Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: JLtl/lCGQ1TNp0DzQc11iAkqqa3xoi+07xbVvnrmhtg=
Subject key identifier: 4B:50:E3:3E:28:A7:BF:33:08:FE:A9:6B:3C:20:82:F5:76:96:96:D5
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 0195E04674FB021535839963AA1302AFE2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 05:01:08 +0000
Manifest this update: Sat 29 Mar 2025 05:01:08 +0000
Manifest next update: Sun 30 Mar 2025 05:01:08 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: kEsBFnv/sQUy/OzsWYtPNUDGG2vmmrbMpWwvmHdjEIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:74:fb:02:15:35:83:99:63:aa:13:02:af:e2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Mar 29 05:01:08 2025 GMT
Not After : Mar 30 05:01:08 2025 GMT
Subject: CN=4b50e33e28a7bf3308fea96b3c2082f5769696d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:7b:88:e9:28:64:cb:69:82:84:67:ac:df:
29:89:d9:de:93:ee:9b:ba:ad:e8:f3:e4:a4:43:a3:
06:1e:a5:7c:6c:d8:7a:8e:e7:d2:5c:cf:71:a8:18:
87:e5:f1:33:e2:fe:b2:2f:53:e9:ea:9d:01:cf:a6:
b9:a4:d8:e6:e2:37:c3:31:d7:00:4a:39:22:4a:25:
ca:99:56:9d:94:a2:43:f5:cf:1a:b3:1b:10:15:89:
aa:7f:33:fb:7d:03:a7:5b:58:97:25:fe:e4:04:2f:
15:43:a4:2b:ac:31:0a:4c:5d:41:2c:f7:ec:ab:c3:
66:ab:b2:3c:cf:b0:43:b0:50:a3:30:6e:ad:8f:2f:
d5:8f:c7:b9:47:a9:bb:17:de:a6:7b:65:06:80:1d:
3b:c9:df:7f:e5:2d:bd:9b:09:57:b8:51:d1:5a:8a:
d8:2d:cb:20:91:4d:70:97:d4:de:79:f5:7b:ec:b9:
4c:e1:7d:0a:8e:ec:c7:84:f4:a3:e4:c9:a8:40:36:
29:0f:1e:cc:9d:28:a8:76:e0:b7:3f:0f:36:33:f7:
7a:4b:df:2f:51:20:7c:18:69:b4:ed:66:2a:f6:47:
b5:76:8e:32:bf:b9:34:ad:a3:50:5b:84:b6:82:03:
c0:af:31:46:7d:90:2b:1c:65:e2:d2:1b:6f:e1:a4:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:E3:3E:28:A7:BF:33:08:FE:A9:6B:3C:20:82:F5:76:96:96:D5
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f1:7d:59:99:01:da:7d:23:28:3f:7f:a2:e8:39:c1:cf:0b:
66:d6:7a:70:ae:29:23:35:8f:06:1f:32:b0:9c:45:1d:3f:3b:
62:9b:fd:2a:a0:44:1e:7b:86:30:15:7e:b5:fd:75:82:5f:38:
49:51:07:be:87:0f:41:9c:82:33:9a:3a:a5:e8:13:6d:cd:23:
d1:d5:7a:2f:5b:cd:39:0c:3d:53:5e:bf:c2:06:b8:d9:c7:10:
89:ae:34:da:54:74:02:ef:4e:23:d0:37:79:4d:bf:62:61:23:
9b:22:51:33:84:40:92:db:9b:02:00:1c:5b:5f:be:f1:5f:17:
4c:3e:0d:86:c1:9a:71:dc:e7:94:a4:60:9b:66:87:06:c5:c4:
6c:90:dd:b4:83:59:8e:e0:59:25:1c:14:f7:13:11:bc:10:83:
e5:1f:08:87:8a:8b:72:c8:89:62:68:d9:7c:69:f2:58:cb:14:
14:db:ca:d0:f3:a2:44:66:1e:a9:10:06:85:74:e1:fe:03:e2:
0a:89:72:b4:a3:fd:e8:c8:97:8a:bd:ab:4a:78:3d:57:71:a7:
57:8c:20:47:90:dd:78:93:4e:98:0d:f2:dd:97:62:ab:4c:ec:
fc:d8:e5:d0:4d:71:17:d9:ad:be:5e:fc:8a:a4:46:72:13:4d:
39:4b:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:18:09 2025 by rpki-client