Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: 0zdu4ooN3gBOFxMc0rBnWBZwiootZGqf03sQ4npg7EY=
Subject key identifier: BD:55:E4:2F:0E:19:6E:7C:4E:7C:E3:D9:CC:44:85:75:69:0B:F2:0F
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 0194BD8586C233BD577779C88A034EC8324C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: wBbbKLKPqq4qWEhHkBs1YIAfeZKzxj1rPW13bKeVFc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:c2:33:bd:57:77:79:c8:8a:03:4e:c8:32:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=bd55e42f0e196e7c4e7ce3d9cc448575690bf20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:f4:31:a1:21:5f:34:a2:27:3a:b4:e8:42:
e7:a5:e8:4b:f1:06:0f:8a:35:2e:98:25:dd:a3:3f:
9f:ae:07:e7:fe:08:5c:b4:45:2c:dd:b8:4f:b0:59:
3f:3d:4b:67:a9:54:20:cc:45:70:66:69:ff:2f:3b:
a3:f7:fc:22:1e:05:2c:41:c4:ef:9b:6b:87:3f:79:
21:57:9d:0d:ce:a3:6e:ca:5a:ab:b0:cf:90:7d:31:
de:4c:8e:b6:33:c5:72:a3:9c:67:45:c8:a3:0c:2b:
0d:bb:f5:a9:ee:96:82:23:3c:5f:13:57:4f:b1:1d:
0e:e4:3f:aa:53:bc:e3:4f:99:dd:47:fa:1c:df:38:
e3:c3:c4:f5:44:d2:45:87:4b:0c:9d:d0:22:d3:23:
43:97:50:63:12:af:db:b6:21:57:00:df:56:75:10:
23:61:65:c9:7d:9e:b8:e4:65:8f:79:ea:bb:e2:22:
5e:49:a6:87:ad:ea:4d:26:8b:04:53:df:fa:ac:15:
e7:de:d0:90:c2:3f:e6:2e:b3:f1:cf:e7:97:b8:5c:
98:b4:06:1b:ce:5d:29:7b:7c:1b:21:3b:23:69:e0:
41:c3:d7:4f:78:bf:3d:24:2a:2e:a6:b2:9a:9f:f6:
39:d9:95:a1:46:ef:e5:19:d5:8c:f6:f1:48:a2:e2:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:E4:2F:0E:19:6E:7C:4E:7C:E3:D9:CC:44:85:75:69:0B:F2:0F
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:d7:3b:b1:14:ef:8a:52:cf:0a:1a:3d:94:db:d9:33:b0:
66:d2:65:cf:74:45:be:84:6b:ab:be:fc:49:30:04:de:2a:ae:
b6:22:5e:de:30:63:84:a4:6d:7d:d9:4c:2c:23:4b:86:11:03:
1f:48:29:27:bd:8f:2c:6d:c5:7a:dd:8d:99:e8:56:52:3b:09:
f3:ef:b8:8b:c1:84:11:4d:46:c8:fb:73:d2:ea:29:ec:1a:0c:
f9:0b:23:b8:79:45:b0:05:29:c3:23:52:78:bb:58:e5:2b:9e:
bf:c1:bf:45:bf:4a:28:48:d6:55:d8:39:06:cb:c9:2b:fc:71:
7e:a4:c9:84:18:81:9a:f0:75:37:0a:31:84:ab:fc:d1:30:77:
0b:d3:94:a8:ae:10:11:e5:ef:a2:7b:78:c7:6d:25:03:46:c8:
94:e8:58:c6:a7:34:30:5b:f4:e4:ce:2c:16:2a:67:72:a5:b0:
65:4a:cd:5a:7f:1d:ba:0d:1e:68:4b:00:37:8f:a6:60:37:b5:
94:29:57:10:66:ad:6b:47:53:a9:9d:5e:2a:aa:b0:43:dd:b4:
6f:3a:12:fd:f3:e1:01:06:a6:38:e9:94:b4:01:1c:5c:0e:3f:
78:45:70:b2:69:d0:74:1d:ec:51:22:dd:ca:00:30:20:8b:20:
17:84:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:26 2025 by rpki-client