Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: 6OMTTsytaR6hFKlLymPfOsn8lutW3/GkSJDbQI6Vv68=
Subject key identifier: 79:42:47:46:C4:78:02:B1:F4:83:89:72:AE:6E:99:78:3F:AF:81:88
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 0194BC73167493B3264F08D31B5100E3873C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 0214
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: S6jy1kP1ZTilie0aZ5NlatnCcmpfKSpkeV2X69FDZNw=)
2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:74:93:b3:26:4f:08:d3:1b:51:00:e3:87:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=79424746c47802b1f4838972ae6e99783faf8188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:6f:e1:90:69:91:96:b4:fc:28:12:9e:b8:
40:f2:9b:04:31:27:6f:36:81:dd:a8:60:3e:3e:db:
f9:36:a2:75:50:f8:49:34:66:a0:ac:ca:35:b4:42:
ca:bf:ef:7e:b1:b4:3c:69:fd:6f:f3:05:73:93:db:
ac:b4:4c:b7:1f:6f:b2:34:04:0e:33:c3:ea:36:49:
9b:f1:ee:92:e5:f3:d6:b3:03:cc:f4:c0:ae:1a:4b:
78:84:50:09:2d:4d:8f:af:4a:56:20:a7:3b:02:9a:
ff:34:fb:63:ff:a5:36:89:0b:46:5a:93:f1:9a:eb:
40:b0:06:f4:07:fc:58:cb:d3:33:fa:79:02:33:b7:
cd:3e:56:f6:07:d1:2a:10:29:a4:55:ab:70:31:c6:
56:34:80:71:79:8b:2c:ff:48:ed:fd:0b:76:7d:55:
d4:3e:70:29:2e:91:7e:ea:30:2e:17:1c:f3:68:6d:
40:a5:f2:cd:d4:d9:41:ec:a6:20:69:db:3e:d8:5c:
5c:1e:57:b5:cc:e4:81:05:a8:8c:f2:ef:8f:62:b7:
f5:ed:9e:ae:e4:e4:c7:cf:83:66:1b:40:44:d6:31:
a0:b6:69:b4:0d:de:4b:d9:e1:54:64:0d:9a:53:5d:
dd:8d:0e:ba:df:81:79:ff:92:d0:b2:ae:56:15:c7:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:47:46:C4:78:02:B1:F4:83:89:72:AE:6E:99:78:3F:AF:81:88
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:fe:d4:f4:d9:e7:a1:d7:b4:ed:6c:b4:eb:e0:59:1d:9b:
e0:9f:5c:e0:51:99:35:2b:cd:08:df:11:b5:dc:c3:dd:24:14:
22:70:09:99:7b:ec:2f:f1:9e:49:49:90:38:71:73:69:9a:8d:
4a:63:e3:fd:50:12:16:6d:76:35:98:36:2b:5f:2a:0a:bb:d7:
86:f4:d0:fb:0d:7a:ce:bd:e9:4e:37:0d:74:b5:44:ab:89:f4:
b3:e0:d5:37:18:86:38:0c:50:76:e4:5b:04:f7:57:6c:69:61:
b8:75:82:24:96:f2:97:74:1f:3c:cb:ab:02:76:a4:8c:dc:d9:
dd:8d:e6:34:e4:d0:2d:5d:45:96:21:6f:e0:41:02:ea:26:fa:
c7:92:67:d5:6b:db:b2:fa:a7:f7:d1:38:80:66:97:8e:c6:f6:
54:ef:f2:dd:cf:01:aa:eb:0e:2f:36:27:7b:24:93:d9:6a:3a:
5a:20:44:34:01:d2:34:a8:0a:4c:73:d2:87:58:cc:14:c8:9f:
6d:49:6c:82:5d:d5:21:10:e7:51:89:64:36:be:83:c2:2c:58:
9a:50:92:de:55:85:e8:71:f7:b0:ae:b0:aa:a0:40:0e:ba:f2:
15:68:7e:e5:8b:84:e0:6c:7a:e8:f1:99:b7:87:eb:93:5e:d2:
0f:61:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:29:25 2025 by rpki-client