Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: uh2X49ZWfApxQxQxiSOQM9FfRAJKxUHPIfKfh/qiomY=
Subject key identifier: 42:09:AD:F9:CF:1F:B2:82:63:E9:F3:03:66:B7:3E:D3:D7:B2:74:C7
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 0194BC04FE07A4704C22ABB652A4AD3635C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1022
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: adm49wGW26EOZsslw7PB7FGxJjVxP2dofFIXkBEu77A=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:07:a4:70:4c:22:ab:b6:52:a4:ad:36:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=4209adf9cf1fb28263e9f30366b73ed3d7b274c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:fc:b9:51:9b:75:e4:27:68:21:62:34:21:
e9:83:fb:d2:33:29:de:23:a7:5a:62:dd:9b:1d:70:
d9:db:20:16:83:ea:c5:62:4f:21:a7:73:75:c7:86:
ca:37:07:a0:f2:35:a9:d5:56:40:15:14:a4:c9:fb:
f9:73:ac:d3:8d:7f:39:d9:f3:79:44:c7:e3:7f:12:
ee:13:4a:44:af:86:38:85:bb:27:1a:96:d9:78:65:
08:cf:d6:8d:35:36:df:7b:47:45:0f:ff:18:1d:01:
f2:93:74:13:e8:ff:b3:40:d1:08:af:96:75:cc:94:
c6:ce:54:e2:58:26:22:49:b5:68:8b:d4:07:da:10:
ea:7c:ec:58:d6:82:ee:da:1e:57:8c:d9:8c:70:92:
b2:49:d6:1e:03:0a:19:86:61:53:3e:7f:e9:17:67:
f6:e9:d1:40:a9:5c:d9:6f:6d:26:c2:ad:32:45:99:
36:bc:26:f0:08:22:e1:b6:9e:34:c9:ea:3a:38:1d:
d3:29:46:a9:b0:4b:49:dd:f7:f5:e8:77:25:43:e3:
de:56:0a:da:fd:b8:68:d2:ab:98:07:3b:9f:13:5c:
a0:a5:03:1e:b1:bc:72:17:f6:66:ca:ab:af:d2:47:
69:2b:7b:22:8c:47:2a:5c:3d:29:67:08:1f:ec:83:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:AD:F9:CF:1F:B2:82:63:E9:F3:03:66:B7:3E:D3:D7:B2:74:C7
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:0e:4a:04:80:44:a8:fc:be:6a:ab:2d:56:5e:93:18:1d:
c9:3c:44:7f:3b:a7:59:c6:d4:32:26:34:13:f9:9a:73:b1:05:
99:11:49:53:fb:eb:08:2a:e8:be:9b:01:37:ca:7e:f0:c0:0c:
5b:35:51:b9:a1:d7:05:ec:68:d3:9e:fb:59:06:e8:c3:ad:81:
26:fb:fe:5e:11:bc:15:9f:51:05:eb:91:79:66:8d:f7:8a:40:
2d:94:b3:fb:a0:5c:c0:92:9c:ae:ef:75:f5:7c:a5:7b:b0:2e:
b2:69:99:d5:ca:f9:52:13:ac:20:98:38:73:7c:91:37:24:1b:
58:31:43:09:91:dc:3c:60:fa:a9:b6:e4:9d:f0:3d:e0:aa:69:
73:0f:23:a3:6d:e3:9f:4a:fb:5a:29:81:41:84:a1:53:0d:57:
c9:56:d3:ae:0e:09:55:3b:01:1b:04:2a:b8:8d:1c:8a:de:18:
70:4f:2e:89:82:de:d9:0a:8c:ca:29:f2:1b:67:52:4b:6a:3f:
e1:ed:da:d6:3b:4b:f1:61:e0:37:ac:14:0d:fa:ba:74:d3:49:
1a:b9:95:ba:4f:7b:2f:16:a4:4e:78:29:f9:4a:28:e4:f7:40:
d6:61:ee:c0:22:5c:12:dc:94:57:fb:c7:78:4c:25:b5:2f:e9:
4b:d5:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:27 2025 by rpki-client