Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: 4rxITTnx7WlafDHobYGuTDSNncIAmcxV6onTQvL0oPk=
Subject key identifier: 58:30:FF:FF:AA:4D:9A:5C:4D:54:3B:F6:19:B5:76:4E:38:4F:75:CD
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 0194BC3C109447F56347297EA608700A257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 01DF
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: Xj5oEzaRS4lPid4XkOBoCqi1em7/Pw5zd3tMzSYPQdY=)
2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:10:94:47:f5:63:47:29:7e:a6:08:70:0a:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=5830ffffaa4d9a5c4d543bf619b5764e384f75cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:47:27:5b:7b:ed:b6:2d:8f:b4:b0:99:b6:
ba:4f:26:e0:a6:ac:1b:be:b5:10:e6:b8:e8:0a:f6:
b5:66:9e:ad:b6:c6:b7:13:36:37:c3:5b:e7:16:43:
1d:99:d1:ba:ad:d7:e6:82:d4:07:2a:99:63:2e:db:
e4:de:de:e4:b1:e5:6b:e3:ea:60:c3:a3:d8:56:e8:
08:e4:3c:b5:6e:36:92:3f:19:50:c3:d9:91:ca:81:
1a:c2:26:a3:4e:62:9b:8f:da:7b:76:a6:f9:60:c0:
da:0a:bf:17:90:6e:76:e8:80:2a:da:c4:a4:25:16:
8d:5c:c3:72:85:7a:b0:c8:b5:ca:72:67:bf:32:6a:
c4:1c:fe:ba:bf:a8:e0:e0:a6:d2:71:6b:14:72:4e:
31:b2:0a:90:e5:60:61:2e:c3:15:83:52:f1:4a:ef:
5b:00:a9:e3:c9:2f:d8:dd:73:c0:3f:d8:22:03:60:
ce:b9:c2:56:15:9a:1d:c8:79:0b:b0:66:83:e8:9c:
8d:13:a8:6f:2a:69:bb:e9:00:b8:e2:89:bf:6e:c0:
da:93:83:5f:5b:11:b8:f1:61:9b:6b:c0:60:65:6a:
f1:b0:25:a3:19:6a:eb:68:b9:05:dd:5d:a1:09:9a:
4c:d7:e1:4d:29:1d:b6:43:84:92:1c:be:3e:b7:f6:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:FF:FF:AA:4D:9A:5C:4D:54:3B:F6:19:B5:76:4E:38:4F:75:CD
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:18:51:1e:c7:c3:3f:8b:3c:1b:75:1d:7b:85:ab:13:94:72:
76:e6:5e:d0:88:e2:54:9e:47:e0:fe:ce:e9:96:71:9c:c8:fa:
13:03:bd:03:70:e2:68:e5:ff:64:6f:6a:be:4f:fc:fa:2e:8d:
8a:e9:e7:7a:24:f4:38:cf:89:a4:88:f9:2e:e4:d8:07:a6:cb:
82:ce:7a:43:f4:54:bf:3a:6e:2a:88:1d:f5:db:6e:d5:b1:76:
84:1b:c6:dc:9c:e5:53:04:0e:2b:fd:ab:4c:99:5c:f5:73:f6:
e7:38:d3:87:d2:0b:20:b2:ed:a5:2c:9b:e9:87:c1:cd:0f:39:
2b:f3:76:46:50:6d:8c:bb:20:08:a7:65:a7:d4:c9:27:aa:b0:
73:12:b1:31:51:d1:fe:33:9d:8d:b7:46:7c:0e:6c:68:7a:d6:
31:f8:b3:82:02:ee:03:58:26:a8:ca:28:19:d8:c2:37:ab:bb:
e2:60:33:81:bb:d0:ff:f2:e5:1a:f6:ae:30:ad:8e:42:c4:2c:
b5:87:7b:12:2c:3e:ec:5e:a2:59:7a:d1:ea:bd:0e:f1:b7:f1:
5e:24:37:83:49:50:1e:4e:a6:4e:42:94:a5:e2:e6:c1:77:c6:
f3:91:9e:82:91:7c:0d:f5:c0:1e:97:e3:7f:01:16:c0:0b:35:
6d:3d:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:58 2025 by rpki-client