Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: LmOSRiSC/wfQfoTJllldbcSSauzohL2CHWapb4CdWwk=
Subject key identifier: 18:CF:66:52:1D:CF:90:63:F6:D7:3C:B0:B2:C8:BB:39:2B:F1:7C:9B
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0194BBCE71A79FC7A8D20C632F31721740F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 0EF7
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: W2pkAuj5aYPzm/+AzP2wQuGTE0m29y2IDkCRCC38Do0=)
3: rcHTg1QhpBFCr8a3HXWqqEZBJJY.roa (hash: rlk4yXRWrJ2y49WwPYEU1ISVMmHCd+nfLLajmeW/5+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:a7:9f:c7:a8:d2:0c:63:2f:31:72:17:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=18cf66521dcf9063f6d73cb0b2c8bb392bf17c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:ab:8e:4e:9b:29:b5:97:d2:23:98:ed:4b:
2d:76:98:ff:c1:88:1b:8a:fe:d2:58:e7:b9:87:ae:
19:e4:70:bf:a6:16:18:2e:9f:58:b4:58:ab:19:5a:
05:46:b9:05:ba:a3:1d:6c:a9:3d:50:40:6d:d8:72:
80:b0:25:30:60:a2:8f:47:76:00:f2:7c:5a:ae:02:
f3:93:80:03:c1:af:df:ac:90:8d:ed:9f:d1:ee:08:
c5:d8:fb:3e:2d:66:36:cc:c9:7c:cf:7e:12:95:49:
0a:f0:3e:84:a4:13:f7:45:1c:42:08:9c:1e:24:3f:
62:6f:a9:e7:07:86:cb:85:38:a6:6a:f4:41:19:4b:
a3:80:05:55:49:11:68:ed:e9:cc:7e:6a:53:9c:f7:
39:20:21:a3:f7:07:f2:b6:dc:6a:e0:62:c8:f1:3e:
18:2a:e7:13:eb:d3:1a:91:e0:7c:14:3d:d3:04:37:
9c:98:ef:71:75:22:bb:10:d3:d3:41:8d:29:99:fb:
0d:96:e8:16:70:0f:90:cb:96:ac:d1:57:12:db:c8:
d1:a8:bf:c0:84:8e:8c:c1:99:ca:1a:a0:7f:5b:d5:
c0:be:27:9d:5d:2d:1a:f5:55:f8:d9:cc:cb:62:fb:
06:b9:64:14:ac:b8:ff:34:6f:c9:dc:b4:13:e3:92:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:66:52:1D:CF:90:63:F6:D7:3C:B0:B2:C8:BB:39:2B:F1:7C:9B
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2b:96:2e:71:d3:ca:43:05:1b:4a:bc:f5:34:cb:2e:15:11:
32:60:50:03:b2:c6:de:d2:07:3c:65:e9:8a:f5:81:0b:e6:26:
6c:2e:94:3a:2b:13:62:bf:fc:fd:bb:7c:11:d5:66:58:29:77:
0b:ce:b7:d8:d8:e9:f6:cc:9e:36:fb:c8:3f:36:b3:82:22:3c:
24:cc:3d:b7:df:56:ee:9f:96:a2:52:96:a6:9d:63:40:fc:2f:
77:28:f7:c6:51:b1:6c:85:1d:e8:84:b4:a6:e8:c8:78:18:23:
8c:40:02:22:1f:49:9d:35:ca:df:ce:06:76:69:84:35:4f:85:
77:e0:f6:a0:39:db:be:95:d1:e0:1c:03:a5:29:d0:14:e5:b8:
b4:8a:54:11:50:be:48:5b:93:5c:50:64:ad:32:96:5c:8c:f8:
7b:6c:b4:8d:12:d2:27:c0:2b:3d:54:14:5a:79:b9:bc:17:3a:
f3:24:87:38:1d:57:c1:96:6d:72:72:f9:c6:2f:34:78:be:00:
0b:6a:34:c3:b2:ca:09:cd:bd:1f:a1:23:15:7b:8b:ab:04:3f:
0f:36:fb:1f:78:14:25:6d:3f:de:77:19:40:af:85:33:ee:13:
3f:5f:2d:b9:40:4b:40:f6:b2:c1:35:d5:9f:30:9a:9d:19:c9:
6c:e8:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:47 2025 by rpki-client