Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: UhkcfVNYTVJYkPWH+W99Cldy0b6riwgWMsbNH+LXYoE=
Subject key identifier: E0:7D:5F:1D:8B:41:09:83:98:02:FC:CC:A8:AC:EE:CB:AE:BC:84:BA
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 0195E159FD0F784889CD975F31194547B96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0AF3
Signing time: Sat 29 Mar 2025 10:02:05 +0000
Manifest this update: Sat 29 Mar 2025 10:02:05 +0000
Manifest next update: Sun 30 Mar 2025 10:02:05 +0000
Files and hashes: 1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: kAn/WVIRDPUO6uUY4Ya+vJ1Vbs2KRZxNDD6+n3QLhio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:fd:0f:78:48:89:cd:97:5f:31:19:45:47:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Mar 29 10:02:05 2025 GMT
Not After : Mar 30 10:02:05 2025 GMT
Subject: CN=e07d5f1d8b4109839802fccca8aceecbaebc84ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:ac:eb:0e:bc:07:80:ca:bd:61:4d:de:34:
84:28:cc:38:78:32:ed:d4:66:51:6b:2a:e8:a2:d3:
43:0e:dc:d9:9e:10:ba:fe:cb:37:88:af:46:9d:11:
e0:ee:91:5f:64:10:ab:31:bc:5e:33:f8:e3:1e:d7:
a7:c2:7b:a4:08:e1:9a:5a:98:6f:64:c4:bb:76:31:
47:70:39:a7:d9:d6:6e:72:4b:b9:d3:fe:90:28:ce:
cf:e0:c2:3d:bf:e8:b9:3f:66:8a:52:5e:84:6d:aa:
db:f7:31:d1:93:2d:6c:be:f5:1e:0e:07:12:7f:27:
5a:3c:5e:dc:4d:27:8a:2d:ec:7b:b7:78:33:34:c4:
c1:94:56:9c:89:e3:36:ce:41:b8:70:e8:4a:96:f6:
59:7c:61:fa:db:d2:e7:52:3a:15:8c:39:a7:08:44:
cb:ae:a2:be:14:26:18:03:c5:fb:4d:83:c7:31:a2:
3e:d0:d1:0c:ad:d6:3f:2d:50:76:4a:97:ac:38:3c:
92:8f:e7:64:cb:f4:94:cf:87:ab:12:de:4e:bd:fc:
8b:4f:d3:e5:d8:d9:54:14:21:06:7f:32:1f:9b:39:
8e:78:64:26:47:bb:82:11:a7:2a:74:8b:d1:bd:ba:
fa:cc:75:cc:d0:95:ff:85:1e:0a:ee:06:42:04:8a:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7D:5F:1D:8B:41:09:83:98:02:FC:CC:A8:AC:EE:CB:AE:BC:84:BA
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a1:a2:0d:5b:96:dd:c0:34:36:9c:73:93:3c:ef:da:26:22:
1e:b8:11:dd:04:e8:c7:56:1d:09:98:32:c0:65:ce:20:e0:02:
d1:74:27:14:ea:31:b9:c8:1f:6d:b6:75:53:80:f2:fd:1e:82:
f4:e3:fa:2b:34:45:a2:3a:60:96:3e:ad:e5:6c:86:0c:ef:e9:
e2:5b:3e:ca:b8:bd:d5:91:ec:3a:14:dc:aa:7a:79:b5:f0:09:
39:00:78:e3:3a:ea:a1:9b:77:6c:3c:57:30:1f:18:a8:bd:9e:
23:17:a7:da:a7:3f:01:9a:e7:64:77:81:eb:fa:7b:53:b5:87:
70:7c:71:e0:80:e3:9c:7d:f5:22:7a:4f:50:1a:7a:23:a3:ef:
57:9b:a0:cd:3b:8d:b8:90:e4:02:c2:08:5f:73:06:4a:61:87:
a9:5a:dc:46:0d:89:a9:c9:6a:6d:b3:8d:35:9a:f2:3a:84:c5:
0d:ee:7a:5c:8e:5e:51:ac:35:49:e6:50:31:24:8e:7b:ce:f6:
84:b2:49:2e:99:ea:56:3a:2a:50:b0:6e:4d:53:a5:d8:ba:35:
e7:90:14:0e:66:d0:28:b4:ef:29:0c:0f:d1:63:35:ac:9e:89:
de:ae:d5:f3:27:ee:a8:fc:8c:93:41:ba:4e:0c:07:7f:95:01:
4b:5d:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:02 2025 by rpki-client