Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: jcvvzNjpfpH+3IZWtsdWHEpKJDWo2GOWpn+kuQW6Umc=
Subject key identifier: E1:13:1F:88:ED:6A:86:F5:DD:75:5E:70:F3:19:F9:3E:6A:47:DE:D9
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 0194BCE0AE8379AEC689F936A414C480AEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 072E
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: MkSasq/yC1IZiobyfOHwAkozJ76kOoz+wZWg3L0DhGE=)
2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:83:79:ae:c6:89:f9:36:a4:14:c4:80:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=e1131f88ed6a86f5dd755e70f319f93e6a47ded9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:8b:f3:9e:dc:ba:01:5a:fe:cd:b3:37:2a:
d2:fc:f7:bc:26:33:6e:59:df:0b:d8:b7:0a:f9:8c:
6d:c1:3f:b2:f3:cb:92:3e:25:a6:b2:9c:11:1b:5e:
5a:5b:c9:3c:63:29:f5:04:8a:16:71:86:ce:1d:8a:
7f:b5:21:9c:80:06:d5:07:bd:51:9e:b9:c4:29:d6:
42:a1:f6:88:55:3c:44:d3:c8:bb:d9:81:dc:f3:64:
69:82:a8:0e:9e:ce:33:0c:50:01:7f:9c:ad:34:bb:
67:f3:e5:be:fd:a7:0c:88:1c:78:f6:f6:ec:39:39:
9c:2b:9d:57:30:11:8b:72:0c:98:24:4d:dd:5f:fa:
3a:25:b8:0b:c4:3f:e6:76:96:59:6a:f7:25:d8:54:
c6:23:11:db:cf:16:5f:fd:b6:0f:80:67:b6:b9:35:
f8:2c:3c:99:ec:a6:67:75:01:12:0b:78:4b:14:d4:
b2:ca:25:c8:3a:ee:07:a9:eb:e0:01:37:4d:74:35:
42:14:9b:01:55:32:99:88:8a:b0:4d:04:8e:bb:ca:
8e:65:8e:69:b5:63:5b:53:17:92:78:87:5e:92:1d:
f2:c1:de:0b:6a:1e:84:de:6f:57:ec:d5:f1:e4:0c:
50:ce:cd:2b:7f:e0:4c:2d:a1:3a:27:3b:d3:af:75:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:1F:88:ED:6A:86:F5:DD:75:5E:70:F3:19:F9:3E:6A:47:DE:D9
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ac:37:43:6d:e6:d8:6f:a1:7d:24:c4:ef:96:91:eb:56:13:
00:d2:49:fa:1e:8c:85:22:69:fb:d2:de:9c:70:30:72:f5:91:
a2:8b:db:85:11:c4:43:f5:fa:1a:78:4c:80:52:81:7c:c7:25:
25:c8:36:4d:32:8a:e2:01:92:f4:5d:e7:7e:1e:2a:b2:e4:2e:
72:38:5b:ce:99:c5:37:65:17:4b:be:bd:4f:b4:16:43:6d:02:
58:35:d0:6b:46:77:9c:32:ee:7f:3c:a3:87:f3:5b:2f:62:e9:
20:69:7f:3c:d8:d8:f9:00:c0:3e:11:92:f7:d8:8d:6c:8e:83:
aa:80:81:7c:2a:dc:1e:40:9b:23:a2:91:fd:b3:3c:d8:dd:7d:
9e:d2:a6:16:da:5a:d5:19:b7:ee:6b:ef:86:d8:67:db:b3:8f:
7d:13:ba:82:bd:b9:a4:78:08:5b:70:47:99:4e:cf:99:cd:a0:
34:38:60:0a:ef:09:87:4b:78:1a:8c:d9:91:46:11:78:05:ee:
d1:0e:a6:f4:12:20:23:de:16:36:d2:56:12:ad:3b:33:79:c6:
cf:fa:86:04:e1:6f:87:d7:e1:56:64:9a:cc:7f:0c:67:f2:ff:
0d:c5:b7:69:7b:a0:d8:cb:ec:aa:57:08:ad:e8:de:91:45:51:
84:ff:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:27 2025 by rpki-client