Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: 7KAhG1BZlEqxrfmgy0/LCH0V4XZPyKKmdETW29reMLc=
Subject key identifier: 47:EA:9E:94:F7:90:B6:3F:DD:9F:D8:0D:98:6D:B7:A2:C2:9B:AC:F5
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0194BC72E9F48124A33BCDD28183D8DCFE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0820
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: REnNHc3EdwxgjNw-VpXGx_g82qg.roa (hash: 124s1GBcl/AFEUck0q3Uo/i9OIRaWtaDN26Tjn+07fQ=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: CqM4udbLprsy3Hq6v5S5zRqwSkJjCcDb/cRIb6FDpkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e9:f4:81:24:a3:3b:cd:d2:81:83:d8:dc:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=47ea9e94f790b63fdd9fd80d986db7a2c29bacf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:50:f2:b9:66:42:eb:8b:2e:87:e6:c8:c3:
63:4c:3f:85:54:15:96:be:c4:fb:cf:32:e1:20:d3:
85:1b:fc:19:0a:67:83:37:1d:96:90:c7:63:68:60:
1a:14:d8:9b:42:18:12:c3:be:02:c5:b2:af:21:73:
94:cb:ae:80:4d:0a:7e:c3:21:10:91:73:ae:8d:fb:
77:73:23:34:a0:b9:f8:aa:64:0b:32:87:41:34:a6:
19:82:92:b4:f0:87:03:6d:18:9a:87:49:42:08:d4:
4a:00:a5:50:19:db:99:9d:fa:06:c1:df:82:e5:d3:
aa:36:aa:0d:c8:c1:03:1a:29:2b:74:63:39:27:92:
13:62:4c:60:26:6d:d5:f9:48:a3:d4:21:a2:74:86:
d8:b5:c7:1b:29:75:fb:83:e0:ad:cb:41:17:72:5e:
b1:2f:ed:7b:d7:41:a2:c8:95:45:6c:2b:df:8e:d8:
74:1c:f5:52:c4:31:4a:62:9e:55:1c:16:aa:11:e7:
97:ef:2d:56:f5:d4:1c:33:e3:b4:17:0c:60:df:ae:
b1:7a:bd:cb:2b:7a:dd:21:34:43:4d:98:13:1c:f9:
68:e2:dd:54:48:21:0b:b6:96:5a:10:87:9b:d8:de:
80:a2:90:b6:97:52:67:2b:f3:01:7a:75:88:7d:f2:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:9E:94:F7:90:B6:3F:DD:9F:D8:0D:98:6D:B7:A2:C2:9B:AC:F5
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:55:d9:c3:e3:df:28:0e:61:39:48:64:6e:7f:7c:7a:40:b7:
ac:13:3a:dd:7e:25:4b:16:5f:10:3f:25:06:2d:ff:ef:32:b3:
66:a7:58:fb:41:2c:7a:44:2e:61:4e:f0:3e:77:9f:48:4b:88:
dd:f7:d9:d5:72:26:c7:34:51:ae:62:21:9e:8a:d9:ca:88:46:
5a:cd:ab:3f:9d:a0:53:3c:b5:8c:11:4e:ad:bb:a8:02:a0:08:
67:20:4a:be:2a:1d:ad:91:a0:ee:df:e7:d8:a1:df:87:f3:f2:
b8:30:04:50:b9:72:7e:c3:00:0b:77:c9:59:ad:7f:6a:9a:e5:
89:d7:ce:85:15:e6:ac:50:ac:86:3e:71:6e:72:b7:36:dc:5d:
e2:19:33:93:6c:a7:4b:69:12:be:db:14:ad:da:54:80:48:af:
8d:ad:a8:52:d7:62:c8:f0:27:97:b4:9d:6f:64:28:a3:6c:e0:
f1:85:80:b6:e8:b8:e8:21:8e:16:c7:13:4a:31:37:d1:a7:b1:
88:dd:08:73:36:ba:4e:7e:c8:a9:50:d0:af:21:ea:6f:90:ac:
cd:06:bf:df:93:ae:4c:c1:2e:67:21:b9:43:2b:b5:8f:a9:db:
5f:0d:e2:1b:08:f8:7f:06:b3:2a:6b:ba:89:1b:88:dd:57:ef:
8a:61:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client