Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: tsKDYgMMoD0+fYpMH5nbgSBXehMSti8LqY9ZGu6oZAE=
Subject key identifier: CC:16:21:D5:6C:92:F0:1E:EF:CB:01:6A:89:44:51:EB:A6:74:A8:03
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 0194BD4E79129430117F87D4C39F43375F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: vVdotpIFWU+MgHzDRE2Ku3ssL5z5NHl26fkpAEMf2OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:12:94:30:11:7f:87:d4:c3:9f:43:37:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=cc1621d56c92f01eefcb016a894451eba674a803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:78:55:a4:8c:cf:9d:51:3d:84:01:ad:1f:
33:26:a8:86:4d:01:9b:60:c7:59:24:90:13:11:ab:
e8:6a:67:a0:f1:4c:77:86:a0:08:02:9c:4b:a6:34:
d6:8d:40:74:e3:76:37:0c:00:6b:4b:10:fa:5c:5a:
a3:04:2f:c0:a1:24:c9:02:8d:89:37:fc:98:da:d2:
5c:35:fa:aa:8e:8c:05:80:63:32:f5:ca:37:10:56:
e7:2f:6a:84:93:b2:2a:09:ee:ea:33:c0:fb:f1:05:
31:2f:06:33:7f:2e:2d:d5:fd:e4:09:0c:0a:c4:ce:
ac:ef:e1:94:77:01:51:0d:d1:cc:d9:b7:b6:a2:63:
7c:1f:64:56:bb:b1:53:fe:aa:c2:8c:4c:c0:80:73:
9c:40:20:0b:7a:64:a3:4f:07:06:fd:33:68:5f:4a:
85:03:ed:e4:3e:f6:47:77:13:ae:a0:fc:1b:59:f4:
31:ee:e9:57:6b:6e:04:2f:3c:d5:ad:8a:12:9b:ce:
58:a3:03:2f:a1:ad:55:9d:fd:f1:e8:eb:5e:eb:c8:
b3:fd:7c:6a:20:9a:21:67:9a:c2:5f:cd:9b:11:67:
a2:50:ab:30:60:df:08:d2:38:ea:4a:45:8a:c8:f9:
32:9a:56:ab:42:fd:a9:78:fb:5a:39:f6:3e:58:b6:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:21:D5:6C:92:F0:1E:EF:CB:01:6A:89:44:51:EB:A6:74:A8:03
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bf:9f:b8:2c:60:04:55:44:65:66:c0:69:26:8c:9c:7d:d4:
6f:87:92:86:22:71:c5:dc:ae:3a:11:9f:e1:8c:4d:fd:c8:10:
33:c9:a0:a0:85:e9:9c:b5:42:81:61:a7:44:1b:55:b5:6d:30:
47:a6:62:f0:8f:84:06:76:05:a4:f6:fb:d3:1e:19:b6:45:80:
4e:c7:b0:69:24:82:07:bc:ff:e5:24:4f:f0:5a:2c:89:d1:38:
e1:e7:9f:b1:b1:58:bf:0d:c1:fe:ab:a5:ab:f8:00:d7:7f:1f:
58:9b:33:cc:35:6f:b5:f6:db:57:3c:ad:74:bc:82:e3:bc:f7:
a7:23:38:22:5b:8c:69:04:e2:1e:14:13:a6:3d:8e:43:6c:a5:
d7:f4:dc:9b:91:c0:d4:ca:a4:25:da:c7:43:54:97:94:cc:80:
95:12:a5:e7:aa:26:4d:a4:ee:a7:88:ae:a3:aa:22:64:78:de:
85:55:45:cd:18:fd:61:4a:75:71:6f:6d:bf:0f:3f:92:f7:ed:
db:17:f1:fa:d2:3f:0c:46:44:72:c4:c8:09:2c:b1:f2:30:d8:
e4:c9:9e:82:03:36:67:19:82:db:e4:6b:be:82:c0:53:af:be:
41:77:45:e9:0a:62:c2:c3:2a:b7:0c:ba:3e:9e:b0:b5:5f:fb:
92:42:a2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:20 2025 by rpki-client