Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier: bQyQrzIBbomGSrrXMESsRlExrphCC8gP03WejZlZQtQ=
Subject key identifier: 92:F4:E4:F6:94:46:B7:FA:56:AE:85:21:BF:36:1B:2E:0F:D5:F6:E7
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 0194BC3C860780F399DB043D24137465C29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number: 025E
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: HE9/q7GUTY0qXsR0v2c7eGfzW34kBVktjlr+Dd0itME=)
2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:07:80:f3:99:db:04:3d:24:13:74:65:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=92f4e4f69446b7fa56ae8521bf361b2e0fd5f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:8f:bd:c5:eb:95:af:7b:b7:7f:07:9f:fd:
b3:46:19:d3:b9:86:e9:1f:22:4e:bf:27:b8:6d:b5:
88:50:c8:35:b5:04:0e:ca:24:26:d4:c1:1a:9c:23:
f7:c6:c1:c7:34:52:60:6a:90:e5:69:14:d5:68:a5:
fe:cd:81:3f:c8:dc:af:20:b0:2e:19:ff:79:cf:24:
7f:70:1c:84:e8:fb:ec:47:d5:71:f9:ae:e7:c6:ba:
d0:f4:ff:cf:03:b0:b1:50:8c:27:c3:d8:47:44:93:
ce:9c:e5:c5:04:04:10:a8:a3:bb:cb:b9:ce:ce:01:
f6:26:65:fb:03:7d:10:47:ee:c3:e6:20:09:5b:fd:
3b:98:cc:7a:77:6e:f9:da:fc:94:0d:00:e9:88:1e:
7f:c2:19:4a:b9:ed:0b:2f:8e:b1:02:10:8d:c1:f8:
26:01:88:57:2c:f1:da:38:b7:4d:ed:b4:8d:02:5b:
9d:54:c1:b2:2e:5c:c6:49:ed:74:5c:6c:bb:cd:00:
50:ae:3b:f6:ef:9c:b4:c8:5e:7c:1d:a9:58:a4:14:
28:b5:bc:d1:e1:35:d3:46:9a:67:08:ff:a3:79:8e:
17:7f:39:fd:17:65:a6:51:90:b3:2e:d0:53:1f:cd:
6c:98:01:c8:02:26:88:94:31:52:de:4c:0a:12:82:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:E4:F6:94:46:B7:FA:56:AE:85:21:BF:36:1B:2E:0F:D5:F6:E7
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b6:d5:b9:f8:72:3b:b2:be:6a:3b:24:82:6b:c4:f8:76:47:
f3:67:51:57:43:5b:b5:1b:be:59:8a:eb:ad:6e:07:ca:37:66:
f7:d8:9f:f1:03:97:0a:8e:c2:31:78:7b:a5:a6:ab:c0:71:f8:
dd:3a:8e:c5:3e:46:71:51:83:9d:41:0a:2e:03:51:fa:45:c9:
83:4e:7e:f8:0e:8d:5a:f8:ac:2a:2a:3c:dd:e2:07:3e:f7:a8:
0e:23:9c:7b:48:1c:d0:86:07:00:f2:8e:ff:b9:4c:ea:47:5c:
5e:7b:fa:42:54:14:d0:65:48:f7:d1:75:13:00:e1:a0:e7:73:
6f:88:36:79:69:93:de:d0:a2:6d:99:fa:6f:8f:17:c7:95:8a:
46:b9:b2:c9:5a:16:2e:e5:8b:35:66:e4:2d:4a:83:bd:70:db:
73:10:16:08:92:2f:d6:67:d2:90:4a:18:6d:9e:3f:3c:66:95:
7b:a4:42:80:3b:fd:f8:25:c7:3e:28:e0:15:df:44:de:9e:34:
af:86:d3:6d:92:e4:e0:43:88:f0:66:71:34:19:f0:e7:86:f7:
27:4c:af:af:c2:b3:e5:27:4b:65:74:77:00:7b:ca:84:3d:64:
33:79:ff:75:6f:3d:e1:bf:bc:2e:e8:c6:72:93:1c:dd:6a:01:
0d:b2:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:15 2025 by rpki-client