Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: yVukGtSrfahZdbiape0f2azmD7OQCIuD7Wdnuccc4oQ=
Subject key identifier: 8E:B9:F1:B8:CE:06:80:DE:3E:00:90:C6:9F:AC:43:DE:5E:58:19:37
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 0194BC3C061D67C69495CB68BA1CE3AB4727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: pQ1sItWanbTE0UaLO9t4+7sG95W3fB3etBHUAYyitqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:1d:67:c6:94:95:cb:68:ba:1c:e3:ab:47:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=8eb9f1b8ce0680de3e0090c69fac43de5e581937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:a1:d5:7f:04:7d:5f:36:49:bd:6a:c2:a1:
58:f4:fa:63:fa:06:58:23:a0:6d:f7:ba:8d:4b:2c:
96:d8:93:a8:12:31:b4:3f:e8:7c:ff:c6:21:79:ca:
08:c6:e9:60:b6:96:9a:36:3d:91:20:ac:46:d4:f5:
9e:6e:50:8a:73:d5:93:2b:c1:aa:a5:21:e5:20:de:
9d:a2:44:ff:a9:61:39:f2:44:cf:18:5f:7b:ce:fc:
30:af:1b:7c:23:50:14:e6:98:9b:ec:f3:8a:9b:6f:
32:ef:e2:02:97:a1:eb:00:d6:83:12:1f:b2:77:1b:
93:b2:c9:09:dc:60:90:13:65:91:f7:3a:43:fe:fc:
63:68:4c:70:d6:82:1f:ed:5e:ba:42:b2:d0:2a:76:
fe:81:e2:a1:49:ca:34:85:8c:3b:a9:15:01:31:0f:
c6:fe:91:47:d5:6c:d3:e6:2c:1b:73:af:d5:3b:d9:
9c:30:35:ee:4a:e4:ec:94:27:10:78:80:a1:27:8d:
fe:d9:6f:2f:9b:62:36:11:72:8e:69:6a:08:c3:61:
e3:52:f7:4a:be:1e:01:2b:72:ae:2c:21:74:bc:fd:
dd:90:f8:a6:31:ed:9c:44:64:20:b0:b2:1a:c0:3d:
86:c9:0c:f2:92:14:d4:24:f5:12:40:c4:75:fb:26:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:F1:B8:CE:06:80:DE:3E:00:90:C6:9F:AC:43:DE:5E:58:19:37
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:21:1c:ed:4a:0f:ad:3d:f4:f2:13:1f:d4:72:f4:ca:af:
fb:df:b1:2d:62:6d:3f:dc:6e:29:17:b5:02:61:d2:ac:51:47:
e9:47:1c:e1:6c:62:d4:09:cc:e9:f8:f2:a8:ad:32:33:b1:79:
67:0b:53:16:ec:16:9d:73:65:53:7a:24:a0:48:52:a1:77:d5:
6b:f9:fb:9e:e4:62:de:13:30:5b:75:df:56:9e:43:d5:0a:91:
6a:1a:55:c8:b0:31:39:23:4c:7f:71:4c:26:d7:7e:13:28:7f:
bb:28:81:33:d3:0a:f1:a5:94:f4:60:15:c6:bf:ff:a4:93:be:
34:8c:c1:a9:b0:a8:88:19:8f:e6:24:6e:9b:fa:fd:6a:fc:f8:
9b:5c:fd:15:e1:cd:5e:62:64:52:b6:fc:10:04:83:40:f6:81:
ce:59:cc:40:df:c1:07:35:13:01:18:bf:c3:ce:e2:e2:cc:bd:
27:d1:62:a9:ab:1d:aa:3d:f3:a5:72:ae:1e:fa:11:ba:04:87:
ea:29:cf:9f:7d:d4:50:26:e8:c4:2c:76:e5:d3:50:37:82:7c:
d7:94:36:17:88:eb:80:e5:11:d5:12:77:02:3e:69:f9:37:de:
3c:91:1d:60:54:40:0a:7e:98:be:95:e1:31:18:3b:23:16:1b:
11:05:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:57 2025 by rpki-client