Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: iSbKquqKGMQXSwDNyFibxjlbZmuQKbPsB68Yh9hnG00=
Subject key identifier: E5:AC:63:FA:1C:9C:FB:45:81:30:6D:DA:39:BA:EA:14:8F:24:B5:73
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 0194BC3C0B66AD339D682B72CE1074E5D8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0653
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: bfulpv4fiTB3xewhzOnldsljpDOnYps6GghrNd7IoIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:66:ad:33:9d:68:2b:72:ce:10:74:e5:d8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=e5ac63fa1c9cfb4581306dda39baea148f24b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:19:f7:85:0c:f7:55:e6:bc:78:f4:22:64:
8b:1e:33:9a:1c:92:41:03:fc:6d:57:fd:72:06:02:
45:00:dd:24:ed:06:7f:e9:78:95:9e:4e:78:f3:c8:
75:65:1d:0a:01:54:5e:81:82:41:b2:41:f8:a6:6f:
c4:e4:5f:89:02:cc:cc:54:c5:55:14:4a:73:7a:bf:
bc:22:74:8a:2d:4d:54:fa:2f:3d:2a:04:e6:ed:2b:
8a:45:76:45:02:f3:70:e5:e0:b8:b7:31:a0:cc:a3:
38:38:22:3a:cf:d7:bc:88:ba:0f:b5:d0:1a:24:e7:
62:05:e4:20:f9:12:1e:8f:3f:56:6c:c8:ad:9a:4f:
0d:7b:ec:c6:94:68:2e:f3:b7:de:08:fa:48:b0:19:
37:be:cd:1e:1f:6f:73:90:a6:f2:d1:24:8e:f3:cc:
99:8d:8a:b9:cf:49:a2:31:6b:c5:34:99:48:e4:50:
5e:75:1f:ee:f8:8c:2e:7b:3d:20:35:40:0b:9e:f9:
5c:fb:bd:b3:1f:70:a4:08:7f:c6:9f:57:38:f4:03:
7d:da:77:a3:fb:58:59:ac:49:32:ec:7d:f2:54:eb:
1e:1c:e3:a0:9c:33:14:16:42:65:25:ff:94:46:0e:
59:76:ce:dc:2d:c5:50:2c:ca:f0:36:c1:9b:03:a1:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AC:63:FA:1C:9C:FB:45:81:30:6D:DA:39:BA:EA:14:8F:24:B5:73
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:63:13:e4:15:75:38:ac:4b:ae:98:bb:d8:ed:59:50:7a:35:
5a:39:99:9b:87:ba:3f:30:14:2d:ae:9f:d5:21:45:81:50:e3:
11:06:94:8c:66:cc:34:4e:30:89:1f:d6:c0:b5:86:9e:62:f2:
4e:ee:49:17:9d:87:e0:8e:d4:cf:af:a1:14:0e:48:c0:ed:b3:
68:54:b8:a4:52:11:a5:a7:5a:3d:a2:ef:36:7e:17:51:e4:45:
83:5a:6a:67:fc:56:36:26:e9:b2:fe:36:b6:3e:82:88:e8:cd:
26:ae:ce:d0:e5:cc:a3:74:ac:25:64:7b:c2:c2:56:e0:75:19:
4a:0c:ab:5c:17:36:e2:fd:e1:a7:86:4c:ae:40:48:14:28:28:
46:6f:13:50:37:46:6a:a3:69:91:ae:10:51:15:70:0b:4b:4a:
b6:57:18:26:bb:fa:17:47:dc:b7:34:d1:85:66:bf:0d:6d:18:
03:28:8f:ab:b0:8b:2d:5a:95:ca:3f:ec:d8:ed:7a:d5:81:19:
bc:24:b4:dd:90:11:d8:46:c5:9a:38:20:b1:63:83:80:8c:e4:
fb:d1:51:54:77:91:a3:a5:04:c3:98:2b:c5:40:16:17:06:b2:
17:f4:8e:78:2e:85:af:2a:42:54:15:f3:f8:51:34:e8:e8:5e:
b5:d0:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:09:20 2025 by rpki-client