Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: u7D7EUqmmkqS21ayJnmdikE6I9T/oF2uAXRB8q/9uQ8=
Subject key identifier: 8C:B5:72:11:86:11:49:49:FF:0F:7E:5C:48:86:D8:13:9F:A1:48:37
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 0194BC04D1171743D2CD71B3F81EC1384B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: pd5UqJcXyzdyazbMp8GbR6JJ20wuWLNEfMJMREbEnYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d1:17:17:43:d2:cd:71:b3:f8:1e:c1:38:4b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=8cb5721186114949ff0f7e5c4886d8139fa14837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:f5:fd:56:ab:26:b0:e9:6c:c5:8c:0d:e9:
60:39:e2:49:bd:b5:e2:f9:81:0a:b7:a6:1f:42:1a:
70:3a:f7:f4:d0:66:67:62:91:d1:6d:c0:e9:6b:46:
ae:4d:35:d3:a4:27:7d:9c:f7:3a:39:9a:87:1e:ab:
2e:16:5a:58:b6:74:7a:7c:57:12:ce:18:c3:6f:99:
ef:11:dc:f6:36:6a:58:19:da:03:69:55:0d:e8:ae:
c2:1d:ed:a9:eb:b4:52:1f:48:ce:1a:00:54:cc:67:
a2:c9:2f:d0:7f:e9:32:80:db:a6:71:f5:4a:c9:9c:
4a:49:78:06:0d:b3:51:e9:69:6d:0c:d7:e0:4e:65:
a6:ab:f6:12:b5:02:73:b4:b7:26:2d:a4:fd:43:81:
32:10:be:c6:00:3f:b8:b3:d7:92:6c:5b:a0:41:05:
70:b9:b9:cd:6c:44:dd:a7:b2:70:5f:94:c0:4e:af:
42:44:27:5f:7b:0a:93:17:22:42:63:15:2a:bd:19:
2a:fd:ec:bb:3f:f7:98:0f:2f:e7:cd:f1:b2:c9:5c:
22:a1:00:f7:fa:24:02:a4:19:18:c3:9a:24:85:ce:
15:09:5e:40:63:3b:69:d1:58:ce:43:25:26:5d:ed:
a3:ab:09:d0:ad:b3:ed:78:4b:35:12:dd:fb:d9:29:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:72:11:86:11:49:49:FF:0F:7E:5C:48:86:D8:13:9F:A1:48:37
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:69:bb:bf:41:75:08:82:82:2f:73:ff:7e:fe:c5:fe:a2:
04:29:e9:66:54:33:20:95:2b:5e:c4:7c:0c:09:d2:c9:b8:6e:
b5:16:cf:1c:44:1b:14:30:53:d9:3e:b7:00:09:da:9c:ed:66:
23:b7:be:80:aa:d6:7a:f9:7e:bb:e9:1a:26:72:57:c0:df:2a:
48:a6:48:ad:89:b7:71:10:13:bf:33:27:5a:d1:47:d4:91:4e:
8d:50:24:49:f5:b3:05:0c:f9:7d:2c:d0:03:3a:94:42:5f:c1:
90:e4:0a:b0:74:cb:c3:d2:a6:b2:46:6a:1f:8a:70:9e:7c:59:
eb:42:41:ba:93:c5:fb:2e:7e:c8:c4:4b:bc:5e:13:47:b2:1d:
94:1d:15:dd:f5:8b:86:19:02:1e:b4:9e:2a:13:97:72:7f:e8:
47:49:a2:c1:17:0b:53:a3:87:60:27:4e:89:ea:51:48:6e:3d:
91:c2:f1:b0:c7:22:5c:e9:0a:71:a3:73:48:cf:fd:8e:4f:80:
96:15:e3:5f:c4:4f:07:54:66:3a:93:be:9e:4b:d8:3d:65:05:
fe:3b:5c:40:ae:69:3e:8a:65:5c:bb:70:7d:66:52:10:28:7e:
30:b6:11:72:b5:e9:fd:15:19:08:49:5b:0c:2f:db:57:c2:9e:
d5:88:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:31 2025 by rpki-client