
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.mft
File: vGnmkC1OHEEkb0oSG0pb3s-G44g.mft (raw, json)
Hash identifier: WS5AJsMezyfRZhgGe6TWxoK5832thdbr3DdI0OoH8WE=
Subject key identifier: 3B:13:8A:C7:C3:74:33:03:51:69:14:A3:0C:0C:9D:0A:AD:AB:AC:65
Authority key identifier: BC:69:E6:90:2D:4E:1C:41:24:6F:4A:12:1B:4A:5B:DE:CF:86:E3:88
Certificate issuer: /CN=bc69e6902d4e1c41246f4a121b4a5bdecf86e388
Certificate serial: 019230FFD01579F513D11830650CB9EA00A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGnmkC1OHEEkb0oSG0pb3s-G44g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.mft
Manifest number: 0AF7
Signing time: Fri 27 Sep 2024 01:02:03 +0000
Manifest this update: Fri 27 Sep 2024 01:02:03 +0000
Manifest next update: Sat 28 Sep 2024 01:02:03 +0000
Files and hashes: 1: Q7Z_C-47mFmBzVPPKt9ndhGkngA.roa (hash: 5hjev1gTkriUrKnc1kjfdGceLbBmLUEmu+DPWLn6kqU=)
2: vGnmkC1OHEEkb0oSG0pb3s-G44g.crl (hash: hRUMukD0hNollnr7jflaldI+csvp5bKgED8Hs4kYKvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:ff:d0:15:79:f5:13:d1:18:30:65:0c:b9:ea:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e6902d4e1c41246f4a121b4a5bdecf86e388
Validity
Not Before: Sep 27 01:02:03 2024 GMT
Not After : Sep 28 01:02:03 2024 GMT
Subject: CN=3b138ac7c3743303516914a30c0c9d0aadabac65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:65:56:89:2b:2f:e0:86:1a:fa:d5:50:ef:
27:4f:4d:9a:f7:b5:d4:f0:3a:62:d6:9b:06:89:f2:
0b:c8:96:2a:ab:c2:e5:50:ca:20:ae:b2:f9:34:0d:
f4:a6:d9:ec:d9:b0:7e:fa:1e:aa:2b:b0:59:eb:d7:
6f:b3:f3:3f:4f:2d:a0:45:65:71:c1:79:95:47:22:
e1:f1:55:c6:33:e1:d6:e0:22:ae:af:b7:f2:12:36:
0a:84:1f:13:a0:18:fe:3b:7e:4c:15:0f:1b:76:e5:
a3:2f:f6:1b:36:e5:6a:64:a1:c0:50:f1:ec:a3:24:
11:4a:dd:6d:a6:dd:d8:b4:4a:8f:d8:98:ee:f4:bd:
26:93:4c:f0:76:16:12:19:47:72:37:50:e4:0c:14:
c0:95:81:8f:38:73:60:88:ab:37:1e:4d:08:30:24:
9f:48:f5:bb:d7:94:75:9a:e6:a1:31:2c:a9:20:8b:
4c:a5:ee:9f:c2:79:aa:a5:5c:51:97:d6:de:54:b7:
c9:42:ca:04:3e:48:f4:b9:2e:18:4e:c2:79:3a:33:
55:82:ae:68:70:7b:bd:0f:5f:bc:ca:1a:44:66:d5:
10:4b:7a:22:66:31:b7:de:2f:3f:f4:69:2c:85:1f:
e8:8f:98:23:e9:14:80:a5:e9:3e:d0:f3:a2:7e:0a:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:8A:C7:C3:74:33:03:51:69:14:A3:0C:0C:9D:0A:AD:AB:AC:65
X509v3 Authority Key Identifier:
keyid:BC:69:E6:90:2D:4E:1C:41:24:6F:4A:12:1B:4A:5B:DE:CF:86:E3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGnmkC1OHEEkb0oSG0pb3s-G44g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:5b:df:9e:7d:81:70:00:4d:1d:f7:ea:2a:52:75:02:3e:
64:a9:1a:ef:d8:07:73:a2:e2:71:9c:5f:69:7b:f0:ef:5c:c9:
78:0e:01:88:1a:da:ea:47:e5:38:fe:16:f8:22:e0:d9:b4:12:
46:4d:e6:e2:29:81:a2:e2:84:2b:c0:f4:a5:23:7f:14:e0:05:
0b:55:c5:15:88:ac:f2:78:f9:ba:70:ba:6b:83:58:53:03:b9:
10:07:13:97:45:4f:64:71:30:c2:0a:8e:06:60:29:cb:43:54:
fa:68:ff:3f:f9:4c:fd:97:86:75:93:5a:e2:7a:7e:c7:0f:15:
a6:65:0f:ea:8c:7f:84:22:78:b3:13:dd:1b:61:d6:dd:95:2c:
b8:f8:6e:5e:5e:87:82:2c:7b:f7:10:09:2e:5a:57:2e:bb:2e:
f8:ba:68:d1:80:26:00:65:bf:f0:d9:35:79:57:2f:88:75:10:
ff:a3:59:35:da:c4:6d:a6:6a:e2:59:42:05:86:93:0a:33:1a:
03:60:1d:05:40:fb:bd:72:01:6b:6c:15:d5:52:f0:52:d7:a5:
3f:7f:d7:ce:b0:9a:b3:b3:60:be:4b:f8:c1:f6:c1:d0:21:c6:
3a:a6:1f:11:bb:1e:b0:22:8f:a4:9f:6b:da:7f:e9:13:99:6c:
40:25:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:26 2025 by rpki-client