Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: mACY2cuH9urf32DAxPi1hcCJZ4gb75186bcl9tvDpp4=
Subject key identifier: 66:AE:E7:C9:1D:02:E9:7E:74:A7:D3:76:9E:D6:0A:C9:65:5C:A7:B5
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0194BCAA2176F81AC3E112697996BD010F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 02F7
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: h0xVbUPXvtLL1prPFXKcjrHDovTy/JvVPGinJGoHP+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:76:f8:1a:c3:e1:12:69:79:96:bd:01:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=66aee7c91d02e97e74a7d3769ed60ac9655ca7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:43:d8:93:60:46:54:05:ec:86:11:5f:bd:
6d:50:99:92:c6:68:64:8a:77:46:29:9f:83:be:7d:
c2:cb:17:de:0c:e4:23:4e:6c:32:fa:a2:a9:db:b1:
83:32:cc:fd:04:2c:b9:57:fd:e3:21:fd:81:fc:ec:
2e:6d:20:7d:7f:45:5c:e4:38:55:81:af:e1:93:9a:
27:c2:e8:ed:31:e6:01:46:f4:88:b4:96:31:d0:5e:
cc:59:f6:ea:b6:a6:4d:07:9b:28:e7:1b:f6:7f:7f:
1d:1f:2a:1b:1b:e9:00:b8:8c:99:dd:d4:8f:91:ed:
bf:bf:fc:e3:48:e5:9a:77:9f:48:04:d4:df:dc:01:
15:d6:6d:95:7b:11:49:36:b6:f5:ac:bb:4d:2b:7a:
9b:14:3c:07:c6:dd:b7:a7:9e:be:f8:f7:aa:f1:9f:
a6:c4:59:3c:e4:ca:ff:c1:a4:6a:78:e4:00:72:a4:
f7:32:d6:e0:fe:3f:c7:48:9a:5e:55:a6:0f:be:e4:
ff:b9:6a:44:e3:4c:5c:bf:7c:e1:f2:7e:f4:2c:58:
e5:67:ab:c0:dc:c8:6e:98:02:6c:c5:b9:1c:07:19:
b3:c4:3a:5b:1a:f8:9e:96:c7:78:5b:c0:b4:11:ee:
6d:9b:51:16:1f:64:10:15:98:6b:fd:d2:06:92:11:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:E7:C9:1D:02:E9:7E:74:A7:D3:76:9E:D6:0A:C9:65:5C:A7:B5
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ad:c4:ad:ea:18:46:b1:40:54:88:24:e0:3e:a8:81:3d:73:
a5:7c:e5:77:09:02:15:6e:82:83:2c:ca:d3:70:92:db:a8:54:
0a:b2:8a:f6:36:7d:2c:fe:5a:50:87:9f:62:02:7a:c5:c3:ac:
32:d9:db:b2:35:f8:40:3c:40:fa:77:e5:d7:88:a1:0c:bb:98:
39:1c:a0:15:55:b9:99:4e:4b:f2:3b:71:2f:58:54:d9:db:98:
87:84:e8:e1:0a:6e:c3:a2:c5:eb:29:32:74:68:a2:f5:08:55:
d2:31:d9:79:03:12:cb:f4:6b:68:3b:87:f9:c4:cf:18:83:5d:
80:08:cf:f1:8b:73:3a:3b:ea:6b:23:09:2f:ba:a1:a7:77:d1:
99:be:e0:c5:8c:5e:1f:59:0b:f5:f0:c7:0e:32:63:e5:2f:cf:
45:fc:55:0e:78:0b:cf:80:de:4a:3a:8c:86:99:3a:18:0d:05:
f1:b8:51:10:f8:a7:4e:18:3a:36:6a:7e:9f:02:45:b9:71:52:
85:5f:fd:f9:50:d5:03:cb:94:ae:83:ba:e8:5b:a7:38:33:9c:
8f:99:f7:36:da:a5:c4:ca:46:3c:89:1c:37:aa:a4:44:38:11:
e5:e3:92:03:02:73:0b:c5:18:f3:be:d7:c5:5c:2e:71:3f:6a:
f4:79:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client