Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: YeKYgdQ02XzNArLpQZi30UvLn9jT0FNr+smSAqAR5xg=
Subject key identifier: 7C:0A:DF:6D:51:9F:BB:57:E1:2E:AF:76:7A:A4:81:A7:EA:D4:88:F8
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 0194BD4E9D40E893412C38C082FA45AF7501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: SF8ACVDBSErhAB16L88MptTN5HH7U88+DeydnHVmTmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9d:40:e8:93:41:2c:38:c0:82:fa:45:af:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=7c0adf6d519fbb57e12eaf767aa481a7ead488f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:ac:1a:31:45:0c:70:06:43:25:b4:78:36:
1c:bd:ad:86:d6:44:9f:ab:26:63:04:23:3c:e2:2b:
9b:80:c7:b0:b6:43:e0:ec:d8:97:3d:39:92:69:48:
80:59:96:fd:6f:73:cb:00:b2:15:47:ea:37:6b:7e:
1c:df:0f:17:d4:28:98:00:b9:d4:70:c7:d2:d8:3d:
e4:e0:d4:7a:14:be:db:b5:2f:78:a7:24:24:68:14:
a0:95:a2:6b:6f:3d:d8:e5:e1:19:e9:65:ec:6d:7d:
c9:0a:e2:ec:62:5a:0f:7e:a2:7d:af:b6:c8:ab:fa:
2e:d2:e9:27:b9:c3:4d:6f:8c:83:e9:d8:4b:94:fd:
65:ab:18:04:86:da:6d:be:85:07:ae:5c:d7:72:41:
89:cf:28:dd:37:1d:6e:f5:33:85:bc:49:ff:ad:e9:
a1:e6:2e:65:f2:de:fa:43:2f:f3:0f:97:20:a4:6d:
91:8b:34:39:0e:e1:ed:be:16:d0:1f:61:b3:4b:14:
04:12:ec:62:3a:f7:76:8d:d5:80:a9:22:d3:ed:c9:
0a:db:de:2b:b3:02:92:83:57:ea:c1:fc:00:bb:20:
cf:fb:13:fe:e8:b5:14:40:07:02:d5:5a:fb:bb:32:
1d:60:e7:db:48:16:e6:d0:fd:b4:bd:d4:4c:5b:e7:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:DF:6D:51:9F:BB:57:E1:2E:AF:76:7A:A4:81:A7:EA:D4:88:F8
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2e:b0:2b:b8:c7:04:a5:e4:c2:ab:d6:3b:a9:79:b0:f8:b2:
35:76:f7:8a:f0:23:11:75:20:63:ae:f6:72:83:d5:3d:96:b6:
45:48:35:64:b5:c4:da:9a:76:e2:64:84:e7:0d:25:b4:d6:3a:
3e:fc:28:90:04:4d:51:87:87:df:79:1e:ad:20:6c:b7:ee:54:
05:04:8a:76:11:13:7f:8c:fa:3b:f0:5e:4e:a4:df:79:ff:fd:
ae:bd:47:73:d3:7b:9b:f6:2f:4a:e0:73:50:54:04:b5:bc:15:
5c:d1:98:17:aa:fa:2e:23:45:f5:4e:df:29:8b:3c:81:a0:69:
21:a7:46:33:85:73:b8:2b:8d:6a:98:6b:b5:77:63:3d:77:98:
06:a2:78:af:79:ae:02:8f:d4:07:de:9d:a7:1d:3e:9f:1b:1d:
53:66:53:1c:cb:aa:9d:4b:2c:4a:2c:ff:fb:17:44:54:d4:16:
59:8d:22:94:ab:3a:b5:13:a1:59:17:24:54:9f:39:d5:4b:62:
6f:69:99:2a:8e:be:f9:40:63:92:1a:06:fb:9b:95:33:e7:bc:
01:c3:22:05:6c:1b:e0:20:f6:80:da:50:db:24:08:17:33:33:
06:74:09:ff:ae:7e:e9:1e:0f:f4:bc:67:83:03:d7:97:20:0f:
40:75:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:49 2025 by rpki-client