Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: hYiqOCrpUjy9SQrVwixnMwonmVwVy/A25YXNB5ONwak=
Subject key identifier: 35:38:7E:61:85:15:E3:AA:40:D0:23:B6:0B:80:D1:F2:2E:FF:46:20
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 0195E1227516E4767935BA52BBD2F76B780D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 12A2
Signing time: Sat 29 Mar 2025 09:01:26 +0000
Manifest this update: Sat 29 Mar 2025 09:01:26 +0000
Manifest next update: Sun 30 Mar 2025 09:01:26 +0000
Files and hashes: 1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=)
2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=)
3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: +KToHCpa2/FhRjLCaFSTY3zRoL/hkKTLDOYDji+Rn84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:75:16:e4:76:79:35:ba:52:bb:d2:f7:6b:78:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Mar 29 09:01:26 2025 GMT
Not After : Mar 30 09:01:26 2025 GMT
Subject: CN=35387e618515e3aa40d023b60b80d1f22eff4620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:2c:d2:c4:e7:eb:fe:20:cd:0a:d1:69:1b:
6c:73:fb:1b:10:f3:53:81:73:2e:dc:36:9e:81:76:
5d:4a:43:32:1a:c0:d4:b4:e0:5b:dd:dc:f2:2f:e9:
ee:a2:ee:c0:54:73:1e:c9:19:9e:ec:bf:19:74:05:
a3:84:66:91:e1:dd:74:f8:d8:71:7b:35:bc:5d:e1:
25:39:60:b8:c2:15:d6:d9:b5:43:bb:73:d1:a5:e5:
98:ce:65:cb:5a:41:df:6c:8c:80:a7:5c:1b:66:92:
29:71:cb:25:90:b3:b7:ad:e7:17:a3:ca:96:9a:45:
16:f3:dd:a9:8b:7a:3a:6f:a2:5e:96:bd:9e:06:18:
1f:04:9d:0a:85:12:d8:a9:52:b9:b7:a3:f6:b5:2a:
cd:a4:19:fd:61:85:6d:4a:f1:7c:52:6a:87:6b:c0:
0d:f0:bb:0f:7f:93:db:2a:af:6d:94:89:a5:6b:a0:
04:5e:6a:16:af:f0:41:c4:0c:3d:78:ee:51:14:06:
21:15:d3:39:9a:63:d0:36:d0:0f:ca:fd:c2:54:9a:
cb:5b:ff:14:2d:d1:b2:33:f6:01:15:a5:5a:58:b5:
7d:b8:51:a4:ee:15:61:f2:3d:6a:27:af:53:2b:d1:
76:76:fb:b5:e0:fd:fb:9e:1d:e7:6e:aa:b6:27:20:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:7E:61:85:15:E3:AA:40:D0:23:B6:0B:80:D1:F2:2E:FF:46:20
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:0b:0e:3d:9a:8c:b7:b9:c4:e0:29:c1:a8:48:09:4f:87:
8e:6d:c1:72:6e:de:ad:ad:b4:72:c6:bd:6c:e8:d7:cc:97:52:
16:78:9d:ba:a2:51:30:1e:19:2c:6c:f1:2d:f3:d8:2c:d6:f0:
0f:1a:c7:49:db:77:c1:95:57:0f:45:38:2f:11:72:7b:5f:d7:
9d:59:7d:e7:5b:c4:e5:30:36:0c:86:cd:c3:4f:65:da:fb:51:
02:69:71:f6:c8:7f:3b:02:26:9f:ab:55:8c:49:b6:80:98:72:
b6:55:41:6b:89:eb:fa:fb:39:d4:ac:78:f4:d4:aa:70:8b:91:
29:2c:1d:71:50:19:37:c7:2b:49:26:58:ce:be:c1:3a:24:f2:
aa:22:30:51:59:e1:af:3d:bf:91:b7:c3:14:dc:9c:e8:2e:7c:
60:08:90:c3:7c:5d:90:12:ff:41:b0:9f:f1:ff:3f:fa:e5:77:
2c:07:35:1b:6b:ba:1d:64:d9:60:08:d4:b4:c8:5d:d7:b7:5f:
d4:94:2a:0a:5a:4a:cc:8b:a0:fb:f1:b1:32:bf:2b:b8:27:d1:
63:42:6d:5b:97:6b:1e:b6:92:26:66:09:da:5c:26:79:eb:c0:
4c:be:16:e0:5c:de:96:d9:49:eb:0f:0b:32:32:79:0e:f3:9e:
b6:f2:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:58 2025 by rpki-client