Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: czF+R9n65oFuFXP8fcfQfc8KoXXrzYjyiErNFZ3TNEU=
Subject key identifier: 3D:59:75:1C:E8:02:7B:D7:4D:B5:5B:EE:11:C8:2C:80:D5:E5:E9:B9
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 0194BC727A8CE1F05BBF76ACA890E2E45409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: 48X0W84hRzbzikjtu3NRrgiUVes.roa (hash: P9ZEa8jjn4X+qLk45EN8bhgk1iRKqKb3xPDq8e5YB94=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: iWYYLhcoGtJ5AY5FxXDapwGbz5nlwHXVdXUentrpl8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7a:8c:e1:f0:5b:bf:76:ac:a8:90:e2:e4:54:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=3d59751ce8027bd74db55bee11c82c80d5e5e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:9e:a9:52:00:ba:87:43:f4:2b:45:76:2a:
93:ca:31:3f:15:c5:90:5f:8b:b4:dd:3e:f4:fa:ed:
a4:fc:43:a7:27:63:ab:85:ea:6d:77:8c:92:8f:21:
47:e3:80:72:08:98:56:4c:fb:f1:8b:75:99:1b:5f:
ea:30:3d:ed:59:14:03:89:b9:6c:1b:24:1b:16:63:
e8:b3:2c:f1:64:3e:5b:50:45:9e:e1:45:0c:44:64:
c5:a5:ad:c7:dc:4c:e4:18:44:95:47:63:1c:7c:cb:
a2:93:65:07:00:1b:14:b1:c6:a8:98:64:95:6a:bd:
e0:eb:f5:d3:c6:7c:42:73:98:fa:4b:8d:7f:78:e5:
fa:03:cb:0c:a4:d8:1c:09:fa:42:46:08:e4:3e:cf:
91:ab:1b:a0:46:3e:4e:41:0d:84:39:dc:c0:b8:86:
bd:68:ca:3c:56:db:6d:80:6f:3b:3b:ae:b2:04:f4:
34:00:b8:a8:c5:60:73:89:ed:45:07:ef:74:7f:36:
da:93:9f:9d:18:be:8b:2b:96:55:92:d7:e9:a5:56:
04:ad:9a:9c:fa:ce:80:c6:de:e7:87:d3:13:b2:ba:
ba:66:08:de:99:f4:3b:24:ce:7b:b7:f6:10:db:cf:
e4:8a:77:1d:84:f1:ea:ed:88:85:56:d3:fa:41:1f:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:75:1C:E8:02:7B:D7:4D:B5:5B:EE:11:C8:2C:80:D5:E5:E9:B9
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:75:b0:b5:31:1a:e7:32:41:f8:bd:6a:08:b1:86:b1:d6:
0a:61:8c:96:7a:b8:a8:42:7b:83:51:fb:cf:96:41:de:7d:e2:
c4:ae:3a:31:e8:26:c8:66:8f:82:ff:b8:e2:9d:67:c2:3c:96:
76:11:4b:c2:38:28:ef:16:62:25:73:9a:6e:88:5e:d5:f9:a1:
d8:e7:0e:69:46:33:d1:2a:ba:78:c6:24:26:b1:6e:c0:5b:b3:
9c:b4:99:12:1c:51:14:a8:0d:e2:b1:39:fc:18:1c:09:68:94:
e8:46:d5:4f:a1:60:70:47:14:d1:f3:a4:ac:20:b3:b2:96:c5:
32:60:22:5b:f5:05:1e:87:11:e1:52:3f:4a:1d:81:42:9b:7b:
df:ee:f3:0b:bb:be:a9:4c:56:2b:60:e9:2a:a3:83:6a:d3:10:
42:87:98:3b:d2:6c:5e:72:2b:ed:35:16:38:95:d5:d3:b3:2d:
32:0c:c2:a1:c7:e7:72:04:e3:77:45:d8:ea:8f:81:58:68:77:
3b:3b:e4:06:cd:e1:f6:8e:a1:c7:66:79:15:b7:82:e5:a0:57:
81:f8:71:89:73:60:0b:12:07:f9:d4:0e:43:49:2c:c7:b7:26:
7b:b6:3f:5e:2d:6c:3d:2a:0f:fb:27:98:be:fc:6c:1c:42:3e:
1b:2f:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:34 2025 by rpki-client