71:35:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=4dfcf4a587eaa9462657e66f425a4398a99c84e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:55:a1:44:ae:aa:c9:35:94:48:78:09:bd:
c9:0b:0a:82:a3:63:d1:b2:e7:f8:1f:d4:15:4d:3c:
62:49:4b:c8:b6:9f:d2:d4:57:81:29:15:e7:75:db:
bd:f0:5f:42:43:b9:93:04:89:41:57:6d:f4:b1:25:
cb:a4:61:34:b9:a6:fe:93:34:64:0a:a5:10:8e:83:
4f:08:29:51:c8:57:c9:e0:e2:8c:64:87:b4:10:cd:
c6:ae:41:cd:bc:a5:fc:0a:bc:ca:99:a4:a2:49:68:
f8:9f:4d:24:be:8b:3e:c7:24:4c:c2:1e:f1:0b:64:
a5:22:f7:7f:6c:47:fa:3e:86:73:af:7e:6c:2e:b0:
94:ad:fa:f5:bf:ec:c9:19:26:c0:b9:5d:02:27:6c:
4f:c2:db:9c:ad:dc:db:71:a5:34:68:17:b7:a2:3a:
e0:e7:40:d1:a1:ec:db:64:db:df:1b:1c:c9:fa:9f:
95:c7:43:ad:0a:7e:74:5d:90:1b:4e:8f:d5:cf:54:
2b:9a:f4:e1:13:bf:c6:f1:9d:9d:9b:c8:dd:a7:51:
82:62:de:2b:b1:b1:75:8c:c8:fb:a3:41:20:68:54:
63:e3:d0:08:f1:c4:fb:e9:4b:a1:e4:e4:b9:49:17:
c7:57:c4:40:a7:ca:f8:72:8d:50:57:c5:1a:dd:b6:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:F4:A5:87:EA:A9:46:26:57:E6:6F:42:5A:43:98:A9:9C:84:E6
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:41:aa:60:47:97:a1:25:24:1c:ea:40:da:06:f8:e1:87:
0c:93:d8:c9:fe:80:93:89:bb:54:5b:33:db:4b:4c:95:08:81:
8d:51:d9:47:82:52:f0:91:10:43:1f:3a:7a:b3:d2:a5:69:8c:
69:df:aa:aa:78:2f:3a:22:1a:ae:10:5d:9c:29:73:8b:fd:ec:
32:78:57:aa:3f:89:6e:1e:dd:0d:63:d7:45:da:78:c0:68:1f:
7f:eb:d5:eb:34:ba:29:9a:02:7f:da:c6:95:66:68:66:24:45:
7c:a6:74:f9:ee:d8:67:2d:bd:fb:6d:e8:39:d0:79:ca:69:69:
75:33:ca:13:9e:a5:55:c2:ca:b1:43:19:bd:50:a7:dc:4c:95:
51:d1:b2:e7:b1:f8:ff:2b:7c:05:15:8b:a6:90:4a:b5:7b:e2:
14:ef:20:64:29:d4:13:cf:ef:76:2a:65:b9:04:5d:79:5f:27:
06:88:01:0b:42:7d:c1:82:97:85:91:e4:2c:dd:2d:fd:ee:c2:
5b:21:cc:b2:4e:56:39:7e:7f:ca:31:36:45:88:65:cc:38:67:
48:f5:cc:55:2b:7d:d4:26:11:fc:8b:5a:d9:a9:c5:fb:5f:58:
7d:82:f5:27:79:9a:1c:78:22:c7:f7:9a:41:51:91:6d:6b:aa:
0e:f0:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:23 2025 by rpki-client