Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier: om5xEtqyGJ7GdkvWEsV9HfvGiYxvG8wPCCbUN3aakBg=
Subject key identifier: C2:49:99:96:7D:C2:30:B8:E1:82:F5:21:08:00:8F:A7:9F:38:D2:0B
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial: 0194BCAA38464268EAB8CF6B51D60654741D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: Ciq9IWXs1tLz//r5r+bP0MwMsnL8Ha3FutZwo7+/wRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:46:42:68:ea:b8:cf:6b:51:d6:06:54:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=c24999967dc230b8e182f52108008fa79f38d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:f1:8b:2c:7f:e8:d9:4a:4f:9e:e4:38:8a:
ee:49:f7:96:d2:78:4c:04:70:d0:02:91:1a:e5:6d:
e9:f3:c1:f3:15:58:1c:61:2e:db:e4:d8:07:ef:e5:
92:73:38:12:29:2e:11:7f:2e:65:11:85:ea:fa:4b:
4d:80:28:94:c7:0e:e7:6a:4a:37:87:fc:25:eb:6b:
07:45:0f:cb:8c:b7:16:d4:30:96:ba:91:7a:81:e1:
e6:bc:12:74:78:4e:0b:d1:38:84:87:c0:e9:91:ca:
93:aa:34:0e:98:65:d2:ea:01:94:af:f4:78:0a:ad:
1c:52:18:07:b5:18:f3:8d:fe:64:ea:ba:a1:7a:ed:
51:08:a1:12:2e:2a:2e:d7:c0:13:9f:f7:f0:a8:7a:
fd:42:7d:d2:7c:ae:e5:76:ad:8c:8d:ad:53:69:5f:
90:7b:5f:5d:36:fc:94:8f:5e:4b:65:d2:f9:18:06:
6e:74:01:42:a0:6e:b0:00:71:8d:54:71:4b:c9:a7:
9f:53:d5:d7:d3:f8:c4:d2:19:76:c6:49:fd:aa:45:
e4:a7:a3:69:18:9e:00:52:4c:cc:71:df:d7:a2:82:
54:67:ea:b8:51:b9:5b:fa:a5:d8:e8:2f:a8:a2:35:
22:72:e1:f3:25:f2:75:31:59:47:be:85:cb:df:8e:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:99:96:7D:C2:30:B8:E1:82:F5:21:08:00:8F:A7:9F:38:D2:0B
X509v3 Authority Key Identifier:
keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d2:dd:cd:da:05:bb:d5:c1:e1:bc:2e:42:e1:3d:b5:7d:49:
65:1a:16:8c:49:cb:dd:f5:e1:c4:24:f0:96:31:b2:15:01:7a:
b1:e0:05:f9:1e:b5:db:21:ef:4b:60:aa:97:1d:1d:e7:ca:93:
bf:9b:fd:aa:9e:57:ee:09:8d:8f:9b:d7:f6:ae:c3:22:d1:85:
59:30:6a:fc:bd:95:f5:5b:9c:0e:01:f3:2c:96:b1:93:8a:9a:
45:f0:49:0c:da:19:e3:c4:cc:bf:67:ce:ba:c4:bc:50:8b:62:
aa:40:23:41:ce:2d:c6:32:7b:53:9f:aa:be:24:61:cc:ac:1d:
fa:44:b3:79:f1:90:1c:6b:dd:f4:04:f6:fb:1f:23:6c:40:e1:
7f:21:a7:33:9c:86:a5:fa:89:33:67:a4:dd:ee:be:1a:da:d7:
f7:6d:6d:e9:90:68:1d:c6:fc:3f:7b:12:89:1e:0b:cd:00:c7:
8d:ff:4b:49:e2:a2:80:6e:74:b3:79:bf:b8:6d:4f:12:80:fb:
91:e0:93:96:d0:48:5c:2b:3d:0c:c0:aa:00:ef:c4:f9:cd:1b:
f2:39:f3:ef:2e:5b:b7:4f:8f:ea:5e:cb:3b:05:fc:6b:43:6b:
e6:38:ae:58:99:8e:41:88:e6:51:26:83:f6:df:e2:53:f3:40:
f2:36:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:48 2025 by rpki-client