Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: huIhSpIHqrVa9ACENkyvrK0tw1Mpw6Dm3kTTpXFEUg0=
Subject key identifier: 51:D9:A4:31:37:C3:27:E5:17:9C:3D:B0:6A:5A:48:BC:54:B8:E8:13
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 0194BC04DE0AE3E804B3C3F638157CB22E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 04A5
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: 2PQPTx8avPCO8pmJaXMeurMlp5OZ7GI/xLHk/b2CTy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:0a:e3:e8:04:b3:c3:f6:38:15:7c:b2:2e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=51d9a43137c327e5179c3db06a5a48bc54b8e813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:d5:02:5b:02:c0:d0:7e:d0:e8:4b:fc:96:
09:59:ab:e7:5c:59:30:c3:0c:b9:2f:0d:92:e4:ef:
1d:11:cd:38:6a:fb:a1:ae:1d:bb:ee:fd:99:d6:c1:
16:35:c0:a8:a4:a6:d1:d6:85:85:65:9e:ef:c3:bf:
c8:f2:b9:c7:34:bf:f4:91:3b:ed:ef:db:71:bd:7d:
7b:ba:c2:87:c2:07:0a:83:2f:f6:9b:6d:ae:4c:42:
02:b2:a8:a6:b3:ec:24:a3:b7:11:bd:8a:d2:71:73:
a5:a9:1c:db:a4:6e:7a:b2:ea:24:85:52:3f:41:07:
3a:df:72:68:00:8e:57:1b:8c:36:64:8a:48:cb:dd:
59:7a:8a:4a:a6:fa:d5:68:55:42:4b:ff:aa:00:df:
58:50:a8:74:16:b6:93:2d:49:c2:bd:ed:08:1b:ac:
ab:65:74:ff:06:83:14:ab:c2:51:4d:e3:a4:0e:6b:
28:4c:f6:92:76:58:27:17:12:f5:6a:54:52:6a:d7:
4e:a6:6e:17:38:df:d7:11:93:99:f0:fe:8a:f6:36:
2d:b1:58:2a:4f:a9:21:33:0b:a6:3d:56:1e:67:9f:
b3:42:20:68:49:80:85:0d:2a:ea:20:28:2d:9a:3a:
23:38:75:02:a3:85:06:77:9d:ef:4a:54:7a:35:50:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:A4:31:37:C3:27:E5:17:9C:3D:B0:6A:5A:48:BC:54:B8:E8:13
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ec:26:d1:01:4c:4a:18:90:aa:48:d5:d9:16:ce:b0:84:0d:
f1:d4:97:23:8c:e8:53:09:9b:32:12:0c:9a:95:ae:3b:a1:5e:
f2:c5:e6:92:e0:06:39:41:4c:2f:29:90:90:8c:9b:27:f2:f3:
f3:cf:06:1c:45:9a:81:21:69:0a:55:1f:6f:de:d3:98:56:cf:
90:c1:d9:34:00:9d:0c:5f:31:38:df:c3:e7:15:f4:6b:d9:ca:
71:4a:58:08:c1:f9:63:56:e7:b2:49:76:64:a9:21:ad:d7:74:
2e:98:f0:47:5e:c8:59:e6:d1:3f:55:58:5b:a1:ad:29:96:9f:
63:63:91:7d:3c:a6:82:72:11:34:c3:5c:9f:61:56:b0:dd:0a:
4c:08:fd:90:81:6c:0e:95:1a:96:ed:76:18:27:1d:1a:d4:51:
1a:e2:a9:b1:83:43:a3:a7:2d:e4:8b:1c:4a:4e:d6:92:2e:c5:
44:db:45:63:2e:c4:e7:54:f9:10:f3:e1:76:c8:ed:4e:2e:f6:
b0:93:81:03:90:f1:ed:84:cd:60:30:d0:69:f8:ee:de:ec:03:
cd:c1:d0:c8:d6:6b:dd:27:e9:b8:cd:19:f8:4b:97:32:af:83:
5f:51:e3:e7:2b:a9:ba:96:4e:05:85:9c:c5:07:6b:c4:f8:aa:
d8:19:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:11 2025 by rpki-client