Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: misOV/4wS4pLwp3YAUTL8+bajDqvVIUvw6v9lySPz48=
Subject key identifier: C4:86:5C:9E:54:66:19:98:E4:9F:0F:24:4C:49:19:76:88:B9:54:CC
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 0194BCE064C82A8A9EF2DE39B4CB4D8EDC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 05C1
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: uMNXnxbjSyW3+EX8P1PHFXGlyog93kHAM1oED+8XNYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:64:c8:2a:8a:9e:f2:de:39:b4:cb:4d:8e:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=c4865c9e54661998e49f0f244c49197688b954cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:27:8b:d1:86:c2:8b:54:1a:1a:bf:44:34:
7e:e1:0f:6a:52:86:f8:e9:44:86:52:69:44:41:1a:
ca:a1:fd:ed:ad:5d:45:24:f3:b2:a4:1c:9e:d7:ba:
b3:f9:94:77:53:01:87:f4:5b:83:9d:05:c4:a4:f6:
3b:5e:d2:fd:ad:2b:c5:9d:16:ff:5d:22:c4:10:26:
aa:ea:90:11:67:ad:d9:fe:86:be:f1:93:14:43:61:
8c:bd:e7:45:f0:cf:98:e9:f1:f1:cb:54:69:f1:ab:
e8:de:bc:41:e3:65:1b:69:18:85:9b:cf:65:ba:2c:
42:ea:60:b2:c8:91:cb:c4:d8:dd:43:30:d4:fe:42:
d0:4d:18:84:8f:dc:3c:a1:6f:a3:8d:c2:0d:a2:cd:
f8:73:17:9c:54:3b:c5:6f:a7:95:03:16:f9:75:38:
49:60:57:bb:e7:10:4c:0c:a8:2c:58:25:dc:a9:94:
a1:ad:d6:b0:ee:65:97:c6:b3:94:c8:14:bc:88:33:
87:cc:57:62:8b:b9:9e:cb:b5:e1:67:e2:2b:a4:0e:
e8:37:e3:94:91:fb:ae:e4:19:19:23:c7:12:39:27:
30:55:38:63:8b:04:90:67:6b:44:63:1b:03:6a:0e:
4f:4f:39:93:89:a0:10:b5:8a:22:98:26:b1:ee:6a:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:5C:9E:54:66:19:98:E4:9F:0F:24:4C:49:19:76:88:B9:54:CC
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:1c:b9:6b:4d:02:1c:70:13:9e:de:08:07:c1:e5:07:05:
c8:27:7a:e4:4a:9f:87:3e:18:fb:3f:2f:d3:4a:e9:b8:80:4f:
a5:1d:59:de:25:6e:57:c5:0a:96:fd:95:4f:57:3c:f0:34:ca:
8d:e8:aa:13:40:7f:00:c9:a3:14:2a:b0:f7:c2:58:d6:ab:d9:
74:50:ce:eb:7f:d7:84:91:09:f4:1a:e9:c6:ca:18:03:16:b1:
d5:0c:cf:76:f2:71:9f:69:7a:68:4e:7b:ab:94:d3:13:c1:5d:
38:84:3f:19:1d:d2:8a:7e:5d:fe:f1:2d:7f:98:54:91:cb:f9:
7a:61:c7:bb:d5:62:20:95:7e:fc:2a:64:b9:78:59:62:4f:0a:
86:1e:0c:38:4c:f4:06:ad:a1:4a:c7:f6:6a:53:f1:0f:10:b0:
5c:d8:05:30:e7:4b:4c:35:78:fd:56:41:12:6d:d2:87:89:96:
63:c5:e1:c9:07:21:23:8b:27:e2:5f:17:bf:15:31:57:c3:d7:
1c:ae:eb:7b:e4:2f:6d:4e:3a:87:ea:e9:3e:7d:58:68:4c:d7:
26:67:aa:9e:42:c9:25:e9:05:86:d3:1c:d9:7e:f5:55:80:e7:
b5:15:ee:0d:80:07:0e:2e:44:26:06:7d:a8:dc:4f:1f:78:7f:
ee:4f:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:07 2025 by rpki-client