Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: 34VpuyuWd6qV9tmw8uFbHxa3x+v1iTXER8yWhevghco=
Subject key identifier: 28:54:07:D2:F7:FF:64:F3:06:70:F8:98:50:A5:8D:CF:D8:B9:95:36
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 0194BCE0DC61E47E26E204A04EBDCBEAA057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: 8A55xZ+xBlpBV06ZO+6YjaUvoDwuflwl441OM415sNw=)
2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dc:61:e4:7e:26:e2:04:a0:4e:bd:cb:ea:a0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=285407d2f7ff64f30670f89850a58dcfd8b99536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:0c:df:52:9b:4a:ec:34:31:0e:3c:c1:81:
2a:59:e1:0f:64:22:ed:67:a8:94:d6:04:a9:a0:94:
fb:e4:84:e3:e8:e2:82:f7:7c:f5:7d:00:be:c1:9f:
1f:5e:de:cc:2f:50:61:0f:78:ee:e1:35:2a:22:5c:
56:ea:a6:59:64:cf:d3:fd:8e:7d:01:cf:9e:0b:d7:
16:d6:e9:44:6f:dc:cc:65:e3:7e:b6:09:8e:be:ea:
05:49:c2:f8:b8:b4:2e:c7:ca:6c:d8:35:99:5c:21:
c3:69:88:c8:67:6c:fe:69:07:40:56:f2:be:38:7a:
3c:5c:f7:c8:cd:49:63:94:af:a7:5d:86:70:5b:64:
4a:7d:f9:ef:df:48:0e:5e:68:7e:07:0b:c5:07:37:
7a:25:28:52:23:d9:ee:8c:a4:97:03:ef:d5:fd:d9:
d6:e5:e8:29:2d:7f:d5:30:96:cf:9d:5f:6b:c9:e8:
3b:36:f1:c1:4d:f4:a3:28:f4:74:a4:77:54:ce:02:
7f:05:7f:fd:ef:26:1b:d1:91:f8:55:40:82:e0:4f:
61:8e:fd:2f:b1:5e:86:6a:17:3d:dc:11:6c:aa:a9:
6e:f0:a4:47:53:30:fe:e3:df:fc:3a:cf:7f:35:67:
81:04:ba:41:c1:a2:c6:14:64:87:90:d9:95:34:f5:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:54:07:D2:F7:FF:64:F3:06:70:F8:98:50:A5:8D:CF:D8:B9:95:36
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:49:2f:81:8e:74:98:75:85:d3:de:4e:16:ab:e0:58:e8:
b6:df:b6:2b:b1:83:0e:64:33:f6:d7:a5:47:55:0e:3c:af:b1:
51:b1:9e:ef:de:27:0a:88:9b:94:c7:d2:34:74:34:fd:21:19:
0b:83:f1:70:7b:14:d5:4f:1b:2c:cd:38:e1:48:c0:91:36:fb:
19:c6:b3:58:c1:f9:84:2f:bb:45:0b:6f:89:94:59:a2:6a:59:
4e:29:5a:a2:33:4e:90:ac:ff:27:27:1c:bc:d8:9d:c4:0c:03:
24:1e:ce:70:35:91:f4:73:b1:0e:53:ba:0c:73:93:32:32:87:
4b:01:e1:ad:ec:46:c3:30:15:36:4e:d6:8e:dd:98:98:85:95:
f1:54:7c:5a:39:09:d6:7c:38:1c:df:48:cc:bd:bb:2e:99:b9:
73:a6:74:c0:ff:8f:82:4a:7a:d3:5c:f1:1b:72:07:cd:a5:95:
80:94:51:37:68:30:78:e1:77:be:05:7e:0d:70:22:37:05:bb:
09:6e:55:a1:9c:40:5f:e1:b3:b2:06:aa:e7:7a:e9:53:cf:66:
b2:2a:05:a2:4b:fb:c7:41:cf:ba:9e:d0:da:65:a1:be:94:5e:
2c:1a:ba:a5:f6:43:44:8c:10:fc:14:1f:39:b1:cd:f7:9a:9a:
c0:70:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:11 2025 by rpki-client