Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
File: vfG2nIL3gagXzhAhFxeM23-yY68.mft (raw, json)
Hash identifier: PXVOPBLwklKxxv9tbAGXJMVBzq78Z3vcNfq8uFj/71k=
Subject key identifier: CB:EA:37:B0:F7:5E:C2:64:12:2E:F4:AF:A3:56:7C:AD:51:5D:F5:B3
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Certificate issuer: /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial: 019514A42722DF72C5E5BA5EFB84E2001C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
Manifest number: 132E
Signing time: Mon 17 Feb 2025 16:00:57 +0000
Manifest this update: Mon 17 Feb 2025 16:00:57 +0000
Manifest next update: Tue 18 Feb 2025 16:00:57 +0000
Files and hashes: 1: vfG2nIL3gagXzhAhFxeM23-yY68.crl (hash: Xj80mBfQ43B0uEN7AO3dXbwBBCVe5WACcQmmDlq5+mg=)
2: yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa (hash: nlExao6EjzUkd5CMjjgjOU/lBqyQZP29vMZMmMZee4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a4:27:22:df:72:c5:e5:ba:5e:fb:84:e2:00:1c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Validity
Not Before: Feb 17 16:00:57 2025 GMT
Not After : Feb 18 16:00:57 2025 GMT
Subject: CN=cbea37b0f75ec264122ef4afa3567cad515df5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:36:d9:7e:87:d9:cc:14:e7:b7:fb:4a:4e:
1c:95:e6:05:30:7e:82:05:a6:34:92:74:07:f7:4a:
ff:a9:a8:f5:7a:2c:14:1a:fb:49:9f:37:38:0a:74:
4d:79:c4:51:f2:0e:22:08:03:96:3f:d7:f6:96:dc:
20:91:0f:bc:2c:ad:40:cd:41:bc:f2:5f:ae:9c:7b:
fa:45:dd:ad:d6:c9:de:64:63:3f:bb:bb:38:1f:96:
90:0d:a1:a7:e3:54:9b:37:ac:6d:dd:ad:40:3e:83:
06:44:1d:bc:9b:01:f9:2b:00:ea:8d:05:9a:cd:ea:
2a:8b:e6:ea:ec:b9:12:8b:3e:e3:22:f5:20:49:42:
89:fe:0d:3f:6a:c2:8f:ce:42:70:4b:63:07:ba:41:
2c:e5:b1:3f:f0:40:c6:67:b8:3e:9b:2c:52:9b:a6:
95:51:d3:8d:8e:5c:3d:dc:02:46:45:55:cf:f5:c3:
db:1c:6c:78:54:c8:2a:7f:11:15:9a:cb:f4:e9:ef:
e5:f5:68:77:84:43:1a:be:fc:39:4d:9d:5d:4a:e9:
48:1d:d5:c3:37:ec:b7:67:75:96:fd:83:04:11:77:
ac:91:3a:02:33:34:28:5d:81:aa:28:a7:ce:d5:78:
1e:ff:e4:09:c6:05:b2:9e:c2:eb:15:88:c7:94:c3:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:37:B0:F7:5E:C2:64:12:2E:F4:AF:A3:56:7C:AD:51:5D:F5:B3
X509v3 Authority Key Identifier:
keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d3:05:d3:e3:46:9e:5d:f0:01:58:89:53:90:d0:6e:27:24:
b6:ea:88:4b:85:97:b1:99:9d:cb:8c:3c:69:1d:82:95:0f:aa:
b6:43:3f:fb:fd:3c:93:3a:3f:c0:92:0b:53:9c:c2:1a:08:04:
ed:8c:2f:72:69:29:0e:ef:85:21:43:4d:49:b6:0e:0f:62:4f:
36:4f:c5:56:ed:3f:bc:e3:f7:2e:83:ea:d5:00:98:68:22:b2:
79:53:a0:5d:11:39:af:22:f9:da:37:67:73:a3:61:aa:4b:1d:
10:16:2f:a1:77:10:1d:31:f1:81:b6:17:c3:b3:2d:32:aa:71:
cc:49:eb:73:05:72:71:ea:05:42:0a:bd:b9:e4:cd:b1:51:a4:
03:b7:2d:72:c3:18:58:b8:72:4f:28:36:e4:43:ad:42:e6:6e:
b5:01:5c:ff:7f:21:07:34:50:e0:cf:6d:71:04:0a:dd:f3:8e:
ca:af:92:0f:e5:77:77:32:60:83:58:33:cf:c6:a1:30:05:6a:
ce:da:50:70:ed:24:53:ef:2a:7d:45:03:da:c4:41:fb:00:96:
79:6c:b4:99:4d:3b:1b:6f:de:ab:47:f5:ef:44:73:7d:75:07:
24:24:f8:11:61:91:e2:e1:99:99:02:79:57:34:48:90:b9:ce:
5f:4d:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:48 2025 by rpki-client