Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: wgUKOsjUa/9A7FmCH3HvoK7P9KCiFn99LamARFg4GA0=
Subject key identifier: 63:CD:5C:CC:E5:48:76:F9:ED:C7:BB:DD:62:97:B4:1C:E8:D2:A4:F6
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 0194BBCEAD1FF5CB6521C1CFDE7767EF8BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: HY92hE8pasazXB/GTGotQLuPuN3zctUDhG7nCVkO8vY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:1f:f5:cb:65:21:c1:cf:de:77:67:ef:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=63cd5ccce54876f9edc7bbdd6297b41ce8d2a4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:34:f5:5e:9d:94:66:16:c5:61:05:03:b5:
41:07:37:d0:15:5a:a2:df:b9:cc:f4:94:76:20:f6:
8a:6c:fc:da:ea:31:2e:d4:94:5f:c3:74:30:36:a2:
98:ec:da:52:a8:a9:5d:fe:8e:ed:4d:69:74:a7:4e:
b4:c1:43:24:b4:fa:f4:d9:8c:88:e8:a3:ea:96:27:
33:28:7e:9c:ca:47:09:96:77:e7:f4:9f:a3:de:f8:
ed:12:05:23:7b:a4:3a:3a:34:8f:1c:00:b4:5d:19:
58:dc:3c:dd:56:a9:e7:c2:ca:40:02:17:89:de:53:
8c:a7:95:e0:5e:ff:4b:1a:f9:5a:22:5a:4f:82:5a:
5d:03:fd:f4:e1:84:46:a2:5c:c5:19:1d:6d:aa:92:
a0:8d:f6:24:23:8c:35:ef:0c:fb:66:1c:09:cd:c7:
b8:ee:fa:3b:99:13:5b:8f:a9:30:8c:ff:12:76:96:
ee:1e:42:c0:20:07:66:4b:10:77:99:10:f6:92:aa:
95:02:74:c7:7a:16:e6:1f:65:27:0c:9a:35:1c:00:
9f:84:28:53:6b:30:95:dd:e4:e0:73:23:70:00:47:
81:7d:ae:85:f1:fe:ea:2f:87:21:bb:59:46:41:d7:
7e:86:cf:f3:3f:8c:44:29:44:53:f2:7c:08:42:62:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:5C:CC:E5:48:76:F9:ED:C7:BB:DD:62:97:B4:1C:E8:D2:A4:F6
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:89:1a:63:d9:4d:68:16:17:ce:72:e0:91:6e:64:38:ba:
a3:eb:77:44:8c:4c:cf:42:10:44:5c:75:41:37:83:e6:32:2c:
ed:f7:0a:41:45:d6:ea:d2:e5:c3:ca:ff:e1:b7:6a:d8:82:5a:
d7:f6:a1:b7:9e:13:06:73:e8:5b:e1:ae:27:0f:40:ae:ae:e3:
4e:5f:23:83:35:ee:a4:8a:dd:d9:7c:41:83:cc:91:c6:94:32:
cb:b4:81:0b:ae:f7:18:41:e3:45:31:40:61:60:f3:20:d5:a8:
79:d2:37:5b:81:24:76:d1:e7:62:cf:07:29:a3:16:83:23:88:
e6:d7:0d:4b:d6:d0:d6:ac:6d:d9:ba:a2:d1:05:d8:8e:65:11:
67:6d:b9:fb:6b:a3:d3:03:32:28:75:e7:be:a2:51:0b:88:ca:
43:41:cc:56:df:81:fb:ce:10:89:43:8e:bc:20:bc:75:a6:06:
b8:e2:a0:db:51:fd:73:7d:5e:93:8b:66:dd:d4:fb:60:57:9a:
bb:f1:ff:07:e0:4c:15:41:10:cf:36:4c:33:eb:f3:27:ee:0c:
36:18:bf:9d:4d:43:65:1b:3c:cb:0a:26:66:f3:2f:35:7f:5b:
f4:d2:a8:e1:e7:5e:f6:5e:e6:c9:52:7e:ff:ac:a3:50:a3:26:
01:94:20:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:48 2025 by rpki-client