Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: QbIDrrZJUBDs35zSQPa2NMkipL0/+r4fRFZEY9HoSLw=
Subject key identifier: 5F:AD:30:4C:69:B0:EC:4D:BF:75:5E:C9:38:F7:ED:01:3E:7E:37:9D
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 0194BC3C483D01E1B7FE1E12E4DFBBE88AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: m3tflvS6fEGSR8GwvpqPVN+04yZdbB3VRBSPRCWwznI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:3d:01:e1:b7:fe:1e:12:e4:df:bb:e8:8a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=5fad304c69b0ec4dbf755ec938f7ed013e7e379d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:63:dd:10:5e:77:61:6b:27:1f:21:23:96:
d1:a7:e6:33:45:ee:a6:96:76:43:3e:f8:15:be:14:
89:14:18:b9:7b:64:92:cf:82:6a:5c:f2:7d:20:ce:
87:63:76:6a:3e:e3:a1:e7:65:c0:4b:20:6d:6f:2f:
4f:55:34:d3:89:da:41:09:27:78:fb:58:d7:1c:83:
f8:af:ef:4f:fe:d2:fe:df:67:7c:5d:a2:d5:f7:ca:
cd:6e:08:43:67:b2:82:09:78:69:f2:05:c1:5e:ed:
b4:ce:f5:14:f0:d2:ae:04:eb:74:2d:5d:aa:dc:04:
50:42:ec:24:9e:2c:94:99:47:d5:75:d2:40:bc:7d:
e9:54:b6:d7:a3:41:17:c3:04:ed:79:8c:5a:23:b6:
59:16:66:71:d0:6f:de:5b:84:e3:07:89:9f:10:d1:
89:17:bb:d5:fc:ec:d4:fa:e1:08:15:0b:67:86:75:
d0:44:c9:77:be:cf:7f:da:96:24:73:8c:b5:40:58:
b6:31:ac:ed:8a:58:37:4b:30:98:1e:1f:76:c3:4f:
76:fc:82:77:b5:9e:6f:a4:fc:29:66:32:ef:39:fe:
c5:4b:a6:79:6a:7b:e5:40:ab:de:39:fd:b9:a0:10:
05:cc:1c:a8:6e:e9:4f:e8:14:d1:10:8b:c7:e2:8e:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:30:4C:69:B0:EC:4D:BF:75:5E:C9:38:F7:ED:01:3E:7E:37:9D
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fe:2a:1e:1e:60:ae:91:1a:bb:cc:e5:eb:f5:a7:b5:e6:85:
2a:7c:e0:dd:7c:15:0e:44:6b:23:49:78:69:ea:e7:28:e4:2b:
2e:56:78:9d:f1:6b:48:b2:07:64:e0:de:e2:65:cb:cf:1a:85:
22:e4:7d:e6:3a:03:6a:1c:dd:d7:fd:b2:b9:35:0f:37:29:69:
88:0a:ae:90:f2:d7:57:82:af:07:c9:b6:7b:50:44:65:68:e5:
cf:23:5b:24:2c:c1:5f:e3:df:38:04:56:60:1d:fc:ef:ff:c3:
bc:dd:58:ae:06:b4:5a:89:8c:6d:e5:c6:09:d2:f8:51:c1:47:
b7:e2:9b:08:e5:a2:73:25:8c:8d:cf:a8:aa:bf:40:f8:c5:74:
d4:b2:39:37:10:a1:a8:f6:10:12:87:b1:9a:6a:d8:e4:f2:19:
11:7b:db:26:a7:ef:0b:b6:cf:3c:c9:a7:75:a2:5a:4a:db:d0:
a8:ef:4a:c2:a2:cf:a3:aa:57:01:e3:83:64:dc:8d:c7:ac:87:
27:62:5f:4a:17:8e:09:4f:61:2d:7d:41:d5:29:da:f3:9c:8e:
3d:97:c9:2b:ff:59:55:bd:fa:47:f9:04:13:3d:f4:dc:c1:0a:
61:4c:12:2c:5d:5d:96:39:a6:d5:75:91:07:da:59:cc:ff:13:
a8:24:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:36 2025 by rpki-client