Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: HZELFj0NhtYPNnj0csgbbrCfmp8H2rE4CxValM3YWk4=
Subject key identifier: EB:49:8B:B8:8D:A8:47:4C:31:75:FD:07:CE:85:C2:0D:E4:EE:C4:49
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 0195E07D25F0E44FA1E831A71E0A063A63F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0260
Signing time: Sat 29 Mar 2025 06:00:52 +0000
Manifest this update: Sat 29 Mar 2025 06:00:52 +0000
Manifest next update: Sun 30 Mar 2025 06:00:52 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: 8SQJa3cPrIsX6toanNmv4bFCMOHU9UT/fWYUhfSwrjk=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:25:f0:e4:4f:a1:e8:31:a7:1e:0a:06:3a:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Mar 29 06:00:52 2025 GMT
Not After : Mar 30 06:00:52 2025 GMT
Subject: CN=eb498bb88da8474c3175fd07ce85c20de4eec449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:53:33:dc:b1:ca:22:da:f5:6b:16:ad:bc:
62:ab:40:fd:be:a4:c5:6a:5c:53:af:4b:76:94:23:
5c:46:fa:f5:7f:c7:a7:71:a0:0c:bf:2b:9d:6f:4d:
dc:c9:b9:2e:66:5b:49:33:63:b6:ae:a8:39:27:a1:
fe:1b:c2:bf:7b:5e:21:42:51:4a:cf:6a:65:3d:03:
5f:b0:c8:50:6e:2b:a0:f7:78:c4:c1:18:e5:fe:b5:
90:be:3c:d0:06:89:eb:55:17:da:88:69:08:00:16:
5e:d0:57:86:b7:85:3b:ac:d1:40:f2:fd:09:da:4b:
6d:a9:82:04:cd:ec:4a:74:e3:d9:80:55:f2:c7:b9:
f9:34:ab:18:4e:1f:6f:04:d0:0d:8d:ef:3f:5d:ae:
78:6e:59:ab:dc:1a:a3:2b:77:59:d5:8f:39:02:28:
3b:16:0d:a9:9a:82:58:2e:a6:6d:01:de:1a:14:33:
8b:1f:22:74:bd:44:6f:b7:1f:02:f0:30:2f:2e:aa:
88:9c:53:3e:3f:52:b8:59:df:31:b3:b1:df:c5:ec:
99:46:0f:77:86:6e:dc:48:0b:3d:df:91:c1:fe:68:
4d:ea:6a:54:74:c9:6a:17:e6:20:22:70:37:cd:d6:
32:21:fe:72:4f:7d:05:2d:20:18:fd:cd:7e:d8:cc:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:8B:B8:8D:A8:47:4C:31:75:FD:07:CE:85:C2:0D:E4:EE:C4:49
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:cf:2c:bb:00:ce:d3:cc:82:00:1f:2d:e7:42:d5:c1:d2:
d4:9e:f4:cc:d4:07:65:e2:63:61:df:a6:a1:39:c4:e5:7c:d0:
f6:8d:9a:35:35:39:4f:59:9b:ce:a3:98:23:e8:cf:d2:a2:e1:
97:fd:70:6e:b8:82:e6:d3:4e:a0:1c:61:67:9c:09:08:e8:8c:
e1:28:7a:3b:00:0e:36:65:a6:17:46:39:1c:a4:fc:51:5c:d4:
81:48:67:b6:dd:7b:1f:31:f5:04:d3:74:45:d2:6a:3e:c8:91:
08:20:f1:ef:a0:1f:44:33:69:5b:d1:99:6d:32:bc:f8:92:e5:
14:06:bb:b6:d6:39:4b:b6:2e:ef:9a:24:6f:73:63:36:07:8c:
1d:e8:98:5e:47:5c:6e:a3:0c:61:e7:3a:82:03:83:29:cb:c3:
46:50:a9:a1:cf:d5:4f:9d:74:09:2c:79:df:17:bb:96:da:80:
95:fb:6a:90:c4:f1:4f:55:32:d3:49:0e:51:d1:cc:2a:8b:b3:
19:72:66:09:df:4a:32:f5:d0:04:1e:f9:22:90:55:24:a2:58:
d9:ee:e7:bb:3b:a2:9f:aa:f5:ee:68:c8:4c:76:ee:c1:c4:d0:
3f:c9:bd:4a:02:0f:43:67:a4:e0:f8:df:96:67:08:46:b1:c7:
5d:70:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:36:05 2025 by rpki-client