Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: gyCZfkm4iZwUDi2nEVDaH6wEffJriecAjlUVSCidY50=
Subject key identifier: 47:13:C3:18:DE:B5:DA:D3:36:AD:92:DD:A5:45:A0:BC:8E:D1:C7:30
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 0194BCAA185B6F86662D7A3D4CF2590098F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 137A
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: CKDOn+7mfn3KZ3qcHkmrfVB31RbZVuqFmW+tv25WNvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:18:5b:6f:86:66:2d:7a:3d:4c:f2:59:00:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=4713c318deb5dad336ad92dda545a0bc8ed1c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:e3:10:64:09:86:c7:d3:56:05:4b:3d:9f:
63:d7:f5:48:c0:01:02:8d:48:b5:b8:bc:e7:e8:19:
68:19:36:51:1c:9d:85:a3:15:16:0b:59:dc:97:57:
92:7e:ba:51:c3:45:8a:5d:81:29:c4:7a:6f:32:b4:
a6:35:86:11:ce:49:38:27:b2:68:e3:6f:35:6d:62:
81:cc:92:2b:6a:4c:13:11:1e:38:28:6e:7d:b2:5a:
57:b5:b8:0c:df:db:17:5c:c2:f7:38:55:5a:a8:5c:
da:2c:c3:ff:d4:e6:97:15:c7:71:8a:6a:04:30:77:
c2:f8:1d:78:cc:07:11:2b:00:08:b4:04:2d:97:8b:
f4:f9:1c:e4:fc:18:71:ab:d1:52:62:85:9d:49:22:
e2:b0:42:ca:11:e7:bc:5c:47:54:b6:11:65:f9:ed:
43:9d:72:be:60:b6:f7:13:cc:b1:d5:db:ff:ec:98:
ea:1d:13:17:f0:6e:76:69:85:1d:80:bb:d8:62:e7:
12:8b:b8:db:3a:a6:79:0c:d8:a3:7a:a0:86:c5:e8:
35:82:46:ed:5f:7a:72:13:d2:58:2e:c5:41:1b:75:
4d:39:58:5b:80:c9:01:de:c9:8a:c6:97:82:58:31:
5f:5c:1b:7e:11:62:73:83:b1:06:63:8f:f0:1a:48:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:C3:18:DE:B5:DA:D3:36:AD:92:DD:A5:45:A0:BC:8E:D1:C7:30
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:48:8f:d4:14:ab:7f:0a:d9:99:ef:ad:ad:e2:99:49:51:
ed:cf:f6:cd:cc:17:b3:71:83:fb:d3:c0:39:c3:53:dc:3a:9f:
d5:61:bc:38:8f:6d:55:e5:bc:e5:10:26:2a:97:6f:0f:2d:5d:
41:3f:14:e7:31:2e:f3:b4:54:a5:43:a1:43:9f:5c:c9:ba:de:
80:d0:1b:a4:4b:0c:a0:36:80:d7:1d:dd:14:e9:78:73:18:7b:
46:c5:0f:3b:99:4f:6b:1e:62:43:2b:c7:64:6c:98:95:28:41:
6e:10:68:62:bf:33:22:4a:50:1f:47:ec:17:e9:e0:e4:64:09:
82:8e:9c:31:71:b9:e2:ce:4f:fb:85:48:fb:c8:c0:b5:ac:5a:
21:98:9c:1f:0e:55:60:d1:de:b9:d9:d2:95:f5:63:07:38:29:
71:dd:de:43:72:0c:28:3d:45:77:de:11:c8:58:d2:a0:99:aa:
82:47:70:26:bb:04:31:a2:fa:2e:37:57:5b:e3:f8:a1:65:72:
3f:4c:28:1e:ad:82:72:61:86:55:92:09:5a:12:77:c4:33:47:
a8:32:77:e7:b5:ba:1a:07:e8:b3:be:52:cf:dd:11:c2:3e:5d:
6c:c4:1f:c3:34:d7:38:c3:21:2c:26:8f:9d:b2:c8:94:1f:e0:
db:30:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:59 2025 by rpki-client