Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: VreOQ694YHQres6ylWkL+gWtKsiCD56ESTsDBca8fvY=
Subject key identifier: 11:E6:87:84:C7:A9:94:96:F0:7F:A4:0B:94:F2:EC:5F:93:67:51:48
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 0194BBCF0D8BE842F9E30BAAD2BF52BBB242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:36 +0000
Manifest this update: Fri 31 Jan 2025 10:01:36 +0000
Manifest next update: Sat 01 Feb 2025 10:01:36 +0000
Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: eO2ZaMXEztFAJNzx/QR3K0bTcNGxZ71ZenByDrp2h88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0d:8b:e8:42:f9:e3:0b:aa:d2:bf:52:bb:b2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Jan 31 10:01:36 2025 GMT
Not After : Feb 1 10:01:36 2025 GMT
Subject: CN=11e68784c7a99496f07fa40b94f2ec5f93675148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:c2:20:52:51:34:4d:bb:80:0f:8b:f2:fb:
59:55:70:90:25:c3:49:f8:5d:c0:e3:75:ae:62:c0:
ee:73:e7:0f:6c:85:d7:df:3b:ce:fd:51:9a:a3:52:
08:a1:b5:38:11:25:d0:ee:ba:32:cf:0a:09:c1:6a:
e1:e2:39:0e:c2:f7:eb:0b:15:04:db:61:7e:6d:ab:
ba:a6:07:00:a0:f8:0e:a6:51:e0:bd:19:f0:64:cb:
18:c6:f4:e8:37:23:98:17:1c:9f:65:b8:b1:f8:58:
f3:cc:1a:19:e9:17:f1:16:f7:11:55:2e:1f:ba:55:
18:fc:3e:21:da:4d:6d:07:c6:85:51:ab:df:74:88:
56:22:6d:9e:23:3a:e9:6e:13:35:65:ab:8f:eb:f4:
82:8e:41:55:5b:93:54:0f:5e:d9:b8:d1:12:c6:e1:
21:33:0a:22:f0:c0:f8:a3:78:2f:09:d6:f4:f2:84:
b1:35:5a:ce:ba:92:f1:99:31:74:40:d9:ff:1d:0c:
67:52:63:f2:9d:38:f8:47:30:fe:d5:5d:ac:27:68:
5c:96:eb:17:da:63:cc:90:b4:26:81:5c:1b:da:3a:
dd:4a:10:d9:cc:59:b5:d0:91:b9:a9:ed:80:a9:48:
e6:72:66:d1:6e:7d:44:78:32:bb:db:fe:4f:1b:87:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:87:84:C7:A9:94:96:F0:7F:A4:0B:94:F2:EC:5F:93:67:51:48
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:f2:9a:e0:aa:e3:1e:53:69:44:63:50:42:6d:01:19:ab:
82:79:a2:82:b7:0a:bb:d0:45:5e:c7:dd:94:dd:bf:aa:94:23:
61:95:86:61:8b:80:22:49:36:5d:b3:fb:8e:70:fb:bc:fb:26:
3e:08:5c:8b:bf:54:6a:44:1a:6f:6b:4c:b1:9f:b4:f5:0a:f0:
0a:77:b4:9e:f9:e0:6b:72:d7:b4:3a:aa:7b:61:38:fe:83:b1:
9c:ff:59:63:c3:82:2c:ac:4e:99:c9:02:27:f3:34:7b:bb:b0:
57:85:42:cb:59:39:24:6f:07:22:61:c3:92:f8:4d:60:47:c8:
8e:43:92:00:d1:dc:46:25:d3:02:a8:dd:2d:da:02:c3:98:2f:
86:26:85:b2:52:34:61:32:2f:97:28:01:13:16:3d:a0:91:77:
f9:6a:f1:a6:bf:9f:fd:23:ed:8a:44:a4:0c:81:89:90:02:07:
c8:57:fb:79:a6:cd:05:55:58:b4:63:ba:2a:ed:d4:80:c3:0d:
e0:8b:3b:8d:34:2f:bd:6c:36:d5:71:0c:72:5a:dd:92:b7:ba:
e8:25:0d:b4:02:a1:38:d7:d2:b0:75:38:37:f7:30:d9:21:7b:
74:d6:ca:1d:37:dd:cc:41:58:b8:08:aa:9a:df:c6:75:b9:c9:
dc:42:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:34 2025 by rpki-client