Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: RuFbdpSKQbTLO+5cHHWjEdQIBRQxEy8JdfFnFfwhy2w=
Subject key identifier: B4:A1:AF:0E:17:FA:51:ED:B1:F7:37:F3:07:A1:C8:23:CB:3D:53:66
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 0194BCAA0343294FC912BCBF78AAA54B69E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: HXXBTE8dY9ro_gMVT2SU0KasMyM.roa (hash: kZXsTm2eaQSzsoHcmvoA080Abh4SX7WV3w9v9zFCDPQ=)
2: NzMhkwsGLiQZkMoD48sTWCLfAR8.roa (hash: ioMEWo1PIlZKwSVAPB0dgDE+e3+falYLZYlRGwJOPME=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: 0prWjJeEmMMYnMsS9OhBfzIDZDiU2FdgVx54NzNba7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:03:43:29:4f:c9:12:bc:bf:78:aa:a5:4b:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=b4a1af0e17fa51edb1f737f307a1c823cb3d5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:01:af:a1:55:90:70:c8:c6:a9:36:4b:72:
04:4e:c4:1d:af:42:43:5b:fc:6c:4f:a7:f2:17:89:
97:63:15:24:b4:af:34:8e:02:87:81:05:28:0f:9c:
ea:09:63:c2:c0:3c:89:c1:f5:17:b8:08:7d:fb:2a:
df:97:a9:8a:4e:1f:06:96:19:11:09:1f:c5:34:53:
ca:7e:e1:a3:c1:9e:bf:e1:65:e1:2a:88:cd:f9:60:
fd:1b:82:59:86:28:ef:d1:d8:5f:8b:51:bb:c3:ff:
d0:50:17:02:f3:97:56:63:9b:76:f7:fc:be:28:35:
9e:6a:ab:9b:45:62:4b:98:3e:b6:2a:b4:bd:81:59:
d3:dc:63:5c:fa:2c:78:4e:02:e7:52:11:5d:d3:18:
17:ae:57:e7:ee:42:41:0c:2d:53:76:f9:84:78:ba:
23:27:85:bb:c8:5f:7a:0c:29:29:4a:87:47:a1:60:
c1:fc:76:17:cf:16:39:72:fe:cf:b1:92:41:ee:7e:
c8:1f:68:77:f3:3f:ea:49:1a:10:41:d3:e1:a3:94:
76:f6:30:21:eb:f1:68:6e:aa:32:b6:c1:d6:71:6b:
36:ae:5f:4a:6e:c8:99:39:86:ea:db:ac:8e:66:c4:
45:26:bf:bb:94:30:e7:70:9b:60:f8:c0:b1:f3:a0:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A1:AF:0E:17:FA:51:ED:B1:F7:37:F3:07:A1:C8:23:CB:3D:53:66
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4c:6f:a0:19:81:9e:38:f4:b7:f7:e3:af:67:f2:30:38:5b:
5e:fb:e5:32:d3:d0:a8:b4:15:30:74:b0:55:14:23:91:7d:63:
a1:d2:8b:7d:7f:3c:4d:cb:b2:75:20:89:dc:b1:8b:42:57:a8:
fd:79:2a:86:25:ad:c1:62:7b:30:b4:62:00:5b:15:e6:0f:5b:
1a:5e:e3:07:39:cf:65:b8:6b:7a:8b:93:30:8e:2f:f7:dc:99:
f1:27:09:7f:db:8f:cd:c1:7b:19:69:9a:0e:9d:da:b3:21:b9:
7f:d5:17:21:1d:06:ed:80:06:a3:7c:05:aa:e7:41:15:e9:fb:
dc:56:6c:7c:3c:3e:ca:1d:49:47:00:76:0d:32:be:9f:8b:c0:
39:52:fd:e7:77:da:d0:6d:ad:54:7b:0a:9a:e7:93:a7:81:c2:
07:e8:15:33:fc:83:a1:79:02:ac:da:9e:1a:ac:8f:1b:44:63:
68:fc:7b:a6:e8:70:d6:c0:e0:56:b2:76:34:99:ed:60:df:72:
64:2b:26:88:a5:cf:4c:12:1f:5a:7e:95:59:48:fc:33:1b:9e:
fa:b8:e6:14:32:08:6d:ec:a7:50:ea:f9:af:f8:1b:40:76:82:
a9:95:3c:bd:f4:b4:79:d8:59:8c:a3:e6:57:cb:53:28:70:26:
44:aa:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:36 2025 by rpki-client