Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: ktkirm8NUg2MXRUOhgP3ejx0E2nPzjaL0mGG6o4/lo4=
Subject key identifier: F2:D1:72:BC:CF:07:52:62:BF:DC:CF:5B:A3:0C:9A:44:9F:26:45:37
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 0194BC3C81D45A527E6AE4FE7C319DC9CFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: C9IYaPxUbY0w2ZNZbzvUZrWfW6/t4bEUfHsl3Bs4gXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:d4:5a:52:7e:6a:e4:fe:7c:31:9d:c9:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=f2d172bccf075262bfdccf5ba30c9a449f264537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:2a:ba:05:93:78:66:b1:36:f1:b4:51:08:
52:2e:68:b3:ad:e3:64:42:4c:05:07:94:f9:ee:d3:
85:c5:a9:61:34:a4:b0:e9:2d:4a:72:32:2d:d4:e0:
fc:a2:db:c8:43:60:08:65:eb:87:b6:c2:15:34:a9:
5b:05:2e:a1:58:ad:21:ce:5a:ae:44:81:2b:f6:85:
36:d7:9e:5f:9b:ba:d7:cc:9b:d2:f8:cd:3c:6c:06:
c7:fd:80:86:68:13:4c:88:35:d8:28:fc:01:31:09:
0b:6d:a3:a1:75:56:05:04:51:53:e3:45:1e:0b:b1:
db:d2:3b:10:c3:2b:88:d9:32:2d:62:2b:c9:c8:70:
27:83:9c:2c:87:c6:7a:ea:39:bd:05:fd:7e:1e:7a:
3a:05:69:d3:4b:9a:78:24:18:f2:31:9e:a6:31:a6:
e2:1a:fb:6d:be:f4:59:66:95:1d:94:07:44:8d:8d:
cd:ba:e3:2c:b3:0d:b4:e0:9f:93:99:44:5e:61:02:
5a:ad:b5:96:33:9c:aa:bd:f2:97:ee:0d:63:5b:02:
06:cb:93:95:a5:3b:5e:45:c9:bc:81:ac:bd:ae:91:
66:8c:d4:bd:3d:06:97:5a:be:2a:c8:a6:82:c0:32:
00:80:6a:5e:ba:cf:80:f0:a4:e6:17:88:66:6d:68:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:72:BC:CF:07:52:62:BF:DC:CF:5B:A3:0C:9A:44:9F:26:45:37
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e7:27:ee:fa:2e:e4:7b:59:93:cb:2b:f9:90:1f:45:43:78:
0a:54:98:70:ac:b2:85:7c:6d:90:87:d1:17:15:69:a2:f4:ee:
da:51:f4:f4:12:a0:b4:bd:c3:d1:e6:cf:7b:91:b8:ab:7d:df:
90:bf:08:87:10:0a:2d:ec:b3:0c:7f:7f:a9:c9:66:8c:1d:c9:
62:a5:75:e3:0c:7d:ca:a2:46:d5:5f:6b:4d:5c:86:44:b2:5a:
e7:17:4f:ef:e1:42:cc:d8:4c:1f:bb:e0:7c:06:e0:6a:f5:91:
8d:a1:79:b5:bf:7c:71:85:de:a5:77:5d:3f:57:8c:81:a3:24:
85:6a:ff:09:2c:c8:c9:cc:ea:df:7f:e7:4a:14:31:4e:d8:45:
8b:2e:0a:23:40:4f:9f:aa:d5:9b:44:66:6d:f7:88:b1:2d:00:
ae:13:f0:07:0b:d8:22:36:db:45:b0:79:0c:e2:03:1b:8f:fd:
b7:95:fb:38:4d:03:10:1b:f7:d9:fa:92:5f:75:f2:98:f5:84:
7f:0b:25:71:43:95:24:34:32:09:26:d1:f4:cc:70:88:f5:df:
9d:10:31:b2:ad:d5:7c:af:94:14:08:d7:40:97:60:69:6e:70:
c1:b6:57:c0:df:8e:23:a9:54:fe:4a:81:fd:b6:82:ab:a7:3a:
4c:23:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:58 2025 by rpki-client