Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: 8RIx3a8iGKsLf89jwSbI7H8NQsRXuIOi61nASmtm1mM=
Subject key identifier: 27:9F:1B:95:62:AF:2E:30:44:A4:29:82:BD:91:00:32:07:8A:2B:C3
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 0194BCE0C15D2D76AFDD9C1A5C2F33306CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
2: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
3: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: ZP4OfRyUi6pOJn382fyVTi6Yr6FHkiCR6GxXLlyF5CM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c1:5d:2d:76:af:dd:9c:1a:5c:2f:33:30:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=279f1b9562af2e3044a42982bd910032078a2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:b6:38:8d:52:c4:d5:92:0d:f0:83:ed:5d:
e4:8a:b2:61:84:f5:70:21:99:8c:c1:e7:de:2c:82:
59:ea:53:e0:45:68:f0:a0:66:5d:c0:ac:dc:a9:87:
f8:ce:37:b6:1d:17:ad:b5:1a:b8:94:4f:7b:bd:eb:
b2:8c:70:b6:bb:4c:a7:eb:a9:2c:f3:45:d6:33:90:
1e:70:35:08:5f:cf:58:66:b6:97:4f:58:6f:87:2f:
5a:39:33:f3:a2:97:d8:9b:7c:41:0b:15:99:99:10:
bc:cc:70:07:55:51:dc:be:ec:90:15:fd:de:d9:77:
e5:0f:59:f6:20:95:3e:a5:26:cf:8a:1c:d9:68:a7:
f9:37:db:2b:91:64:f6:9c:2d:cd:da:ef:80:c0:02:
fc:1b:29:92:37:09:a1:6b:00:df:e0:ca:de:92:b4:
db:5b:3f:f4:d1:0c:26:7f:ab:95:ce:39:81:c6:3f:
78:4a:1c:5f:2f:d3:24:37:d5:d0:63:34:f3:96:7e:
16:4d:65:ad:a9:15:aa:b6:74:38:ca:be:42:15:31:
90:af:0c:0b:32:4c:97:37:15:6c:00:21:0b:48:90:
f3:66:54:2f:1a:f6:e6:12:c3:34:23:2e:2c:40:62:
51:6f:5d:ba:d1:40:b0:51:fd:70:a3:55:16:5b:d0:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:1B:95:62:AF:2E:30:44:A4:29:82:BD:91:00:32:07:8A:2B:C3
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:00:90:0c:d5:eb:d5:ef:4d:b9:96:3f:34:84:84:c5:3f:
50:e0:fd:c2:5c:92:36:5f:6b:fa:9d:9e:cc:8a:78:8c:59:af:
75:ba:75:74:f9:2a:14:72:53:78:70:db:e3:0a:28:57:c3:08:
05:12:b7:f9:a8:7a:d6:e3:a6:ea:6c:04:44:11:28:cb:12:c8:
38:a2:a1:48:0d:58:ca:5a:1f:cc:1c:a7:5d:d7:f4:9f:c8:55:
7b:0b:df:84:bb:4f:ba:d0:2c:74:e1:7b:69:3f:1a:4c:f5:08:
ff:d8:4e:1f:80:7b:1f:80:ee:b8:73:6f:8c:5e:73:99:bf:9f:
90:81:16:51:19:54:74:b8:3c:67:d0:b3:5e:72:e2:9a:90:85:
90:ec:fa:b4:f7:33:32:ed:24:f0:d7:1c:eb:92:a7:d3:45:42:
31:cf:fb:53:7c:4a:3e:9a:77:4d:e9:ab:28:02:88:cb:d2:9e:
c6:9c:6d:8c:64:57:77:ce:01:85:90:20:b9:68:be:63:fb:fc:
67:01:d5:c2:e3:5a:35:68:81:2c:eb:44:f9:63:06:30:da:22:
cc:de:2d:ca:cb:1b:44:08:f2:86:9c:59:0b:3e:01:97:1f:b7:
8d:2a:72:01:96:17:7a:58:7d:05:03:15:75:73:d0:b7:31:89:
e8:8f:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client