Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: OkkLmkklNQJbZc24uOMc12Ox0pIUEQsOb61PB8eNEKg=
Subject key identifier: 25:20:39:06:67:CF:00:66:0B:75:92:53:16:2F:5D:34:46:5C:9E:21
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 0194BC72E8657B585E08977B7DD67388898D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 1482
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: t5Yp-bEvVhd8kagDYHZEMYfnZHQ.roa (hash: T/qafktV9KBjPJSNOInyquhT37yKqAM6MoTNGf3u/X4=)
2: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: obCVDwIBA3EnTtU/FzTrej/WLr/kwClgHYZmgu068T8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e8:65:7b:58:5e:08:97:7b:7d:d6:73:88:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=2520390667cf00660b759253162f5d34465c9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:02:39:12:e7:3e:ff:ac:92:dd:1a:d0:26:
70:6d:ea:71:e5:da:f0:ce:f5:aa:55:d8:c3:3c:a9:
0b:14:6b:e4:55:9f:76:67:46:2a:8c:5b:e4:79:43:
30:76:b1:0d:9f:7c:74:46:8a:3c:e9:e0:8e:4a:d0:
eb:ce:de:75:c0:14:04:ec:af:c5:67:a4:e1:07:58:
3b:25:6b:79:3c:d8:b4:1d:4b:34:0b:54:42:80:16:
89:f5:54:4c:c7:ef:72:0a:96:08:d3:bf:26:b9:c9:
c6:23:c4:1a:91:01:20:51:9b:b6:a3:1c:84:b7:f6:
b2:ad:b2:6c:bd:ec:b9:46:5e:af:33:f6:b5:73:1f:
1c:8b:83:76:70:a2:0c:86:f1:be:30:57:f3:aa:08:
b8:c9:ec:d8:38:9f:d5:e5:b4:29:2b:85:a4:2b:a2:
7b:f4:16:0a:a2:75:ac:64:72:e1:db:14:4d:4a:7f:
22:8a:a7:63:20:71:65:bd:6f:23:31:cb:76:18:38:
48:85:97:81:aa:c5:a4:5f:ae:5e:0f:00:3f:ac:27:
dd:8e:99:53:15:bd:d4:64:e0:df:fc:c9:14:83:9e:
12:c5:e2:99:03:19:81:02:31:96:a5:bd:84:a6:bb:
85:6b:24:56:77:25:84:e3:ca:ac:0a:1c:be:2e:fb:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:20:39:06:67:CF:00:66:0B:75:92:53:16:2F:5D:34:46:5C:9E:21
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:e2:fe:6b:aa:ca:dd:e8:2b:1a:78:57:d4:c0:cf:ec:a3:
13:74:ac:f0:39:87:31:43:82:9e:46:fe:76:c9:c8:02:ba:37:
85:c8:1a:45:bc:d0:bb:cd:d3:38:ae:97:bf:cf:2a:f1:34:a8:
00:5b:95:76:d5:b5:e4:26:3a:b2:fe:a9:71:cd:8a:f3:73:d1:
0d:91:4a:90:8f:e3:f1:26:bc:3a:02:fe:10:49:a3:ba:ca:30:
c3:8f:2d:6d:65:b7:2c:a2:2a:24:b7:74:e8:25:02:4b:9d:24:
df:4b:d4:19:21:3b:e7:46:bc:c4:c9:41:12:c5:b9:ee:f8:d1:
0a:42:c8:79:0a:ea:a7:bf:7c:44:7a:65:ad:a3:6a:0c:34:16:
54:62:80:b8:e3:27:95:df:ee:bd:07:29:0f:4a:8d:28:fb:a1:
e6:05:d2:e9:1a:a4:b4:42:6f:6b:f6:2e:10:02:96:aa:99:5e:
84:17:a8:8b:f3:e7:ef:83:81:df:cd:41:e0:c7:8a:d4:2a:9a:
f4:14:b0:0d:4c:20:57:0c:db:0d:fc:79:30:0a:16:3e:36:d8:
c9:62:2c:40:2d:5f:e7:77:ea:2e:fb:dc:7c:55:c8:6c:46:8d:
29:5a:4b:ce:67:a1:e8:f6:e7:df:6e:e1:c6:ce:8b:79:4a:08:
74:b8:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:23 2025 by rpki-client