Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: EuS8M1+VDM/k7dVag82DV7x2sSl3LcdnIKuMLFEo6Sk=
Subject key identifier: 0C:73:E4:24:25:E5:B2:A1:9B:6C:F7:97:DE:C6:C4:58:C4:41:1F:8E
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 0194BD859E0A87F9702337B499349F51C3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 1207
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: xCuV8FQzA1fu15aWYNwPfU3aN+9t2MHOLDinOZLIGII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:0a:87:f9:70:23:37:b4:99:34:9f:51:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=0c73e42425e5b2a19b6cf797dec6c458c4411f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:4a:e3:29:32:31:98:b2:aa:a5:76:e4:9d:
05:b5:c2:4b:04:0f:8e:24:4c:1d:7d:98:83:b5:46:
9b:11:c9:c8:47:98:e3:20:20:2f:55:32:30:54:1c:
10:51:f6:98:9d:5e:ca:61:37:db:0a:c5:45:c1:07:
19:61:6e:fb:69:d0:5a:11:0b:11:4e:94:22:e9:21:
5b:2e:d6:73:a0:c7:2a:d0:27:93:3a:cf:c0:d0:91:
e1:f6:ed:8f:ad:c5:c9:fc:90:3b:f8:7a:03:c5:90:
74:e3:a2:94:f6:5c:b7:09:1d:33:91:17:10:f0:b6:
f7:a3:d6:e4:3f:85:4e:cb:fe:d5:21:38:91:a0:ef:
2d:42:d9:7d:97:f2:f6:da:3b:0c:68:6b:6d:c3:3b:
db:6a:9c:23:bb:24:5f:4f:9f:88:32:25:be:69:b8:
28:6d:00:09:ac:27:2d:1e:44:91:af:01:d3:dd:21:
e5:59:fb:26:df:6f:7d:e6:d0:17:75:28:96:ff:46:
5b:41:e5:51:11:89:a2:54:2e:27:cf:d5:d9:9b:ab:
cd:01:8e:38:9d:a4:44:0d:0e:49:c0:b8:5c:11:7a:
1d:dc:ac:a1:8f:e5:a4:d2:ee:a6:4d:81:3b:ad:d4:
b6:46:b2:ad:3b:09:6a:5e:a0:30:e8:cf:6d:78:70:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:E4:24:25:E5:B2:A1:9B:6C:F7:97:DE:C6:C4:58:C4:41:1F:8E
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:bc:51:86:87:4a:99:75:89:c7:48:c9:9b:de:d4:0d:84:
6b:10:4a:bc:cc:60:a8:7d:1d:74:f5:49:cd:6d:0e:be:d5:58:
3e:26:d6:5a:4b:5a:86:31:10:e9:b1:ba:75:17:d0:1b:b9:b3:
59:f7:0a:6e:ef:f5:ba:07:d9:6e:e2:22:52:17:37:9e:3b:97:
68:6b:3f:82:5d:cf:fd:16:af:7f:f1:02:57:33:2d:af:7e:a8:
77:7e:2d:2b:b5:de:82:ff:4a:29:06:57:93:18:fd:91:02:c7:
ec:25:13:3c:f2:a6:93:a0:e7:6c:83:37:75:2b:c3:a8:4c:21:
c5:45:02:56:62:68:17:10:e8:6c:eb:4b:dc:b9:e2:9e:57:8b:
19:f2:fc:97:92:70:b8:9a:1c:02:95:4d:1f:4c:30:40:cd:f0:
fe:ca:37:7f:00:8b:7d:dc:d5:fe:f7:d6:70:24:4f:db:2a:05:
b2:3d:40:6a:22:f6:08:97:2b:01:51:25:76:d7:32:e6:e5:30:
7c:47:ef:2e:93:85:2d:4f:f2:50:af:b1:33:c1:9a:5d:db:95:
41:88:30:51:c0:74:fc:27:d0:5b:ac:d1:46:be:3e:ed:16:7f:
84:7f:d3:48:07:eb:fa:eb:be:96:66:f7:07:29:22:9c:02:20:
73:a6:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:18 2025 by rpki-client