Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier: 3dnpFFZoDH69nmAc8PnLqdUsAP8Kra1wHT4RcnYPSQc=
Subject key identifier: DD:22:30:11:0E:86:A0:97:B2:5B:AA:7B:3F:CA:DB:AD:1B:CE:9D:41
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial: 0194BD4E5BDD620FF58526081514E6933569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number: 03CE
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=)
2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: Yyyh07AIB8Y9AWxWjXr5osllFDTVAC6cHaDhwqAiOhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:dd:62:0f:f5:85:26:08:15:14:e6:93:35:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=dd2230110e86a097b25baa7b3fcadbad1bce9d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:94:bc:1d:23:84:94:52:2f:6b:3a:56:89:
9f:78:c9:37:42:0a:ea:33:c9:5b:7c:c8:73:d4:39:
1a:a2:16:5f:7c:8f:2a:4c:5a:1b:d1:62:9d:7a:f2:
4e:3c:4d:43:4f:23:4a:8b:ef:cf:50:35:c1:b1:bc:
c5:58:8a:75:90:4c:f3:d7:11:ad:ee:71:85:b6:1c:
ff:50:49:6c:69:40:c8:95:cf:ed:6d:b4:18:db:6d:
b6:b8:22:5d:2e:a2:fe:fe:ca:4c:f0:ba:d2:a1:57:
21:81:02:4b:a3:7c:6a:f7:85:87:5a:65:b9:5e:4f:
e7:b8:45:b4:10:ec:36:8e:24:f0:40:0c:d2:59:69:
cc:43:4e:05:ba:88:cf:c5:d3:a4:05:50:9a:85:7a:
b8:46:05:3b:0e:79:53:bd:84:5e:f7:89:21:e1:31:
4d:22:76:e0:99:af:af:5c:c1:44:9d:cb:bd:c9:2f:
34:70:dc:7c:0d:b9:a0:a2:cc:ca:b2:cc:fd:75:45:
84:e2:1c:40:c1:fc:1e:89:58:7a:2c:d0:e5:84:63:
18:3b:3a:d3:1a:d7:1c:a5:8f:b0:ea:77:4f:48:e4:
31:c0:e2:80:c8:4a:7c:5d:0f:7d:ab:2e:f2:ec:7a:
f6:aa:9b:e1:9c:a2:ce:65:11:bc:7e:d4:fa:f9:72:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:30:11:0E:86:A0:97:B2:5B:AA:7B:3F:CA:DB:AD:1B:CE:9D:41
X509v3 Authority Key Identifier:
keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:12:d6:58:50:84:36:63:bd:44:62:ba:7c:50:cb:34:a7:
b4:b7:54:d7:9e:c7:16:5f:4e:76:d1:5d:c2:de:af:e0:d5:8b:
55:b0:ce:09:8e:8b:f8:7a:3a:3e:24:b9:10:d8:bd:40:3a:4b:
ec:4a:0e:67:aa:9f:4a:12:35:87:b8:fb:26:52:45:15:f2:a8:
bf:b8:23:2d:3b:53:64:eb:18:49:48:1b:4e:c0:07:77:3f:30:
35:d7:2d:50:36:31:76:d3:ed:75:7e:45:0e:6f:7f:08:3d:76:
4d:77:71:f1:fe:ca:59:72:1d:b7:fb:7c:c1:13:73:2a:2a:1d:
bd:1e:86:47:1e:80:08:45:a5:c6:1b:95:7e:af:88:e2:f1:82:
82:2b:5e:5a:d7:3e:85:0a:4d:c1:64:e8:c5:a6:d8:e6:bd:d4:
83:19:df:ad:97:f1:33:05:fa:b9:08:50:cc:e2:14:bb:d3:97:
b9:66:c0:86:c8:ce:85:7e:8c:a6:e2:74:05:bc:e6:e9:1b:29:
7c:6e:cf:b5:03:37:c8:7e:53:69:df:c3:27:e2:87:78:99:62:
4d:2f:2d:88:0b:ad:e6:41:06:4b:bb:13:a0:73:7f:1e:b7:c4:
5d:da:46:53:90:54:5c:8d:5a:ce:46:03:ff:14:3c:bf:76:3f:
8b:1f:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:15 2025 by rpki-client