Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: RkqUyedRKMKnXOjTeTOErlWJe5gzbUuFnK/mBdiwbmU=
Subject key identifier: 8D:33:D6:A0:1E:D9:3B:D9:BA:14:A0:D0:AF:3E:F9:60:0D:D4:8F:A7
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0194BCE0B9E15E43D17937152F21E703308B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 08B7
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: FBxb1TMtpI2vGi+YEsEsZMVwT0aiJQcmSvSlmI3q0H0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b9:e1:5e:43:d1:79:37:15:2f:21:e7:03:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=8d33d6a01ed93bd9ba14a0d0af3ef9600dd48fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:83:ea:da:e1:64:84:31:2f:8b:94:c1:47:
9e:4c:7f:ec:ce:70:8e:63:cc:89:27:46:60:41:42:
c6:f3:26:80:ec:f5:5f:2f:86:e0:46:55:c8:a7:53:
74:99:3d:43:36:5d:58:e6:b1:bc:2c:2a:51:3d:06:
7c:df:b7:90:cb:08:80:76:f0:a6:07:fe:e6:59:46:
ed:cb:01:b0:bb:38:f1:1c:88:13:63:81:2e:8a:bd:
f4:34:91:d4:28:cb:ca:69:0c:41:1b:37:fb:f5:9e:
41:66:7f:de:8c:11:45:b1:c6:9d:34:58:c8:62:7f:
4b:89:11:77:66:33:9a:62:1a:00:e2:6d:b2:27:99:
8d:d8:a6:54:77:0f:40:d0:25:69:80:45:0c:8c:48:
13:ec:cf:1f:6f:c4:e9:5e:f5:44:c9:87:3e:4b:a4:
80:f5:1b:4e:cc:8d:c7:b2:31:0d:b2:f1:fe:aa:87:
8d:16:7e:68:70:95:9e:04:16:f1:74:d0:3c:86:5f:
a6:28:31:cc:a7:78:db:11:9f:46:b4:3d:49:b1:bf:
2b:a2:4b:43:ad:57:11:d5:9d:8b:41:d4:d2:8e:2e:
e2:34:07:7d:fd:e4:06:d9:7f:f0:d7:36:34:94:ad:
bc:5b:f0:a5:75:4d:45:0e:8b:47:fd:1f:3a:bb:c6:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:D6:A0:1E:D9:3B:D9:BA:14:A0:D0:AF:3E:F9:60:0D:D4:8F:A7
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:b0:3a:ec:b3:21:4b:d3:93:9a:e6:3a:86:ac:2c:f4:ea:
0a:9c:1e:88:b8:ce:2c:b0:62:ff:50:36:dd:41:80:37:53:b6:
26:82:de:39:5f:ac:a4:fd:f7:c2:1e:f1:9d:97:3e:b2:50:0d:
ef:02:75:3d:81:b1:3b:71:8d:22:f1:9e:7c:2e:9b:ee:59:83:
74:ec:32:ce:a1:03:78:48:f7:53:ea:7d:88:37:33:5f:33:93:
d0:37:10:23:de:3c:e8:d2:07:8e:c4:96:20:25:ca:ae:d4:15:
a6:bd:14:f8:5c:2f:c4:37:9d:5a:4d:e6:51:98:e3:a6:0a:75:
fa:5b:c8:d9:e1:af:9b:f7:e4:d0:cb:0b:4a:b6:1b:1e:b7:64:
b2:10:c8:5b:26:46:6a:c7:ac:55:a3:ed:fc:03:e9:b3:9a:12:
af:5b:9e:d9:d3:aa:64:a0:91:c4:8b:ea:0c:39:d5:97:d5:2d:
0c:ee:9d:7a:77:72:95:e7:2f:61:04:94:d9:18:97:8d:2b:04:
92:eb:71:5f:2f:17:2a:8d:c6:c0:22:76:f3:ad:33:7d:f4:92:
f6:9f:3c:3c:80:ad:ce:b4:0f:04:ce:26:4c:2a:02:d9:78:eb:
26:43:96:bf:3c:13:04:c8:45:9b:8f:64:57:f9:f4:c8:17:4d:
28:8c:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:53 2025 by rpki-client