Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: /lyMLOGDWkatfAjWeT1LmM4Z0JSjdMijLC+Pun8NXY4=
Subject key identifier: 0E:4F:FA:AC:21:56:2B:04:59:11:24:28:20:3B:C7:7F:A5:5D:3B:4D
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 0194BD4E385EB51C8305346E17B5BDCAEA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: TqRQRYzcno2eOMHyT3H/y01QIYHaaXdD/BFmWxF83m0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:38:5e:b5:1c:83:05:34:6e:17:b5:bd:ca:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=0e4ffaac21562b0459112428203bc77fa55d3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:0d:e9:d8:66:2b:3e:e6:fa:67:f4:9d:46:
96:1c:c2:f5:05:72:06:d8:c1:af:95:a6:14:63:64:
fb:2b:37:9e:0e:5e:f1:5f:b8:a3:55:be:ce:ed:f4:
2c:08:cf:9d:92:48:74:ec:d7:21:27:30:d6:da:d9:
a3:9f:cb:9c:e6:46:30:44:a5:64:ad:a3:4a:cf:70:
4f:1d:d2:e7:8e:ea:51:2a:fd:96:8a:85:3d:7b:f8:
5c:0d:86:2b:3a:08:59:eb:c5:83:af:fa:49:bc:16:
b8:be:74:77:ce:33:e1:b2:6c:25:94:05:22:fb:37:
0d:02:b2:05:a1:70:48:4b:89:44:2a:53:a1:7f:2f:
38:51:9a:3c:eb:39:a9:15:14:34:f8:03:b6:e6:9e:
77:18:7b:06:2c:57:fa:94:54:82:fa:37:37:34:4b:
33:03:22:4e:fa:ed:0c:f3:67:e3:04:94:26:8f:00:
f1:c2:f8:e0:1e:09:7c:7e:37:93:08:60:55:66:1b:
83:04:4d:e0:66:d2:82:be:e4:d0:b9:d8:0e:83:e4:
23:a2:6f:48:80:e7:b4:5e:a0:11:31:fe:48:02:ec:
3e:cd:4a:ce:22:31:99:ff:1d:8c:54:39:b9:3e:5f:
83:a2:e6:25:6f:12:ed:cd:12:04:23:ed:96:9e:56:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:FA:AC:21:56:2B:04:59:11:24:28:20:3B:C7:7F:A5:5D:3B:4D
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:1b:b7:cb:d0:70:67:ba:d9:19:5b:bf:55:74:d2:fc:8d:
ce:0a:49:37:b9:79:56:3e:62:8d:1f:b5:59:7b:d6:06:bf:66:
3f:d1:05:8c:f8:02:e6:0a:39:1e:46:12:93:4b:f2:4a:ee:b2:
48:77:7f:80:69:80:38:9c:c6:88:50:b4:91:20:21:5c:72:7d:
d1:bb:e4:c7:a5:b4:f7:bf:55:3e:99:5d:e9:d4:7b:49:b0:94:
2e:d3:67:f7:e8:50:6b:1f:bd:87:90:14:70:71:5f:b7:0f:5e:
d6:89:24:e9:b7:f9:16:c4:b1:52:f8:24:04:f2:96:41:9a:55:
8d:b5:a9:de:cc:65:f7:bf:39:19:6a:ea:3f:ff:ea:ec:bd:37:
af:6e:7f:c8:fe:ac:33:dd:59:50:8e:19:c6:6b:06:f5:2c:a0:
41:06:fb:01:54:c6:2c:fe:c8:93:b8:cc:5e:cf:bb:2f:17:e3:
05:04:e1:3c:c3:e1:90:93:0b:a6:b6:3a:04:6a:40:77:eb:b9:
60:81:35:fc:58:06:44:e0:ed:33:97:88:6a:db:a5:7d:0c:18:
73:ca:6a:94:be:5e:93:25:38:18:6c:69:77:2e:32:54:ff:37:
88:fa:4b:60:f5:1e:84:de:da:6e:b6:70:96:5f:ab:31:01:54:
4b:31:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:48 2025 by rpki-client