Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: kanMUjd8eZA1h0zzSkQJqPKigCZluprFES+QanUZM5U=
Subject key identifier: 8F:BB:D6:70:87:77:0C:42:85:F4:0D:C0:DE:8C:12:2A:0E:BF:4B:D6
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 0194BCA9CF1AD4282E36A6AA51DF55496F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 13AA
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: og7y5t4DkOpH+Kq15d21dMquZ15k0ytCgTIMYM6d94E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cf:1a:d4:28:2e:36:a6:aa:51:df:55:49:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=8fbbd67087770c4285f40dc0de8c122a0ebf4bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:7a:49:28:86:17:57:c4:81:14:d5:90:0b:
bb:98:b4:7c:69:47:a6:04:5f:86:b5:19:3f:d1:7d:
f0:b7:a8:05:8c:e5:51:94:cb:f3:19:15:e3:3e:fb:
64:80:4b:50:03:57:a9:10:c5:de:2c:a9:e5:11:5d:
93:17:80:a7:8d:ab:e4:32:e8:04:0f:b3:34:fc:e2:
5c:aa:38:57:ea:9c:a5:ec:ea:5b:d6:8c:9d:fe:db:
a5:19:32:17:56:90:5b:f1:f0:20:84:02:fc:c6:35:
7a:17:02:ed:ae:7a:7c:39:e1:25:04:d6:3b:ac:76:
41:5d:81:3a:3b:62:43:19:f4:e6:05:06:7a:fd:53:
19:da:3e:16:f6:65:98:19:37:99:90:20:8b:26:5b:
58:b3:5b:84:e1:9c:40:42:10:6e:75:91:b4:d1:1a:
82:f9:db:e9:59:4d:94:57:11:25:fc:f9:5b:66:e0:
14:5d:97:9c:e7:8e:fb:60:9d:9a:3f:b7:07:ff:8b:
81:c7:98:4a:ff:75:0d:f5:70:55:1a:92:87:32:25:
c4:65:65:b7:b4:e1:5f:46:14:f8:31:df:82:eb:bb:
e4:23:0a:a3:9c:fd:14:90:0c:5e:69:35:8c:6f:e2:
f6:3a:c0:fa:38:f1:33:20:87:bb:76:b1:a9:f7:7e:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:D6:70:87:77:0C:42:85:F4:0D:C0:DE:8C:12:2A:0E:BF:4B:D6
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:f0:c6:9c:42:df:cd:1b:0b:3a:89:77:85:fb:62:df:ff:
e5:ae:f0:cd:15:d0:28:78:b8:8b:e3:d0:ef:47:a6:8a:55:ed:
a6:ea:06:ce:e3:73:15:a2:bb:8b:c2:f4:3d:9f:cf:d6:9f:96:
3b:44:28:5d:af:ae:6a:fa:63:f3:f2:f9:e2:8e:c2:68:92:30:
bc:aa:ca:58:8a:35:31:40:9d:91:19:3c:c0:d8:52:95:80:86:
f7:1a:84:4d:06:75:90:b8:3e:dd:32:c4:0f:4d:ac:c7:d8:64:
6f:5e:00:b7:3d:8c:c3:f5:4d:a2:6b:08:54:b0:45:d0:a9:78:
38:03:f3:e2:f3:24:fd:9c:60:86:9c:6f:91:90:94:fa:dc:4a:
29:a2:83:71:6f:c2:ba:72:9b:dc:44:1a:49:52:86:60:6f:e5:
03:c0:59:78:60:19:31:5c:01:3e:69:94:5d:d2:0f:ce:6b:d9:
65:5e:8e:9c:04:c2:08:78:5d:80:21:d0:4f:b3:35:f7:5f:fe:
90:90:f6:1b:cf:f5:88:20:e6:80:c6:c7:8c:78:ec:65:19:d0:
8e:0e:67:86:fb:c9:fe:91:99:62:bb:04:50:e4:9f:37:e5:5a:
a3:db:a0:eb:d4:29:e7:e1:8f:50:fd:c4:02:c6:3a:34:85:b9:
a5:f8:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:14 2025 by rpki-client