Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: ziFNhyjyogNFWT4rLj5QlbB0Gg8MdivZhkF58FWyD4k=
Subject key identifier: 64:52:0C:3F:F6:B3:95:A8:47:55:E3:87:23:07:BA:F0:EC:51:1E:BC
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 0195DFD89F3BBE295991F8F7D22D605C3638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 1005
Signing time: Sat 29 Mar 2025 03:01:10 +0000
Manifest this update: Sat 29 Mar 2025 03:01:10 +0000
Manifest next update: Sun 30 Mar 2025 03:01:10 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: y65VvTbtHFYZiM0QYU5RrYzHZMJL0Aw4waukN19gMcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:9f:3b:be:29:59:91:f8:f7:d2:2d:60:5c:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Mar 29 03:01:10 2025 GMT
Not After : Mar 30 03:01:10 2025 GMT
Subject: CN=64520c3ff6b395a84755e3872307baf0ec511ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:cc:43:58:42:dd:05:ed:94:86:70:e1:06:
4c:00:e8:6e:f3:06:99:ef:8e:cd:2a:21:84:e3:d7:
aa:b7:e8:a6:82:ec:f6:ed:82:1f:0b:34:5d:7d:48:
ec:4e:58:e5:25:18:05:f1:0d:b4:8f:a1:bc:24:27:
79:24:b3:8e:39:4a:f3:d9:db:e0:73:05:66:a4:f6:
f4:ac:d4:b0:33:5c:31:1e:c3:ab:48:b8:ac:a3:25:
42:49:36:1e:e8:3e:bd:b3:f5:96:e5:ea:95:c6:47:
47:79:e7:f0:b4:02:f4:c6:20:da:aa:4c:47:01:d7:
0c:59:02:b1:14:af:e1:3a:e7:40:6a:ea:87:a2:91:
d3:87:c6:46:2d:de:c6:b1:30:40:bd:86:b1:90:22:
6d:5f:53:6a:94:96:6e:52:e4:34:11:00:9f:f3:e2:
31:19:07:26:55:61:30:44:ee:9e:3c:95:86:15:2f:
bc:96:d9:8e:b5:aa:fa:06:18:21:91:6e:10:c8:a9:
34:6e:14:bf:82:4e:da:d6:c5:e1:e2:f4:25:50:2e:
e9:ed:cd:c3:72:58:25:1f:ae:aa:4b:7e:b8:cf:0f:
3f:e1:94:3a:a5:9b:aa:0a:27:6e:9a:0a:8f:44:16:
8b:0b:97:c1:6e:4c:7b:83:7c:63:fa:89:85:6b:1e:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:0C:3F:F6:B3:95:A8:47:55:E3:87:23:07:BA:F0:EC:51:1E:BC
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:a3:ff:f0:fa:67:17:77:4e:ac:dc:93:96:25:aa:9a:a5:
75:81:86:ec:41:b3:3d:27:5b:7a:1f:71:73:3f:fa:89:37:70:
7c:db:b5:fb:18:32:18:8b:10:88:89:a3:d7:38:7a:ae:6c:15:
57:7d:38:cf:72:ad:11:ef:ec:c9:35:29:f5:87:55:5c:57:64:
87:5a:2b:b3:de:15:4b:9a:fe:05:d5:c9:6a:01:95:02:05:56:
b8:77:fc:71:0f:92:80:36:aa:aa:ac:ef:f2:10:0c:83:96:db:
7a:b0:f5:1f:4b:2d:39:41:95:db:c9:1e:c1:5b:b0:ec:49:02:
f1:de:f0:ca:bd:2a:c7:f7:4a:01:1e:f3:e0:a3:cc:75:b6:22:
45:7c:db:31:db:f3:fe:e7:cf:ad:ce:20:05:92:8a:2e:e4:78:
50:98:e6:f0:13:66:05:d5:f9:f4:79:17:d2:ba:41:04:52:da:
a4:de:ea:6f:70:1e:09:86:37:fd:0d:82:25:55:55:b2:c4:29:
cb:e1:12:26:c3:af:4b:8b:80:60:3f:7b:64:0b:f1:9d:15:ea:
30:3c:96:3a:df:71:49:6d:d0:51:8f:50:83:2d:36:58:1d:0a:
23:2f:ec:36:5f:fb:25:0f:b6:64:66:b3:1b:b4:2f:23:84:e8:
88:e4:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:18 2025 by rpki-client