Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: 19g7QbUKAwpEA5lPRkPQ/wckuscwMNApuy3L+SXcVRc=
Subject key identifier: C7:10:D9:1A:08:D3:3E:95:34:5A:D2:9A:D2:73:AC:22:0D:37:7D:B3
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 0194BC3C806B62EA903DC8456A442BCF7CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: yFf7GDHITLzJv6mfYl8TQwPchIOpA1i2f7DJPv7mgzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:80:6b:62:ea:90:3d:c8:45:6a:44:2b:cf:7c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=c710d91a08d33e95345ad29ad273ac220d377db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:58:ee:3b:44:a0:36:c6:44:86:6b:4e:d8:
15:f8:29:8f:e4:98:32:a4:48:ef:c7:ef:d5:7d:c8:
e8:b5:43:07:24:1b:60:94:3d:eb:0d:41:62:7c:e2:
94:2b:2a:1f:6c:0d:75:b2:9f:be:92:05:82:d1:53:
75:28:53:9c:c2:28:b1:72:ba:07:d1:81:8b:d4:16:
41:98:fa:fd:5b:9b:af:15:c4:aa:59:ca:4c:45:e9:
65:f3:86:be:d7:b9:eb:aa:91:63:50:e3:87:27:bc:
74:89:98:73:af:63:fe:52:6f:d6:fd:70:2e:7b:ee:
7a:9d:84:0b:8f:cb:b8:51:b7:9f:03:f3:54:9c:31:
45:91:3b:6d:fe:18:96:d5:0b:5f:df:5c:95:c0:67:
f3:f5:8f:12:a6:55:cc:49:b3:02:13:4e:d0:a1:53:
ee:8d:89:b4:c3:f1:29:b7:58:12:26:a1:3b:46:ee:
89:95:7b:3e:4d:8f:4e:9f:28:64:ee:a8:bd:90:9b:
d0:88:ba:d1:05:a8:1a:fe:3c:f2:b0:7a:02:58:ca:
76:9c:cd:13:92:70:7e:93:07:29:65:ee:b9:c2:92:
e7:d9:39:e8:31:79:ac:a5:0a:0a:37:14:77:a0:8c:
7e:f4:36:16:23:6f:29:58:c1:f9:70:5a:05:18:ab:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:D9:1A:08:D3:3E:95:34:5A:D2:9A:D2:73:AC:22:0D:37:7D:B3
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2f:e1:b8:b2:c2:b5:ed:f5:46:5e:a3:8d:23:de:23:0d:f6:
23:65:d4:85:23:c3:9e:27:60:99:c7:80:35:7d:bd:e7:91:4c:
67:20:bd:64:fe:94:df:c1:c4:00:71:21:05:78:ba:18:81:46:
a2:a8:31:c5:10:a0:8d:27:e3:3d:8b:ed:84:99:d3:79:f4:c1:
76:2e:4f:83:10:8d:89:3c:b9:4a:23:e0:5b:c9:33:d0:90:ec:
c6:28:7e:8d:b0:18:43:56:ce:51:73:6b:b8:c5:cb:07:48:76:
7b:d3:01:d1:3b:b4:ee:27:75:62:86:a4:a2:d3:25:54:44:8e:
14:ce:78:86:ca:42:aa:43:63:7d:a8:ef:08:6c:68:26:2b:3e:
0c:93:b7:98:ed:6c:f4:49:92:e2:e7:d4:da:ec:de:4c:96:59:
8f:91:b2:c2:85:06:ca:4f:6c:2d:b5:fd:8d:47:e3:3b:a1:8d:
13:06:48:d6:88:97:a2:99:65:d0:7a:f5:0e:af:8a:d7:4d:ec:
73:25:8a:a6:4c:e1:65:95:6e:ce:2c:9d:ef:39:2f:a9:4a:af:
22:34:2f:39:39:64:3a:a1:f6:5a:7e:f7:9b:f7:29:f1:be:67:
56:9c:b7:66:d5:2c:17:f8:d5:39:b0:a9:23:b8:f7:b0:87:df:
5e:96:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:27 2025 by rpki-client