Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: KyPXNts18S238gjzHoAMdYLG26YeCqilfjn6m5Hoik0=
Subject key identifier: A5:66:19:9F:17:5C:22:1F:DA:F5:99:88:43:92:49:67:15:89:C5:FC
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0194BCE06AEFEF1D10AFD4C5EA698C7E0B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 116E
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: JM0QcLsrwT_eugusMmdMbrHJgBU.roa (hash: k9PhP6FnC8suh0XvxnjFZIavQZ38oGedxbmkq9050Xw=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: NWXxsrUvoMmyWbV/7x6G5w9WW6d0sueLImZD7G9QoYM=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6a:ef:ef:1d:10:af:d4:c5:ea:69:8c:7e:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=a566199f175c221fdaf59988439249671589c5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:e5:2d:71:4b:31:6f:53:bd:f1:5f:d8:6d:
54:ed:28:f7:2f:18:45:05:42:ef:8f:39:3b:db:fe:
b2:76:57:59:38:88:f9:3d:3e:b1:c7:31:8b:91:7a:
88:07:ce:67:2c:56:02:22:43:be:d2:26:ed:2f:6a:
38:c6:df:0c:db:fd:6e:20:f2:5d:df:30:2e:83:06:
5b:a3:79:b5:a4:6d:21:a5:40:32:d6:9a:67:f9:02:
e0:0a:b2:82:d8:22:60:70:b9:80:69:2e:c4:7f:19:
52:54:63:1b:12:8c:5c:ca:29:8e:4e:00:95:11:84:
37:69:d7:37:19:fb:8b:e4:70:26:bf:3e:09:91:0f:
22:ac:26:34:ee:72:2d:11:e5:65:e9:ad:85:ca:02:
9b:2f:27:1d:44:86:0a:ac:de:13:66:a9:57:a4:f7:
61:7e:61:81:2f:aa:8f:83:4d:a4:7e:30:fc:27:ec:
eb:19:5f:fd:49:f6:77:8c:fc:85:eb:29:9a:b8:fa:
4e:85:45:b8:f5:4a:2d:4a:8d:55:d0:e1:cf:cb:71:
0f:b3:a4:13:28:56:19:08:01:59:ce:56:9a:0e:9b:
af:ba:8a:ff:3c:a4:ad:5c:02:bf:20:be:f0:14:98:
a1:04:89:ec:75:f1:ae:81:00:cb:45:b8:b9:7a:09:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:19:9F:17:5C:22:1F:DA:F5:99:88:43:92:49:67:15:89:C5:FC
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:47:e5:81:c2:7e:48:32:4a:59:cf:49:a0:61:96:12:83:
51:7e:a9:66:da:b8:58:08:3a:4f:e2:2f:b8:52:be:83:7f:1a:
d4:a6:9d:cf:05:39:48:6e:b8:32:b7:ed:67:82:42:92:6d:a8:
c1:83:b2:a1:60:13:57:04:6a:15:10:06:70:0a:09:7e:e9:6c:
5c:97:49:e3:bc:6f:aa:78:ad:21:a7:0f:3e:56:de:f6:f3:eb:
3f:0d:33:60:c5:23:a0:f4:22:7e:1b:59:cf:9d:7b:b4:63:7e:
ce:d2:14:93:b1:ca:8b:37:ab:06:d1:b1:dc:30:96:9b:24:c9:
63:93:2a:4b:5b:f7:91:36:08:31:c0:c5:9f:5f:10:8f:5f:d3:
45:5a:4a:2d:59:97:41:02:da:b7:9c:4d:27:6a:cf:37:e5:55:
df:dc:27:b2:38:75:19:6b:23:b0:dd:6c:20:be:cd:dd:2c:75:
2a:6b:dc:26:66:08:a2:4e:e0:f6:cd:32:7d:86:15:28:49:99:
1e:ca:eb:16:f0:6c:35:94:8d:d8:58:fd:c8:5e:b1:98:aa:f8:
f8:f8:af:b9:8f:a7:ee:ed:31:94:7e:fc:48:72:09:80:3f:47:
87:67:7e:2e:5d:fb:45:0f:38:c9:85:31:0b:a6:17:5e:a6:bb:
cc:aa:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:44 2025 by rpki-client