Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
File: vfG2nIL3gagXzhAhFxeM23-yY68.mft (raw, json)
Hash identifier: dvMxQxCgPIxm+hLkvLwDJ9fhhovAoCuHgRjiowZdWzs=
Subject key identifier: 74:A6:70:A5:48:2D:3F:0C:1E:FE:94:AA:1B:DA:5F:F6:F6:E0:0A:E6
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Certificate issuer: /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial: 01952228F04EAB47E0D78FF51899E2D2249C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
Manifest number: 1335
Signing time: Thu 20 Feb 2025 07:01:03 +0000
Manifest this update: Thu 20 Feb 2025 07:01:03 +0000
Manifest next update: Fri 21 Feb 2025 07:01:03 +0000
Files and hashes: 1: vfG2nIL3gagXzhAhFxeM23-yY68.crl (hash: 56sqa09gHn9Pvb3i7Z24rA7/MHHiYAwc4kVmSCk0TPU=)
2: yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa (hash: nlExao6EjzUkd5CMjjgjOU/lBqyQZP29vMZMmMZee4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:28:f0:4e:ab:47:e0:d7:8f:f5:18:99:e2:d2:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Validity
Not Before: Feb 20 07:01:03 2025 GMT
Not After : Feb 21 07:01:03 2025 GMT
Subject: CN=74a670a5482d3f0c1efe94aa1bda5ff6f6e00ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:4d:04:de:7e:f0:16:20:58:40:85:32:4a:
22:eb:3e:ed:d4:d8:34:ca:38:ec:3c:b5:73:9c:a9:
92:87:ea:ae:67:7d:58:6e:5b:1e:7b:4b:fd:94:86:
91:d7:c8:31:38:e0:76:03:62:ae:aa:61:cc:b9:96:
0d:34:4b:42:7c:9a:50:ca:cb:09:8d:23:2d:d7:38:
01:b9:78:36:60:24:5a:dd:f4:11:a4:08:ed:fd:8b:
97:ec:18:4d:c6:4b:ff:d2:0f:d3:d2:2f:f5:8b:aa:
16:59:48:ea:f0:5e:63:27:db:24:00:ec:44:0e:84:
48:bb:c4:5c:8c:ed:5f:1f:5f:c1:79:db:75:06:17:
40:ad:0d:71:c3:7b:2b:82:e5:e1:2b:d3:e3:94:ab:
fa:a1:2e:f5:7c:1e:dd:63:18:53:b0:9b:64:a6:1f:
00:a5:bb:ff:77:95:d5:85:68:3b:ee:62:59:ca:99:
32:bd:38:59:8a:73:24:29:99:93:01:ee:51:1a:ec:
aa:8b:f4:74:d4:aa:60:3b:f0:23:f2:e5:8d:81:6d:
54:d1:31:01:96:13:9c:54:0e:c7:cc:46:38:9d:b4:
5e:66:ad:74:25:df:5f:cd:8e:ea:96:12:17:f1:15:
a5:81:8c:1c:81:7b:4e:2b:ba:59:4d:a1:bc:0a:60:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:70:A5:48:2D:3F:0C:1E:FE:94:AA:1B:DA:5F:F6:F6:E0:0A:E6
X509v3 Authority Key Identifier:
keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b5:bd:63:f4:e4:24:36:b5:70:35:34:36:85:09:2b:66:66:
ab:73:40:bd:ed:1b:d2:be:81:3e:81:83:ec:c4:07:16:7a:43:
42:03:3e:8c:df:39:70:60:88:38:f0:0b:16:b6:af:77:31:d2:
54:58:cb:96:62:47:f2:af:c0:9f:b9:56:f9:08:87:54:11:2c:
7a:90:ce:02:69:2f:b4:49:00:f6:9c:13:f3:ad:8d:22:4b:59:
36:8e:e9:31:65:b2:b2:2c:b5:9a:83:4b:5f:74:60:4e:1a:7f:
5e:22:c5:ee:eb:d3:f5:14:de:a5:e2:f8:65:99:a7:88:aa:6a:
ca:db:c0:f1:b2:15:b8:64:80:af:17:88:29:d3:6d:e5:43:6c:
cd:b1:00:20:e7:b5:da:44:41:e1:4e:b7:25:d3:d9:d0:fa:89:
0b:7a:98:8d:4b:3a:60:21:ca:e7:84:68:66:2d:c5:a7:98:1c:
91:bf:98:6d:1a:18:21:74:8a:8f:44:f0:ee:19:3c:79:66:b1:
a4:e3:35:8b:42:25:fa:00:4b:69:35:92:fd:45:9d:61:5a:d1:
8a:12:e4:c9:b5:64:cc:07:5c:72:85:2c:68:37:18:e6:55:64:
b4:d4:dd:c8:1c:4a:1a:60:6d:19:8d:f5:74:dd:1f:be:37:48:
1b:44:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:42:20 2025 by rpki-client