Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: KjYRMlqnsI1MLOuRc7pDTYnB/NIEW5DSZmtjhffBCMw=
Subject key identifier: CF:AB:22:67:A1:B1:95:BA:8D:90:99:D8:7E:3B:62:E8:FD:D3:FF:AE
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 0194BC72AE8A722968126B56242BCE7A4ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 113E
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: rvXrCcTX6YZoK09YcU9PutDBdfTttMOqDobuo3kKCoc=)
2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:8a:72:29:68:12:6b:56:24:2b:ce:7a:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=cfab2267a1b195ba8d9099d87e3b62e8fdd3ffae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:36:7e:80:c1:29:75:e1:c0:f5:ed:9b:54:
f7:99:88:7d:b8:26:4e:f1:1e:c9:42:b6:cf:c5:12:
71:50:ba:50:2a:76:c7:2e:3f:0f:70:7e:b3:d2:87:
7d:54:0b:d4:43:96:0e:e7:d9:7f:78:65:f6:da:77:
20:04:89:5d:d2:02:f1:fc:26:ef:a8:f6:de:80:ca:
f8:e2:ac:29:8f:6b:75:5a:89:31:c0:eb:17:db:aa:
8b:96:3a:96:aa:54:d9:07:b1:fd:a4:b4:85:72:5b:
55:31:e0:47:35:8d:c8:a9:a5:13:1d:1f:d6:04:9b:
7d:6e:ca:31:30:6b:21:f2:4e:bf:85:8a:69:f3:d0:
10:5f:a7:27:eb:48:23:3f:ce:f1:be:14:16:b3:ff:
c3:b1:c7:d0:56:e6:93:08:12:85:8e:1a:e2:78:d1:
81:d0:5d:6a:6b:aa:12:a8:4e:e5:a5:a9:30:41:c6:
d5:61:6f:1d:9e:fd:84:2a:f7:be:b9:38:3f:6d:8d:
7b:c9:6e:8b:e1:02:8c:19:74:fe:39:1e:dd:ae:d6:
24:4a:aa:9c:7b:62:d3:69:1f:82:50:09:5e:1b:1d:
3a:a7:bf:e2:5d:5f:27:70:e1:5b:e7:6f:e0:89:6f:
53:22:1e:3a:9c:75:69:b2:12:58:40:23:af:b0:7f:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:22:67:A1:B1:95:BA:8D:90:99:D8:7E:3B:62:E8:FD:D3:FF:AE
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8f:7b:d4:48:1f:9b:ce:1d:23:d0:a5:4b:ef:6f:e7:91:20:
f1:c8:50:66:79:ec:cd:00:42:07:b2:bf:3b:1e:02:ae:4f:b6:
d7:83:ef:41:a2:3a:fc:30:da:75:37:2d:8c:f5:12:56:b8:a2:
cc:bb:44:6e:e7:8a:15:eb:a6:01:63:5d:98:82:43:8a:58:f7:
41:d1:3a:51:86:72:e4:29:b1:35:51:70:e0:49:28:99:4a:6d:
a9:76:79:f8:5d:b6:0a:71:9c:a7:e2:00:9f:82:04:d7:48:3a:
e4:70:11:a2:96:34:4c:bf:4c:0d:52:0d:95:84:09:c4:fa:eb:
55:82:43:db:fb:e0:eb:1c:a5:22:58:51:44:2c:97:ee:d5:d5:
e4:ef:48:84:f0:4b:73:67:ff:0c:fd:db:ac:f3:f8:e2:a8:b7:
2e:6c:ce:af:fc:95:ef:34:29:27:1f:3b:1a:c5:49:22:2c:8b:
78:e4:23:2f:1e:a9:67:16:b0:6d:29:da:54:fa:12:01:8d:be:
52:fd:1c:3e:f3:41:a8:82:5d:cb:8a:8e:ed:82:dd:8d:c5:07:
26:57:a4:15:57:14:4f:67:71:16:2b:4d:01:98:de:aa:d8:ac:
09:c8:af:44:2b:45:73:fc:17:92:da:89:77:ad:32:4b:ee:b7:
54:43:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client