Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: lZ46hxGqaCiOjrITMfjnP1qEVbDcOQrQexTF9RWLS/Q=
Subject key identifier: A7:0D:95:36:FD:93:4D:1B:D5:A9:08:64:B9:83:95:4F:75:5A:3B:81
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 0195E00FDC61EB520E66DEC9F0785893601A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 04:01:30 +0000
Manifest this update: Sat 29 Mar 2025 04:01:30 +0000
Manifest next update: Sun 30 Mar 2025 04:01:30 +0000
Files and hashes: 1: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (hash: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=)
2: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
3: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: p9++NWdkcofzlA6TMQPriVSQsCq6bm5EjHiqbs5XB+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:dc:61:eb:52:0e:66:de:c9:f0:78:58:93:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Mar 29 04:01:30 2025 GMT
Not After : Mar 30 04:01:30 2025 GMT
Subject: CN=a70d9536fd934d1bd5a90864b983954f755a3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:73:2a:44:64:40:b4:c9:5d:b0:7d:21:d7:
4e:37:61:8b:40:80:9c:a6:6e:62:a8:89:a6:30:f0:
e6:8e:8b:69:2a:fd:22:35:36:ed:e7:47:15:f7:fe:
d2:b3:21:30:a9:fb:8c:82:66:a6:e9:b2:04:16:bb:
92:82:71:b0:d9:0e:8a:3a:0a:20:8d:b7:8e:69:e8:
dc:17:f5:ac:55:52:4d:13:6e:6b:43:d5:f6:81:e3:
24:cd:be:15:4d:82:44:e7:7c:1d:ae:26:85:8e:01:
a7:9e:ac:32:07:dd:06:f7:30:dc:b4:42:f5:d7:3d:
1e:4d:d8:30:10:dc:8c:12:a2:e9:cd:81:7a:50:7e:
06:93:3b:fe:09:8b:a2:6c:09:8a:6f:3c:2d:db:8a:
c8:c5:e5:7e:75:38:28:d7:77:dd:13:47:09:5f:e4:
89:61:07:cb:70:b8:3b:19:e0:fd:36:f6:48:37:05:
f5:f6:1b:f3:ff:bb:3d:40:39:09:0a:bf:4b:7c:d0:
31:f8:9d:87:1b:9d:7a:6c:74:bc:94:2d:c7:94:8d:
a2:68:68:43:a2:a4:54:32:3d:d6:5f:08:68:9c:e7:
ed:4a:ab:fa:6a:f9:ee:52:7c:db:5a:38:8c:94:11:
16:cc:d0:67:05:12:79:88:7e:81:23:74:20:cf:06:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:95:36:FD:93:4D:1B:D5:A9:08:64:B9:83:95:4F:75:5A:3B:81
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fa:56:d0:1b:21:50:be:ed:8d:32:b7:32:d6:f8:ec:87:19:
d5:34:17:54:a3:ab:27:81:61:fc:c5:b3:e0:d9:22:8f:72:b8:
54:1a:c1:37:c5:8c:98:b5:3c:80:45:e2:9f:1d:09:e8:33:dd:
55:a6:3d:58:12:78:7a:b7:4a:f9:22:fb:1c:1f:73:f4:b6:17:
f3:90:8b:62:51:97:d7:53:ff:9b:ad:49:29:e8:a1:8f:59:82:
e2:9b:2e:b6:34:52:c7:0d:c4:c9:94:4e:88:db:d1:3e:95:9f:
c0:db:7a:69:e0:16:49:7d:1c:fb:47:5a:35:01:50:ef:df:9a:
a9:3f:d7:f4:55:12:f1:7d:85:e9:a1:d8:c7:c2:74:d9:0a:97:
fc:34:d1:ea:d7:2d:01:c3:e8:4f:e7:f1:c8:16:d4:08:de:d6:
db:b9:c5:98:dd:0f:22:05:fa:e3:22:5d:1f:94:c8:ff:13:53:
cf:69:89:73:ec:a6:eb:9a:6f:43:c4:43:c9:37:2f:a6:69:96:
13:5e:83:57:c4:d0:9f:fb:27:d6:ee:8f:ba:2f:be:a5:6a:4a:
9c:42:44:75:49:98:5a:46:7b:9f:c2:5f:47:bc:14:7f:b5:56:
fb:f3:b4:57:56:e9:bc:91:3e:95:1d:a7:44:15:44:d9:c6:ba:
8b:7f:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:28:01 2025 by rpki-client