Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: VuQt2RwWNc1v6VTCuRoua782HpSGilbHucuL5RTyvXc=
Subject key identifier: 00:52:DA:62:1F:7F:26:E7:7D:DF:AA:14:54:D0:68:EB:86:A4:46:33
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 0194BCA974B753A48B4154487C33C7FAC892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0A1B
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: XVUABxBn//GsOUXSlPfxnlL63TWlDHcTWTn8V260mlA=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:74:b7:53:a4:8b:41:54:48:7c:33:c7:fa:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=0052da621f7f26e77ddfaa1454d068eb86a44633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:0c:85:0d:37:b4:9b:aa:c8:56:7f:8e:73:
9f:13:76:c1:f3:ea:40:1b:c0:2d:71:6b:02:09:e1:
79:f4:2a:66:36:89:07:93:19:6b:7c:8a:48:c3:e4:
29:2b:a7:cb:c6:9d:e4:40:c4:f6:e7:33:ea:58:a3:
42:ea:40:bd:87:af:c6:9a:70:a1:e7:07:3d:98:9f:
f7:71:c3:9a:5b:83:05:75:64:8c:0d:94:ac:0e:da:
6d:2f:fb:51:e3:a6:1e:1a:f1:84:42:31:16:b1:2b:
43:35:21:dc:86:ca:50:73:ab:40:ff:55:3f:a4:aa:
bb:62:be:57:2a:3a:a7:0a:06:81:f7:5e:46:ac:05:
ec:cb:dd:e8:64:8d:78:8b:09:e7:1f:cc:43:b5:74:
21:1e:8d:0e:c4:99:d6:a0:c2:d2:2e:3e:79:6e:5b:
a1:6b:d5:6e:07:1f:29:ba:c7:87:6f:ac:e3:03:59:
d3:54:f6:01:26:e6:a1:73:49:78:ff:33:0e:2b:59:
e6:c5:7a:5b:46:87:7b:dd:46:7b:74:12:39:a7:4e:
3f:bd:2d:91:2c:f4:6f:65:98:5a:9d:45:b6:86:9f:
00:fd:0b:c2:1b:64:f8:6d:41:bf:0c:ae:36:bc:e9:
82:c3:f6:5d:51:72:7b:6f:e9:05:40:f1:1b:4d:0c:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:DA:62:1F:7F:26:E7:7D:DF:AA:14:54:D0:68:EB:86:A4:46:33
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:85:e2:43:9e:79:06:5a:f4:3a:0b:94:80:58:a2:d4:5c:
c0:60:fb:7d:91:85:14:9c:70:46:6d:b1:30:50:d7:e1:6a:a4:
44:85:63:78:a6:fd:eb:dd:e7:e3:87:84:1d:84:8a:51:9c:ad:
15:ca:45:d0:2c:07:12:05:2e:b8:96:5f:c2:79:0b:a5:79:fa:
e4:2b:7c:04:40:da:b8:18:fa:6f:cd:13:f8:3e:f2:c1:f2:1d:
28:4d:9e:53:90:38:c2:c3:56:54:4d:11:d0:77:fa:e9:a0:85:
47:8f:5d:c3:38:d5:97:7b:70:fb:f1:48:d8:db:4d:a4:7c:be:
7d:93:e7:03:ae:8e:2e:01:db:43:95:3b:53:d8:57:45:6e:9e:
32:b5:3b:69:5a:c9:3c:fd:7d:c5:35:e7:e9:e8:74:7a:7a:4d:
b0:fa:33:34:c4:92:8c:1a:7c:c5:d0:59:f9:80:8d:22:28:b1:
08:0f:36:7e:38:90:8b:9c:a5:cb:b9:7a:6f:04:44:7a:75:f4:
c5:84:ce:f9:30:8b:f2:11:4e:65:d7:b2:1f:1d:ff:61:b6:42:
99:f5:9b:c0:ee:5f:96:f4:fa:1b:5b:af:c6:8d:37:0c:e5:0c:
db:2e:e3:ab:e0:82:c1:c2:8b:84:1f:ea:0c:cf:2a:4e:86:04:
a4:94:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:00 2025 by rpki-client