Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: N6KQyoJJh0lhaRodET7bRiScZDmgnUkK1OMS0tIk55Y=
Subject key identifier: 60:35:B2:11:4D:C8:76:48:2A:32:CF:E4:8E:56:5D:C8:8B:66:83:49
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 0194BC3C02182465C974E16DBE6273AD7433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 09BF
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: 91ePmC7gbEvVirxAfPf9tWe3W9bNEElOk8a5qK2mJTo=)
2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:18:24:65:c9:74:e1:6d:be:62:73:ad:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=6035b2114dc876482a32cfe48e565dc88b668349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:88:1e:50:1a:bd:90:dd:31:70:12:5a:89:
4a:b1:50:5a:a1:6c:e0:7c:34:79:3b:df:a8:d9:40:
34:61:9a:10:d5:4e:b0:8b:a4:53:1d:c0:b4:36:c6:
78:14:fe:c0:df:94:b5:1f:74:f4:da:6a:23:9b:6c:
fd:94:34:4a:e5:6e:71:5b:23:22:57:ad:e3:27:24:
48:ce:d4:85:4f:4a:97:23:5d:44:50:52:97:b9:51:
ca:78:16:df:4f:b5:d9:18:8f:65:ac:9f:05:02:9c:
51:6c:08:58:78:e9:05:10:d0:25:7f:2a:0e:3f:a5:
ef:56:5c:ed:ad:a0:41:44:1d:e2:31:bf:1b:9b:07:
a5:fe:ba:93:cf:c0:bf:1a:e4:b1:3c:2c:09:a8:2b:
74:1f:43:d7:90:ba:14:c6:3c:58:9b:71:79:e6:c2:
29:0a:3a:e9:f2:fb:2e:40:e4:03:89:be:6f:ea:0c:
e7:5d:52:91:57:b5:0c:7b:20:93:de:23:fa:07:9a:
f9:06:62:3b:76:81:fe:c2:60:71:d2:88:39:08:ef:
16:d4:5d:4b:ca:0e:c1:88:c8:7e:72:02:4f:76:3c:
d2:d5:50:c8:19:5a:2f:44:b1:84:ac:f6:27:a8:71:
88:bf:83:5a:19:f1:66:6c:c3:26:1a:9b:54:52:9f:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:B2:11:4D:C8:76:48:2A:32:CF:E4:8E:56:5D:C8:8B:66:83:49
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:14:3e:e6:f2:44:9e:f9:b0:4d:35:e3:74:2b:87:4c:e5:f8:
04:bb:db:44:ee:1c:f3:fe:db:26:4e:51:d4:cc:10:1f:f4:e7:
95:bc:2b:95:a3:52:9b:c9:1e:c6:7b:19:38:a0:90:23:0e:22:
66:42:2a:b8:a5:74:00:0a:f3:17:a4:50:ab:5f:ab:da:1c:1e:
90:68:51:6a:b8:97:04:5f:a2:ea:f0:6b:41:76:f7:dd:44:b4:
42:69:ff:bb:57:f0:55:5e:4b:b4:f5:f5:9c:01:c6:69:f8:53:
6a:13:83:6a:cd:9c:74:f6:5d:df:37:48:bc:12:1c:97:47:a6:
f9:1d:19:01:23:df:0c:dc:44:c5:be:aa:1c:1f:94:1e:81:b0:
ce:3e:0a:bd:2f:74:31:ce:37:ee:ae:29:dc:77:2e:68:fe:1b:
d6:dd:7c:8f:bd:10:17:a8:11:78:b5:c9:8d:fe:c0:70:02:2f:
55:4b:c1:2a:8f:8e:52:8a:cc:6b:b5:72:bf:aa:4b:86:43:b9:
08:31:1c:74:4f:4d:ba:4d:25:cf:b1:ba:26:2d:12:39:31:d0:
1a:20:ed:ce:47:4c:13:3c:60:e4:9d:54:d5:b9:ac:15:4e:4c:
e9:aa:dc:58:92:63:63:a3:8e:1e:4f:a8:2a:60:2c:a7:3f:39:
d0:c6:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:48 2025 by rpki-client