Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier: 2zT558X5plQncFlYF9c5KY+ZO0R8P9TrPGNSrtJH4A4=
Subject key identifier: 81:69:42:21:E6:91:10:76:54:DE:96:AF:96:4C:84:1F:3A:2F:43:E4
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial: 0194BCAA1A17235A1D4867182E60EC60E3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number: 0DAA
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=)
2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: W172+jFcZxQMqDPMmzTB4XTnJdCaxsfAZp/UvhjBe18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1a:17:23:5a:1d:48:67:18:2e:60:ec:60:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=81694221e691107654de96af964c841f3a2f43e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:1a:9a:3e:1e:0f:a7:42:c0:18:63:19:2c:
53:2f:30:6e:77:b9:85:d6:de:cc:36:f8:c2:a9:03:
ed:54:f1:e4:ac:ee:fe:c4:4e:42:bb:98:b1:d2:4a:
c4:aa:d8:3e:9a:cf:41:97:44:0c:2f:d1:24:d7:ae:
46:28:97:9a:0c:79:c1:9d:41:6b:93:bc:ac:ba:23:
fd:dd:d2:7e:d6:ea:d4:7b:7c:28:83:89:95:67:58:
47:54:da:cb:dc:7c:df:5a:7f:9e:57:1b:7a:04:a5:
12:b8:0e:b9:44:a9:28:de:f3:60:16:39:20:7a:72:
da:b0:5f:f0:e0:45:a7:6a:c8:96:f9:31:61:25:86:
e6:d9:11:62:cf:5c:a0:2d:f3:1f:e3:a0:7e:2a:76:
aa:5b:2f:80:23:ba:05:c1:c3:08:29:5f:fe:d3:ea:
87:2c:c5:86:a5:77:ba:76:ec:f7:cf:50:55:f7:ff:
71:95:60:ac:ed:a5:11:a8:4b:ab:92:17:d2:ac:c8:
04:17:a7:77:d4:01:d4:54:16:14:99:9f:ae:04:41:
3d:8f:11:3d:40:c3:ee:0b:a1:98:83:49:e4:02:7f:
fd:a5:9c:1d:ae:4f:53:60:b0:cf:1c:a6:ad:8c:54:
b5:b9:11:91:e3:7e:55:9d:ac:14:1a:e7:51:bf:74:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:42:21:E6:91:10:76:54:DE:96:AF:96:4C:84:1F:3A:2F:43:E4
X509v3 Authority Key Identifier:
keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:3c:64:ff:0d:84:ee:1b:89:fd:3e:bf:ba:2c:49:26:b8:
10:0c:7d:93:dc:b9:60:21:4a:b9:df:01:a9:e6:32:6a:ae:40:
95:2d:8c:a3:83:28:88:46:f6:2b:72:72:10:b5:46:d9:d2:aa:
63:9e:17:1f:e1:f2:5d:31:db:45:15:20:d2:bc:75:0f:da:d5:
ee:c4:39:0d:0d:53:fe:3f:46:e6:f4:d7:ed:24:ac:6b:23:1a:
66:56:c9:e4:19:ab:60:66:75:0a:b9:2e:b7:37:6b:08:21:01:
41:b3:47:0e:f6:2f:c3:6d:12:04:f7:4f:e9:21:24:c1:14:36:
be:87:7e:4a:70:5a:15:0f:14:e8:55:21:cf:03:1a:dc:df:65:
3e:7a:5f:48:12:51:ca:7e:e8:cf:b7:a2:02:fd:9e:6a:bf:27:
97:fb:9f:1b:99:e9:c2:5a:f8:4d:02:d0:81:29:b4:5a:ed:f8:
0d:fb:5f:a9:c7:08:a3:ac:52:aa:36:0a:d8:2f:b6:91:69:24:
08:d9:7d:95:f1:f0:d2:29:be:7f:d3:f2:ab:22:6f:5b:2e:1f:
4b:6c:d4:77:ef:f3:ab:5e:66:52:f4:aa:a6:99:5b:71:c7:bd:
06:0d:ee:fe:59:e2:40:98:75:c1:56:36:81:9d:c2:2b:13:7e:
e8:7a:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:02 2025 by rpki-client