Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: pjOzkCDniFfcjYKhi5sWv1fFiTUTOr+0kuYShCfrgQU=
Subject key identifier: E9:8D:43:C5:72:26:31:BB:84:8D:FF:B6:B8:4C:8D:17:2F:6A:05:28
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0195E07D20E8B6E4701119C63D62B5C029CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 094E
Signing time: Sat 29 Mar 2025 06:00:51 +0000
Manifest this update: Sat 29 Mar 2025 06:00:51 +0000
Manifest next update: Sun 30 Mar 2025 06:00:51 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: NusuDvvyEUMiqpfFB2oQwMHHXC3YpSxlzRkDa8zQXdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:20:e8:b6:e4:70:11:19:c6:3d:62:b5:c0:29:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Mar 29 06:00:51 2025 GMT
Not After : Mar 30 06:00:51 2025 GMT
Subject: CN=e98d43c5722631bb848dffb6b84c8d172f6a0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:d4:e9:34:c1:2c:e9:20:5c:8c:18:06:8a:
76:ed:6f:94:13:15:11:57:e2:ca:c5:96:92:7c:bf:
f6:91:a4:d2:e8:13:84:95:77:3b:02:c0:d1:c8:77:
e3:12:f8:c9:ce:7a:6a:35:46:7e:7c:55:c1:17:41:
b4:bb:8a:f7:70:c4:7d:b8:a0:bc:d3:71:f4:b9:24:
db:fd:30:12:d8:82:e7:34:ca:df:4d:13:84:b1:22:
11:dd:9d:42:12:3e:04:21:f8:64:d7:54:0d:39:5e:
48:dc:10:65:3e:75:e9:c5:35:cd:cf:a9:03:78:11:
d3:a0:8c:4e:46:42:7c:b2:01:28:1c:be:0c:2b:5f:
07:10:03:03:70:15:5c:22:55:b9:7e:9c:3f:e7:84:
4b:63:0c:f9:a5:e0:5e:fb:44:78:c6:76:60:3a:e7:
f2:b6:fb:3c:b0:62:97:de:9a:1e:3f:7b:c6:c1:bc:
c2:3c:d2:01:17:7d:62:96:80:f7:8c:5c:a3:63:7f:
99:7d:14:fd:5f:ae:99:9a:70:a4:9b:52:60:ad:e5:
01:ff:bf:af:fe:c7:4e:9e:20:f3:03:82:1c:62:b8:
52:34:7a:cf:7e:55:1d:8f:d2:85:9f:d6:82:bf:eb:
42:cd:c8:35:3c:ce:03:e7:eb:8a:ad:7c:b7:00:2b:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:43:C5:72:26:31:BB:84:8D:FF:B6:B8:4C:8D:17:2F:6A:05:28
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ba:76:b0:4a:8d:89:db:0b:f8:b0:16:09:2d:d7:4f:6c:fa:
7c:9b:5f:ad:6d:a1:49:6c:61:89:91:b9:bf:2f:db:41:d8:a4:
a0:c2:6c:af:86:a2:f3:5f:77:ff:14:0c:8f:bb:e8:bb:bc:08:
d4:f4:4a:ee:e3:99:53:7c:b9:0b:2c:f0:95:79:04:91:1c:19:
e9:36:e7:77:0e:02:15:31:05:64:84:44:b8:9b:e0:81:f4:09:
2d:83:95:2f:69:7e:ee:56:32:f7:4a:c4:fd:af:b4:b8:1d:f2:
59:70:a4:c1:3e:75:05:e9:a4:0a:50:8e:ea:be:58:80:dc:90:
7a:a7:52:83:75:70:e7:45:16:6d:42:8f:5b:c3:49:a0:52:0b:
db:9d:c1:82:ae:cf:30:79:2a:9f:2a:6b:aa:de:25:67:87:ec:
14:49:bb:3e:77:44:a9:0a:a9:2b:e3:f6:63:02:14:97:6c:69:
1c:01:c6:b7:c0:fb:7e:1b:8c:9b:cd:79:a5:9e:c9:b1:6b:77:
05:ca:3d:c0:95:cd:9a:97:7f:e2:3e:63:cd:24:f5:ae:d7:4e:
63:79:66:5d:ec:76:4a:66:1c:59:6a:bd:6a:90:1d:57:42:ed:
d9:fd:16:71:17:6b:e0:64:60:be:fc:fa:c2:5b:40:c4:29:d2:
44:f6:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:45 2025 by rpki-client