Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File: vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier: SOqa0dYzqgQyfgoTRRNM/lbnoG/kGinlBDVYVS0Av2Y=
Subject key identifier: 3B:C6:E0:F8:DA:02:39:20:EB:41:E7:DD:2B:6A:28:91:15:14:41:CE
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer: /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial: 0194BD85A4E955F4AFCEF6F4543931AEEEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number: 08E5
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: bW-fv4_NbG1PNojUcPp0YRQIoB0.roa (hash: 7Z5rf32BgI6fjeUEiIFvBelYmcDYWIutC0cfXs7YxV4=)
2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: e2mT/4uBq6GMTxsIq4uUfuSYk+9TRmFtYyH/A8oEgkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:e9:55:f4:af:ce:f6:f4:54:39:31:ae:ee:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=3bc6e0f8da023920eb41e7dd2b6a2891151441ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:79:c6:c4:3d:ee:b1:0e:6c:81:a9:3c:18:
be:98:c1:76:54:bd:87:77:94:22:32:fa:53:f5:90:
14:46:62:a7:cd:b1:98:09:57:d5:1d:c5:9a:6c:3f:
b2:86:ca:08:64:ee:10:00:01:56:bf:bd:a6:b2:09:
8d:7f:ea:6c:1d:79:6e:23:1d:10:57:c5:4c:fa:92:
5a:eb:b0:5d:d8:bf:59:b2:20:9a:53:d5:b9:b4:48:
fb:9c:86:c6:9a:6e:32:27:56:03:57:74:73:53:68:
6f:b3:ac:67:51:38:49:8f:5b:21:b3:0a:e9:55:9e:
3e:10:a5:81:4c:61:ed:06:1e:0d:55:1b:81:77:dd:
bf:06:76:d3:af:9e:89:66:fe:ab:83:26:c6:57:02:
9a:53:ad:3f:ab:7a:c6:6b:18:34:4e:79:56:9e:88:
4e:8e:1e:78:a6:4c:c2:b9:cb:b2:b3:99:0a:5c:7d:
00:08:c8:95:b1:10:55:fa:a0:93:53:86:a5:03:12:
60:6b:be:85:7c:ce:67:33:e8:e4:36:1b:6a:ed:55:
62:f9:36:05:74:7b:66:f1:ed:da:7b:ec:69:53:1e:
c2:e6:fa:a2:e1:60:a8:b4:dd:70:a8:2e:7b:41:cb:
00:0f:3a:44:08:9d:5e:0b:13:2c:ab:e5:be:79:be:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C6:E0:F8:DA:02:39:20:EB:41:E7:DD:2B:6A:28:91:15:14:41:CE
X509v3 Authority Key Identifier:
keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:df:81:ac:a6:89:ef:b6:d3:19:02:d6:aa:a8:28:83:f3:
c7:d9:b5:d2:c7:fb:39:d8:ea:6e:ec:9f:7d:5a:35:1a:be:e8:
44:a4:5f:4f:d9:73:8f:c8:8d:a8:82:e9:bc:04:b2:cd:7b:5c:
8a:cd:b5:35:b0:fe:c2:2c:72:44:dc:69:e4:a5:cc:f7:8d:2e:
d8:cf:e4:79:96:85:06:97:74:ca:c5:67:b0:61:fd:1c:11:d5:
35:e8:8d:13:c9:09:cb:d2:58:13:22:f3:bc:80:7b:53:6f:9c:
07:5e:38:84:1e:f5:df:99:12:1a:bc:a9:27:17:9a:f3:06:00:
f7:db:df:7a:d8:50:f1:0b:24:ef:99:e3:fd:ae:2d:ac:44:24:
b1:04:02:19:6b:86:c2:27:56:db:0f:fa:67:1d:d0:35:62:b9:
29:75:c7:3a:b9:c2:8e:62:74:e8:ae:b5:d3:bf:a3:6b:73:cf:
b9:1d:96:a3:e8:d5:a5:77:74:2c:fd:f7:0e:58:a6:17:66:5f:
34:e7:10:21:9f:f1:1b:4a:de:37:81:af:22:ea:7b:27:a8:70:
ae:03:13:ed:11:fb:da:23:bf:47:8c:95:42:c8:c7:01:87:f4:
a0:9c:24:df:ed:7e:6f:d3:8f:ac:ff:e8:49:69:3e:c4:06:b7:
b9:03:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:45 2025 by rpki-client