Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: 8g3gGufkcwj7AbdBJfurUv8lcGGSxQsfNXnxnkvhJGI=
Subject key identifier: 32:53:A4:07:52:14:9D:EE:3B:FD:30:86:1E:6E:C7:8F:42:D3:12:34
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 0194BC72A8AD2D21B9B3F158923BAC17EED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: aWASlGHqIYhWkxk9HdwcJ381qAeBF/upm2M4sKYUCqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:ad:2d:21:b9:b3:f1:58:92:3b:ac:17:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=3253a40752149dee3bfd30861e6ec78f42d31234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:23:75:bb:d6:3a:2a:4b:56:2a:90:ba:07:81:
97:d9:68:ed:16:86:67:32:2c:dd:83:76:0a:f2:33:
f1:8a:64:11:6b:ae:18:c1:35:96:ba:8a:c6:95:ff:
7b:77:60:18:75:31:fd:08:57:12:6c:59:0e:87:a3:
93:7b:5d:ad:62:5e:a4:3a:5b:12:9d:7f:e1:cf:5d:
79:f5:c0:46:d4:aa:3d:49:86:24:e2:e2:ec:79:f7:
69:f0:6e:c4:45:e6:89:12:47:b7:4d:4a:87:d3:c8:
c2:a0:8b:6d:53:86:f7:b3:e5:35:53:b4:73:a2:0e:
34:7b:9d:83:88:2a:e5:5b:16:d6:61:09:ad:fe:5e:
7d:03:20:f6:b3:ea:cf:a8:1c:11:3a:b6:d4:a0:b0:
27:13:81:80:56:d0:97:76:7a:6c:6e:7b:d7:26:3f:
f7:30:d7:d3:10:33:6d:48:ea:10:f6:0b:ef:61:c7:
8a:ed:8c:cb:0f:01:92:7f:05:95:40:9f:d7:af:db:
90:f1:3b:8e:b7:65:18:d1:e0:8c:ed:6f:cb:31:bb:
27:e1:59:b3:d5:cf:47:e1:e4:3c:56:4b:0a:08:12:
70:0c:fe:22:4b:96:99:f6:f9:d2:d4:06:c2:50:21:
cf:7a:bd:57:de:b4:13:b6:41:ce:ca:39:f6:ba:06:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:A4:07:52:14:9D:EE:3B:FD:30:86:1E:6E:C7:8F:42:D3:12:34
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:d6:33:99:14:d9:e5:32:9c:2e:30:e7:9d:a2:dd:38:77:
85:cc:4c:7b:d0:15:3d:ee:6c:7f:3c:8e:dc:43:ef:c9:5d:67:
69:d5:e4:41:73:d4:d3:1c:dc:00:69:60:11:3f:af:09:5e:60:
f2:50:eb:78:b4:6d:9a:22:10:ac:2d:fe:bc:c6:53:b8:2a:4d:
50:97:49:b9:19:df:87:f3:33:14:3f:7b:50:a7:38:f1:dc:ac:
9f:8a:5a:70:ca:01:65:a6:49:d7:f6:53:91:2f:f2:ca:00:f1:
ad:51:2f:b5:9e:85:54:d1:37:bf:2e:c2:58:4a:49:27:2f:c2:
22:96:9f:5f:97:70:1d:ed:09:8f:bf:1d:af:5a:3d:54:53:51:
a6:51:c2:11:d7:07:aa:27:73:42:b3:08:b7:7d:bc:40:19:65:
63:eb:56:f2:5c:d3:c4:7c:00:bf:3b:a0:93:4c:e4:31:74:56:
b9:22:9e:07:5a:45:a9:97:9c:bf:65:3c:af:c1:0c:0e:9c:90:
ae:a1:ef:19:6a:3c:9d:39:c1:fd:ba:a3:db:a4:e9:b1:c4:72:
5d:5c:58:10:51:4d:12:62:92:29:30:8e:17:68:a5:b9:19:e9:
6c:55:79:9f:b8:5e:38:1f:31:59:47:e3:16:08:d4:73:82:19:
c5:d6:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:40 2025 by rpki-client