Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: qFAfLY9BrLOZv6D+S0NEJ3IXA6cFy6RrERe3jjWZ85g=
Subject key identifier: 2A:A9:3D:07:1E:AB:DD:47:E8:A3:D3:2C:E7:6D:8B:75:D9:D6:AE:D9
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0194BCE0EB98B688A745BB066EE3068DB267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0A30
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: hRqxl2nlc/eyFZe6tpZgCYw8lvN48KuJksiD4xkS/vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:98:b6:88:a7:45:bb:06:6e:e3:06:8d:b2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=2aa93d071eabdd47e8a3d32ce76d8b75d9d6aed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:16:0d:67:e3:e5:25:d1:53:70:2b:a8:71:
4c:60:2e:d2:36:4c:d0:41:58:c9:63:80:c7:42:a6:
dc:a7:f9:a1:34:02:a5:bf:85:84:11:cf:8d:38:7d:
91:f5:e3:d3:ec:07:fa:27:02:18:0d:4f:32:9b:57:
aa:cb:cc:15:bb:85:be:9c:a4:35:50:89:97:7b:3b:
2b:d0:6b:19:4c:bd:c4:af:fb:63:be:a2:f6:04:bd:
b9:a0:a6:a8:c2:38:1c:24:8f:8d:32:b9:17:80:1e:
3d:58:72:8b:6e:10:13:72:6c:a8:8c:6d:b6:67:0b:
fe:25:33:43:46:c8:5d:28:94:51:32:ad:c6:71:86:
f7:a3:21:6b:91:67:d4:3a:f1:cc:be:47:71:bf:fa:
0b:86:40:12:34:64:07:df:61:1e:5e:61:d1:19:a0:
4e:46:bf:ce:c7:29:5e:ae:cd:9f:00:ad:7a:b6:5d:
b1:66:47:e2:61:87:a1:8e:09:a2:cb:2e:35:72:ac:
b9:4f:82:b4:08:ec:68:59:85:63:d0:76:1d:77:f4:
f7:63:25:14:b5:62:0d:44:9c:d0:e9:75:34:64:80:
81:35:8a:5b:86:2a:bd:bc:af:42:a9:a8:92:9b:2e:
cc:94:2a:4c:09:3c:0d:d2:19:17:a4:5e:1e:ab:a5:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:3D:07:1E:AB:DD:47:E8:A3:D3:2C:E7:6D:8B:75:D9:D6:AE:D9
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ef:f0:33:17:84:9a:46:ed:cf:35:d4:89:3f:41:8b:1f:8e:
75:25:d4:df:47:88:39:25:ce:8b:8e:ed:39:39:4c:1f:04:c6:
b1:d2:d1:ca:29:e4:db:39:5d:82:17:7f:39:76:e3:35:e5:a5:
07:38:bc:98:f4:2b:8b:80:2c:9c:e5:70:92:05:16:bf:7a:3f:
89:49:7f:e6:7a:dd:eb:7f:dc:c5:5a:a7:e1:d5:11:2a:bc:0a:
b7:85:cc:ae:85:62:9e:77:5c:b6:f3:c2:1b:51:09:34:b5:de:
bb:1c:b5:86:5a:df:6c:51:d0:2d:40:0f:be:6f:04:ba:22:c0:
eb:89:6b:16:99:37:d3:d1:c6:f9:e8:8c:dd:47:55:22:ad:1a:
8b:e9:e0:e5:ef:0f:74:3f:5e:39:4f:3d:78:e2:e2:a8:e2:af:
a2:6f:06:19:c8:22:d8:31:97:30:21:3f:4f:b6:a3:e8:0a:0d:
85:6f:6e:50:c4:81:7e:67:27:69:63:1b:7b:f0:01:2a:71:20:
16:e7:fd:6b:f7:77:e3:0d:0b:9f:c4:49:c9:fb:28:2d:1f:9f:
b2:5a:e3:3e:c0:98:ad:3a:69:98:e0:c1:f4:b4:bf:bb:ef:54:
a6:61:f5:a0:da:f1:99:ee:5d:34:9b:38:da:b2:e1:71:34:0b:
f7:5a:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:16 2025 by rpki-client