Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: j5HA5DaDBquJaK7nQlCWXcf5o4cTCqTUTqsTiVNbBCA=
Subject key identifier: 9D:A2:AD:17:89:BF:DD:CD:47:41:0E:E7:77:4B:EC:9A:47:28:C3:82
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 0194BCAA435A1AD6CCBFE084CD8A6EF16EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 45
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: pdwJbLY3UDXtL7Wpg4Xu+LKJr5QiU6Vj6WGCS3rF29E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:43:5a:1a:d6:cc:bf:e0:84:cd:8a:6e:f1:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=9da2ad1789bfddcd47410ee7774bec9a4728c382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:f3:2b:33:a9:75:8c:52:ba:19:61:40:b3:
dd:7f:33:b0:f8:9c:20:ee:65:68:3e:53:47:33:b0:
8f:b0:db:66:8f:18:9f:81:07:0a:56:5c:dd:ec:25:
b0:a7:31:39:92:74:af:8d:c9:30:dd:b2:76:9a:73:
4d:82:89:1f:83:6b:75:5b:94:14:53:0c:d9:ea:f1:
8a:6c:ac:58:d5:57:20:d5:b1:af:d0:36:9b:64:f5:
2c:3c:4d:ab:a2:de:80:8e:11:a1:33:47:fb:de:d8:
11:7e:42:43:20:e1:33:d2:46:57:de:13:e1:de:e7:
5b:62:a0:20:60:c5:0f:d4:22:e0:41:46:1d:7d:e1:
c2:90:80:d8:0c:40:3a:43:d0:65:f2:d7:8d:3b:c5:
b4:0d:1e:39:fe:8f:a7:df:fd:86:94:57:7d:a6:8d:
82:47:2a:a8:14:88:3f:56:54:b0:15:6e:42:cc:e8:
03:c8:17:66:39:d4:67:f9:35:33:a2:83:43:f1:5d:
3d:15:45:11:9f:30:cb:f8:af:bb:d3:ad:86:21:48:
c2:54:ec:0e:e4:a5:93:38:f4:58:61:2b:9c:3f:81:
af:0a:86:46:a9:49:57:0c:a7:21:6d:c9:98:37:2e:
fa:17:13:23:30:48:61:5a:5b:38:8a:e8:26:6f:22:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:AD:17:89:BF:DD:CD:47:41:0E:E7:77:4B:EC:9A:47:28:C3:82
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b4:73:ab:c5:c3:e9:e4:07:50:ff:a8:be:af:55:35:06:eb:
3b:08:f0:9f:bc:c2:5a:68:1e:f5:25:e5:f0:a3:d8:be:14:22:
52:44:49:3f:48:dd:14:b4:13:f4:85:14:f9:e8:4d:0f:57:b3:
fe:a4:d3:e0:d9:e7:fd:bb:ad:c4:cc:ca:8f:39:2b:96:83:92:
79:f3:31:16:82:d9:a7:40:8f:2e:ea:c2:2d:45:d1:a2:62:64:
49:4a:57:c5:27:9a:71:c8:7f:bb:45:57:ce:a9:f5:d0:87:88:
f1:c9:1b:64:9a:a6:23:13:b2:bb:31:bd:86:d8:b1:91:53:3e:
ee:63:ac:31:3c:ea:b6:2f:15:f9:88:e5:4a:2d:c7:17:e2:a1:
36:9b:d5:ff:23:be:d9:03:29:1f:4d:90:dc:5f:37:be:1e:c9:
eb:67:8c:ea:ca:97:ae:dd:13:44:5f:e7:ed:92:c7:e7:c4:a0:
8b:cb:bc:66:84:36:f0:5e:d8:43:ed:ad:de:7d:46:93:d3:0b:
89:02:0f:02:20:8e:37:fd:36:e6:72:98:af:0e:29:13:08:21:
0a:9a:0c:0e:ab:10:a7:80:77:94:29:5e:a3:24:d2:39:b2:35:
9d:b3:d1:9b:51:28:db:a1:f0:ad:70:51:b8:24:3e:ec:c6:12:
55:a4:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:07 2025 by rpki-client