Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: zIjKfphJbOKqq+Dofp0SHIt+0jfjtOX2U2cEakLYuXU=
Subject key identifier: C1:C0:D9:77:6E:1F:2B:ED:44:26:26:D6:BA:AD:62:E8:C1:95:6F:42
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 0194BCA9ABDEEE952C1A0219DC5A461D1088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 0652
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: Xy65KIV_NEVfrg9kWKh_umkAkTo.roa (hash: SRp3l8epCPrax0SGbi3+isVpYkvIb03gV7zmhCc/X5E=)
2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: 0OslTti6HnNNMolYl5GVBPEn5Y+lhMahEmRvndm35pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:de:ee:95:2c:1a:02:19:dc:5a:46:1d:10:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=c1c0d9776e1f2bed442626d6baad62e8c1956f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:68:3e:43:39:70:18:7f:a6:1f:93:a4:5a:
ad:82:75:e4:a2:b2:de:9b:bb:07:9c:9e:7b:94:50:
fc:fc:c4:b9:ce:59:f8:e3:d2:05:18:4f:04:ae:4f:
a3:c2:60:09:03:18:0d:3f:43:16:02:63:56:ee:ce:
22:f4:20:b1:70:b7:47:cc:9f:c5:58:a7:16:1c:43:
72:56:64:95:0f:71:01:ce:94:15:15:f1:0f:62:bb:
dd:47:a9:9c:3a:c9:42:80:1c:fd:74:5c:ad:78:94:
11:20:b3:22:53:79:79:32:72:c5:86:f7:c0:29:93:
ea:5d:d7:91:ef:49:23:9b:8b:f6:8d:6a:8d:1c:cf:
82:f5:96:50:42:91:e6:65:41:2f:3a:23:12:56:e6:
1b:ff:af:9f:ca:3c:53:40:d5:75:88:5d:37:98:eb:
b0:2d:53:cd:ee:34:03:c5:1b:20:dc:86:58:ce:8e:
40:6b:76:98:05:c0:4c:23:33:2d:8d:f5:1a:aa:51:
20:99:08:18:7d:bd:62:a7:82:6f:b8:6b:8d:0f:71:
cf:9b:c9:ce:f9:01:e5:35:b3:44:e9:3a:88:d2:81:
2f:c3:cc:56:a1:92:08:86:28:11:27:2f:a9:ff:7a:
62:2a:a4:c8:0a:44:c7:ca:6e:69:7f:ec:af:cb:58:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:D9:77:6E:1F:2B:ED:44:26:26:D6:BA:AD:62:E8:C1:95:6F:42
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:94:2c:32:f3:11:84:21:b3:ce:96:38:49:d0:77:75:e3:
64:c7:48:a8:a3:72:3f:eb:6f:ea:1e:68:dc:40:a4:81:bb:a6:
2b:91:86:af:94:12:68:85:a8:75:6c:48:30:57:a1:23:dd:90:
24:9a:20:ed:b2:46:74:3b:7e:ad:ae:ec:c5:d1:9d:67:ab:f1:
9d:fb:f0:63:80:8e:0f:7a:5c:f9:c9:eb:55:db:f9:66:3b:06:
78:11:d7:ea:c0:9f:a6:1a:03:a8:1e:35:30:df:cd:d8:ee:30:
1f:bf:b8:76:d7:4e:eb:83:dd:4f:48:88:d8:f3:af:24:4a:85:
54:bf:c7:27:bb:18:a0:d5:c7:d8:14:df:68:d5:0f:16:b2:6b:
a8:73:7c:01:c7:65:d3:7c:fd:f7:39:82:1e:81:4b:26:dd:e3:
b4:8e:a4:ba:67:d0:4b:a8:11:71:99:87:4b:56:5a:f5:de:c7:
08:49:6f:38:59:ae:b0:90:82:92:7d:ce:62:eb:93:d5:89:0c:
d5:d0:3a:01:bf:69:ee:25:a1:04:cf:8c:82:ad:4f:41:d8:77:
6c:f5:14:6f:51:22:5c:70:37:8a:fc:1a:7f:cc:7a:8c:e9:3e:
99:7b:43:35:dd:ba:83:f1:3b:c1:f9:b3:74:61:86:98:56:5d:
7d:1e:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:15 2025 by rpki-client