
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: OxrJTXMYYj7vljQt1STsE64do3nPrfxFfbodTYkt2TE=
Subject key identifier: 4F:8C:23:D0:B3:C6:21:1A:56:BF:9B:4D:22:E1:2F:11:52:9E:DD:B5
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 0194BCE077263A3AF60C5744AF8D537BCCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 0366
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: X0mHupw3O9myeLmclyUM/qAdkdezs6qjwYxYTuxPPXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:26:3a:3a:f6:0c:57:44:af:8d:53:7b:cc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=4f8c23d0b3c6211a56bf9b4d22e12f11529eddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:c1:e5:09:b6:46:46:b4:c6:b8:db:8c:76:
1b:95:92:b6:59:cf:f4:c7:48:c3:ac:2a:f6:1e:6c:
d0:92:e7:16:c4:ed:1f:b1:3a:55:62:8a:e0:fc:c5:
42:95:31:42:0b:45:6e:77:58:c1:47:5e:2e:cb:84:
ea:ed:d3:9d:9a:4e:f1:dd:f8:1c:0c:ab:56:8c:cd:
58:b3:5b:8d:88:4b:72:33:5d:c5:ae:ff:dd:4a:15:
d5:e9:07:c5:45:7a:57:e1:5c:37:59:94:38:27:e2:
b0:bb:2e:41:47:dc:6e:43:f1:d5:d4:9b:5a:c2:25:
41:aa:7a:7c:d0:59:e2:d6:c5:25:b6:3e:bc:1c:2e:
57:65:88:6f:cd:4a:58:39:c2:8f:1c:ca:1a:bf:78:
ed:90:20:1a:25:08:2a:25:e1:ed:8e:3a:50:67:9f:
b5:c1:a1:65:54:cf:0d:ef:5f:14:ec:9b:03:58:c5:
6b:ff:ae:06:2d:9c:d9:6b:59:98:67:f2:78:93:8b:
ec:cf:59:b2:4a:61:54:5d:68:34:74:ef:c1:de:32:
ea:4b:28:4c:7c:a5:4a:45:92:4e:21:32:4b:45:5a:
a5:f1:c2:32:eb:7d:ca:92:bb:79:a5:3e:86:30:90:
3b:35:86:83:28:81:8f:7b:35:4f:3b:dc:d3:ad:f8:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:23:D0:B3:C6:21:1A:56:BF:9B:4D:22:E1:2F:11:52:9E:DD:B5
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:2a:51:2e:6c:33:a7:95:00:39:04:ec:0d:df:fc:6f:dd:
27:c3:44:c6:a9:df:d9:03:7f:0f:cb:43:06:51:81:56:47:70:
52:35:c9:2e:52:67:4a:e3:4c:39:12:31:e0:da:b9:e0:b5:b5:
93:15:ec:34:ff:c4:28:6f:c9:d2:f7:04:73:84:ab:d2:ac:20:
3e:1a:32:9e:61:f3:cc:45:9c:c8:1d:a1:e5:48:0a:42:c9:92:
7e:84:6a:60:e7:bf:39:46:80:f1:8c:ad:80:15:f1:a0:de:3d:
a6:42:a2:0f:58:a8:eb:2a:e3:95:3c:6a:c0:1c:05:f1:92:9e:
c7:e0:84:9e:65:67:c6:e5:4e:13:2b:a1:4c:9e:61:7b:d8:5e:
4d:51:ff:77:98:4d:47:4c:23:9d:74:48:a4:a9:87:f8:ba:e9:
ca:f3:d9:0c:42:05:84:3d:21:e8:cb:bb:68:1f:ac:c3:3c:a0:
76:78:23:c7:b0:6e:d0:f8:9c:82:6b:f2:04:59:ce:17:bb:32:
c8:31:21:0e:f8:5b:f9:27:fe:10:ed:45:19:a4:5a:a8:b2:92:
88:fc:d3:a3:3a:21:0a:1a:80:a2:39:7c:d5:0c:0e:43:12:5e:
43:60:01:21:ed:7e:41:64:2a:93:a6:68:b8:60:91:85:29:18:
24:47:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client