Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: iWVcESayYGj+N7YSdDoNfYIioQ+XNPvVt9gihzcH68M=
Subject key identifier: D4:46:6C:BE:D5:F0:54:37:B5:74:D0:68:6B:63:E6:E1:39:2F:F8:96
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 0194BC04A09CD7B9B3FADC1085CCEC06D4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: KZGXWnTbE17zkCiSUQFNNooONCwSCziVPvY4tNcCBqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a0:9c:d7:b9:b3:fa:dc:10:85:cc:ec:06:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=d4466cbed5f05437b574d0686b63e6e1392ff896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:65:c9:30:ff:88:f6:67:be:37:a7:70:b3:
73:b0:98:14:6f:fd:94:4e:74:eb:e8:a6:54:63:4c:
8d:44:63:62:7e:4b:35:74:3f:ad:ae:06:8b:d3:f8:
7b:be:6b:78:8a:e5:56:16:c1:65:01:e5:9d:12:66:
90:c3:92:b9:f4:f1:3c:69:47:f4:c4:b4:22:16:0d:
41:41:70:d0:4a:b6:c8:4f:c3:1a:df:53:8c:2a:91:
3f:48:1d:f1:b9:b9:9f:9e:77:a7:75:3d:2f:2c:b4:
fd:5c:f3:fc:62:d0:98:eb:38:8c:3f:10:5d:6c:8a:
f0:54:e4:f8:d2:6a:38:ff:24:52:19:5d:32:16:ca:
72:5b:50:a9:81:ef:5d:7a:10:ac:e4:07:ba:8d:de:
2c:98:47:26:40:0c:88:6b:7a:7b:94:70:74:72:44:
d2:c4:8b:bf:16:f6:59:ad:28:12:22:db:65:13:c5:
a2:f3:bc:96:27:c6:a0:7c:b1:c8:18:94:7e:4e:91:
82:56:70:79:df:23:fb:e0:b7:6d:f7:98:b1:89:54:
c5:44:ae:fe:68:e2:e3:bc:84:79:cb:84:86:b8:24:
a6:af:e3:94:31:5b:6e:de:da:4e:45:23:c3:9d:c5:
42:ec:92:87:6e:ec:71:57:fd:3c:f8:82:a4:f1:48:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:6C:BE:D5:F0:54:37:B5:74:D0:68:6B:63:E6:E1:39:2F:F8:96
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:6f:28:bf:21:57:ba:45:38:8b:31:05:ad:9a:ea:00:aa:
da:ee:b1:07:16:2c:d1:cc:42:cc:b2:1c:16:e3:cc:c1:c0:33:
d4:ba:ab:10:3b:b6:50:16:02:59:09:de:42:f8:67:13:d3:a3:
2f:e3:97:c0:00:63:f9:63:dc:1a:14:0d:59:ef:d6:c6:32:ef:
2f:4c:ca:3c:b1:d6:ab:ad:ea:77:6a:42:55:3d:e1:26:d5:80:
bf:1b:ab:ff:0a:9a:87:dc:7c:0e:a6:64:3e:61:e1:ef:51:a7:
08:78:02:d3:ce:40:ff:8c:72:cd:e5:4d:07:c2:1b:03:0b:82:
dd:56:5f:0b:08:54:85:04:cc:8a:5b:f6:87:07:76:95:4b:bc:
c7:97:53:f0:d0:c0:7f:c1:d3:2b:80:9b:f4:b6:58:73:4e:0d:
59:c0:9d:ee:ab:5c:b8:ac:1b:a1:92:5b:7e:95:5f:c3:ff:0b:
ae:0f:a0:05:1c:6c:9a:00:18:67:a8:25:24:7c:56:17:00:7c:
e4:54:ef:b1:c6:7d:d6:7e:72:95:f9:d5:88:13:6d:fa:56:79:
f1:fb:bf:ed:ea:f5:ce:b5:6e:de:b9:95:a2:02:55:9c:10:7b:
a2:79:cd:63:d5:50:3f:9a:50:1b:84:15:ab:b8:cf:64:d6:61:
21:8c:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:43 2025 by rpki-client