Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File: vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier: LJmn4FBgopWqbc1lOD4Hkjl92EU5HHT2Pb7FhhmY6qs=
Subject key identifier: 01:D1:7E:21:B7:C9:5E:4C:5D:18:1C:66:27:DA:1F:8D:84:5F:2E:8E
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 0195E046A9C81FF283A4E302BF5177925F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number: 0DDE
Signing time: Sat 29 Mar 2025 05:01:22 +0000
Manifest this update: Sat 29 Mar 2025 05:01:22 +0000
Manifest next update: Sun 30 Mar 2025 05:01:22 +0000
Files and hashes: 1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: rvuYzQNm14GwzJZUspo8uiuNnqMjf+gdMN+caA5DqrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:a9:c8:1f:f2:83:a4:e3:02:bf:51:77:92:5f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Mar 29 05:01:22 2025 GMT
Not After : Mar 30 05:01:22 2025 GMT
Subject: CN=01d17e21b7c95e4c5d181c6627da1f8d845f2e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:4b:bc:ad:0a:b6:ae:06:12:78:68:3e:8b:
73:2f:eb:0e:c4:6d:44:2a:02:9e:de:4c:ba:7f:20:
68:54:09:18:7f:ba:a7:b2:d1:bc:fb:8c:48:31:94:
1e:8b:4e:b3:08:0f:b1:0f:36:9d:62:2e:8b:a9:6e:
d8:bb:fe:4a:90:3f:31:61:44:4c:d0:0c:e8:b0:a0:
e7:bf:15:a0:d4:2b:68:2b:67:ac:14:51:22:17:d8:
76:bf:cd:6a:e0:44:1e:4c:8d:1d:e9:ea:64:75:9b:
45:72:c1:18:0c:0c:55:64:14:c4:14:d5:66:6e:16:
3f:83:1e:15:a8:8e:f9:d6:03:18:30:92:8a:fb:8e:
95:0c:1f:f0:40:ee:8e:f0:f7:73:fd:01:50:98:47:
9b:7d:20:0e:f6:00:f4:34:6b:33:07:bc:0a:d5:9e:
c3:31:d6:1e:37:b9:f5:30:64:4c:8a:f6:5b:a8:3f:
a6:6e:5f:b5:a3:99:fa:56:1d:1d:86:f3:49:41:17:
82:0c:2b:20:40:9b:13:39:59:21:d9:79:c3:53:1d:
c3:11:a1:ba:d1:07:59:4d:d5:2e:bc:e7:c2:1f:05:
7a:2e:95:a0:13:d9:ab:e8:f3:18:9a:32:20:38:f4:
38:f8:ab:bb:35:ee:d8:6c:b7:5d:bc:c8:d1:95:de:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:7E:21:B7:C9:5E:4C:5D:18:1C:66:27:DA:1F:8D:84:5F:2E:8E
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:53:22:77:0e:00:9e:ca:a8:6e:1c:9a:24:2f:aa:39:e4:
f1:d2:41:08:3d:27:99:8b:cb:11:b1:25:89:21:eb:5f:d6:65:
d8:c8:57:8b:98:c9:e9:ca:11:5b:df:c0:01:ef:b4:56:cc:c0:
0e:b7:6e:22:f4:13:6c:28:87:c0:44:84:c6:f0:09:8b:1d:c7:
ef:3e:fd:ee:a6:6b:75:d9:c6:81:5a:e8:75:30:ff:ab:c6:df:
cd:fd:cd:4d:99:c2:2a:fd:b4:68:41:18:36:4b:86:2e:10:ce:
06:63:eb:3f:b2:6a:33:71:0b:1f:77:7d:08:91:df:10:e0:66:
f0:e4:07:0e:22:c9:5c:f8:4e:c8:6f:45:a1:22:71:2c:90:eb:
a9:d7:bc:c4:b1:6f:fb:0c:21:0d:b6:1b:31:86:bd:db:10:af:
26:e4:a6:cc:83:21:b2:73:84:12:0d:04:48:62:3c:8a:e6:d8:
8f:2f:f4:1a:3e:e1:f8:c9:24:be:7c:b8:3c:da:15:fc:19:b9:
71:84:f3:a9:d8:da:ce:e7:ae:f8:b9:61:d9:37:be:60:f8:80:
b6:c6:e6:90:54:b3:36:34:9b:37:1a:c0:53:45:8b:fc:9a:66:
22:54:65:33:61:62:e7:32:54:ad:5d:82:11:56:c1:fc:6b:ee:
3b:a9:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:17 2025 by rpki-client