Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: osNoZ7jWlEPb0RMStuy528NxB7FyLRCgaMvSEr2EjNE=
Subject key identifier: 68:95:77:8E:16:20:01:71:18:07:92:5A:04:78:6E:B6:09:BA:16:1D
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 0194BC051CD687B7746E1014926AC295B49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 0F87
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: nRe8ssQeaEr3YfStNnXYdZ1KFY0oqtzK3d22/nAMD+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:d6:87:b7:74:6e:10:14:92:6a:c2:95:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=6895778e162001711807925a04786eb609ba161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:fe:23:0b:cb:37:d0:66:14:0f:cc:cf:02:
d7:86:0f:bc:7c:5d:f5:34:ea:38:ae:de:65:2d:8d:
c2:28:af:80:90:ba:e5:e4:d6:e7:d3:f9:11:a6:d2:
cc:4f:28:7b:6d:2f:95:00:f2:68:7c:49:61:f7:16:
e2:f7:dc:51:b5:fd:1e:64:61:35:9c:62:94:d4:5c:
f0:36:51:17:54:31:8b:db:99:13:6c:30:16:8a:18:
9e:38:2b:97:ea:5d:45:db:99:83:0f:f3:5f:94:d7:
b1:53:00:a5:4e:83:21:87:58:38:e4:58:8d:9e:3a:
ab:09:d2:52:d9:07:7b:fb:df:94:c5:f2:96:58:81:
b6:8c:85:02:07:80:de:f4:aa:4c:50:bb:0e:a4:a8:
d2:a9:35:2b:1b:eb:a1:3f:79:ed:ef:4b:13:ac:59:
f3:97:80:7c:54:be:f6:8d:36:04:47:fb:2d:ca:33:
fd:b3:9a:0e:79:26:5e:3b:82:24:03:76:11:d8:4a:
3c:22:9a:c6:bf:5e:15:33:ae:41:34:58:77:3f:b6:
e9:33:44:ed:dd:ee:ee:09:71:f8:59:05:dc:76:09:
3b:2c:aa:eb:ed:e6:0d:39:76:fd:fc:ef:2e:61:a7:
66:e1:aa:77:e7:58:5c:ed:18:e5:db:c1:23:d8:54:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:77:8E:16:20:01:71:18:07:92:5A:04:78:6E:B6:09:BA:16:1D
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cd:74:eb:98:fa:06:0d:5a:28:a8:90:6b:16:2c:32:c7:ac:
35:0c:f6:c3:51:22:de:c0:5a:3d:f4:bf:a6:74:e1:6a:dd:ef:
63:b1:7a:0f:76:ce:97:67:29:5c:06:9b:88:70:b1:f1:7b:17:
53:a7:4a:c5:70:4c:e6:06:20:6f:b2:72:c5:60:73:d1:78:4d:
09:9c:75:d2:10:00:2c:60:4f:04:ff:a0:7b:c4:ec:b4:d9:3d:
71:8f:3e:61:e7:91:61:88:23:ba:b5:37:90:eb:58:81:c3:59:
d7:d7:e7:41:72:87:f5:be:37:72:aa:76:e5:6a:68:02:c3:43:
27:95:00:00:a9:54:0a:63:9a:ee:4b:c0:85:c5:7c:e6:f9:b3:
33:35:6b:5c:7b:16:2f:24:aa:32:0d:71:c1:51:7e:5a:a2:d3:
0e:58:9e:2e:00:89:4c:5e:a7:7c:33:10:45:d0:ee:f0:89:01:
5b:76:c2:00:92:d0:3f:50:8d:d0:20:44:d3:e0:7c:82:fe:53:
9b:d5:0b:03:71:a4:f7:9e:67:c2:91:1a:d9:01:fe:cc:99:c2:
00:be:3d:fb:2d:49:18:35:0c:7f:32:f1:64:ab:84:0c:e8:e3:
73:f0:93:08:46:1e:dc:03:8c:bc:50:45:76:09:52:11:f4:fb:
b8:c8:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:26 2025 by rpki-client