Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: 6o7dz+P/bdINog8he4IodElTWH2WrMtgN9QY+ZUeUOM=
Subject key identifier: DC:4D:70:20:9D:5F:DA:8A:60:4E:C0:74:7A:DB:88:69:54:BF:5D:41
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 0194BC04FCADDCF9E3C6EA9E0A43DB16B827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1086
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: bLqLVIeCvWMBdNcBxNrAKnViSlCYFIQzlPttwAsJcIo=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:ad:dc:f9:e3:c6:ea:9e:0a:43:db:16:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=dc4d70209d5fda8a604ec0747adb886954bf5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:1d:94:0a:81:01:74:c0:28:db:8e:4e:d0:
39:af:38:01:c4:8a:47:02:d1:95:b6:b9:e3:39:76:
00:0a:ec:1e:7a:6b:50:dc:2f:a9:f1:36:42:9d:3e:
81:88:2c:8a:b7:8f:a2:01:45:a3:d9:28:84:43:2b:
0c:65:6f:55:09:f9:68:2f:e0:4c:39:2b:b5:20:82:
e3:1a:3f:32:9a:80:28:cf:de:47:3c:1f:3c:97:e9:
c6:2f:17:bf:07:3f:3a:3c:25:3d:1b:1a:d7:0c:30:
7c:06:71:8f:95:29:77:be:93:3d:65:16:2a:97:36:
dd:c4:91:6f:66:1c:24:ee:64:4a:58:d6:de:c2:8c:
98:65:70:7e:e5:2b:98:64:01:58:29:f3:ea:12:d3:
3d:b9:f4:22:77:53:75:73:b6:e0:c4:34:2b:e2:7a:
12:2c:eb:fd:74:29:9b:90:4f:83:58:92:11:7e:c5:
a8:48:f3:bc:c3:f5:40:0d:f1:d3:fb:79:e2:ca:ab:
1e:b5:c6:cb:43:68:ad:17:79:d6:ce:60:ac:0c:8a:
a1:f4:26:d0:bd:3c:b4:64:2e:3b:2b:5e:73:b4:7e:
0c:95:9a:20:0f:55:08:66:2d:c4:d9:7a:13:ac:9b:
43:1a:2d:96:fc:3d:cf:5a:d6:10:22:9f:73:03:e2:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:70:20:9D:5F:DA:8A:60:4E:C0:74:7A:DB:88:69:54:BF:5D:41
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:61:48:3a:63:1c:ca:4e:2c:7f:29:60:ef:d2:aa:2f:e6:91:
f5:2a:04:d0:82:59:ea:26:b0:75:5a:9d:69:d4:e3:1b:d3:c7:
be:e4:0b:69:77:5b:dd:80:be:54:ad:3e:dc:30:75:04:97:df:
d7:ee:5b:79:22:30:12:fa:b0:06:13:a6:5c:79:8c:65:f4:a2:
c9:b9:7c:33:32:01:22:fe:85:be:ce:0a:35:42:48:fd:f6:28:
90:42:dd:48:be:c3:de:15:e4:1b:e7:31:f1:db:64:4c:57:e1:
66:17:ea:55:3c:a8:ba:96:6f:d9:d1:e3:0e:a9:0d:c2:f4:5a:
c2:86:0b:4c:db:32:7b:78:23:89:2b:5e:38:a9:6f:36:f9:19:
9c:81:e3:25:2c:61:65:55:dc:27:15:68:6e:27:c9:7e:2c:0e:
8d:52:5e:9a:78:3e:e3:34:ad:79:72:ec:9a:56:86:6e:e0:65:
3f:30:76:a7:bc:13:73:ae:db:da:9a:65:ab:84:75:2d:81:6b:
4b:77:51:cb:18:12:0b:e9:2e:ce:df:ff:2f:55:32:0e:0b:2f:
e9:27:f2:8a:2b:67:4f:c7:8c:d6:c3:db:36:21:08:af:86:1d:
61:8b:10:30:fc:54:77:37:38:37:6e:9c:a0:93:f8:f4:36:7c:
55:ca:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:53 2025 by rpki-client