Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: nD/mLFlWwvr44u5ct64nR4uKKqLMUKOuZjdYnbvQ5Pc=
Subject key identifier: 27:33:19:25:10:E2:C3:AB:21:6B:6E:5F:95:BD:50:EF:A9:0E:58:09
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 0194BC3C1D65A2981A7918526C7A342B3C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: w/Yy8uSqN/zpACSxgTZA5kLmi5PwonG7KyB3EnDi29U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1d:65:a2:98:1a:79:18:52:6c:7a:34:2b:3c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=2733192510e2c3ab216b6e5f95bd50efa90e5809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:49:bd:3f:67:11:69:40:5a:50:31:78:5d:
41:dd:c8:3f:23:40:35:52:91:73:2a:db:db:4c:b9:
51:ba:f0:64:20:00:d0:33:7b:91:d1:4c:72:7d:bd:
7f:fc:95:e2:d6:d8:b2:75:d5:f8:d5:00:71:de:f9:
2f:0f:23:28:7e:e4:9a:ac:d6:23:06:6c:e0:d7:dc:
74:1f:05:4a:e8:7f:10:c1:88:47:5f:37:3d:d8:72:
0a:c0:b3:b2:57:3d:8a:ea:ab:70:f3:8c:8d:32:80:
8f:a0:fa:4b:28:c4:5d:5e:a5:9c:ef:7d:0f:e9:0b:
c2:69:cb:a5:9e:ef:53:8b:f0:29:54:03:a9:7f:5e:
5d:66:24:9e:64:73:48:7e:4d:f0:4e:92:f7:17:be:
9e:35:39:e1:ea:eb:4c:65:54:af:31:51:b6:9c:20:
9e:19:38:69:a1:4c:bf:2e:86:43:10:15:5b:39:ec:
63:4a:83:ef:af:f8:ce:aa:53:7a:8f:a8:a9:a4:b9:
e3:7f:50:d4:c9:bb:90:ae:16:41:7a:6f:f8:3a:a0:
b4:32:4a:b5:8e:72:7e:4d:6f:44:11:ae:03:fd:85:
5f:dc:7e:b7:3a:24:e6:b0:fb:d9:f3:51:4e:81:17:
a5:ee:d6:57:e6:12:04:7e:27:4c:85:36:44:62:67:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:19:25:10:E2:C3:AB:21:6B:6E:5F:95:BD:50:EF:A9:0E:58:09
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:d2:9f:36:27:66:86:a4:cf:3f:c1:ae:a8:2b:d0:56:54:
fe:de:31:a6:c8:bc:f3:5f:b8:fe:93:1b:e4:a7:e0:00:00:b6:
95:7f:bc:37:b3:0d:ef:ac:5f:76:9b:2d:4b:25:30:68:00:11:
8f:99:09:e4:c4:2a:b7:94:e0:02:f3:17:dc:06:d7:74:3e:3f:
a7:27:bb:fe:1f:c0:91:6e:f4:75:09:d9:aa:5b:99:94:85:ce:
a8:b0:f4:26:63:59:af:ec:f0:d1:f3:0f:a8:38:8c:fe:c0:67:
4b:b0:f8:dc:dc:d8:d2:31:3c:e7:e9:af:b8:77:b0:f7:5e:be:
a1:d0:b5:cb:5d:aa:1a:49:ac:ef:c0:ce:f9:7a:6b:8f:c3:7d:
71:8a:0d:8f:4d:cf:81:73:4b:04:ed:b1:77:6b:10:0f:af:38:
32:70:42:b1:d3:d7:1a:c6:f9:fb:2f:b2:ce:6a:60:4b:98:71:
c4:0b:17:5f:df:77:66:da:f7:bc:7b:90:e0:c6:0b:15:f0:24:
85:a6:6a:21:8c:4d:c7:3e:ea:9d:25:6c:fd:fa:c4:3c:b1:90:
e4:ae:62:27:54:29:8f:c6:c9:8c:3a:13:36:be:25:58:f0:7f:
4b:0a:bf:96:ec:61:15:31:81:27:47:4d:cc:ad:da:e8:e3:8b:
b9:95:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:54 2025 by rpki-client