Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: qJ4/wXk05F8se4PntO9biG1VMT+waV4AedwBOkhdJKA=
Subject key identifier: 52:1E:AC:6A:3C:7B:C9:0E:ED:0D:ED:F0:D0:6E:66:DB:06:31:09:52
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 0194BCA97D647D7C5435AC421A190969D06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 124B
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 6aNeTA5AWlbR4K0Be9a6lB7llkg.roa (hash: pgW6et/1IzAuhXH8bkhY/6wmV9q7QWSHFhTD0FkFq1M=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: UlMPa/VoxklCVqUQ7Z92JHkbSqBVMchs/0XbEhCSWAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:64:7d:7c:54:35:ac:42:1a:19:09:69:d0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=521eac6a3c7bc90eed0dedf0d06e66db06310952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:5a:9b:63:28:30:26:67:de:8b:f3:61:44:
4f:1e:ea:b7:0e:68:81:d4:fa:fc:27:ee:3d:ed:f4:
7b:aa:91:3c:3d:5d:b2:35:ce:a1:e6:2d:67:e4:5d:
98:aa:67:2a:74:da:4a:d8:3e:d1:74:d3:3a:c4:0a:
a9:38:16:a3:e0:0d:18:d9:3c:5f:af:33:46:76:f2:
3f:f1:40:49:e1:99:0b:dd:37:86:a6:a3:23:08:dd:
bd:fa:8e:e0:99:cf:3a:3f:a6:57:e5:00:08:ff:0e:
13:92:a5:bc:83:01:1a:02:27:70:24:3e:2f:6c:18:
0c:0c:90:da:c8:a9:35:63:9d:28:77:6b:46:a4:ed:
19:02:5e:1f:c5:e6:3d:e0:14:56:b7:7d:70:c7:6f:
80:14:13:3d:55:c2:38:b7:e8:eb:73:df:d4:ae:3d:
9e:ea:d8:65:af:96:54:e7:25:c0:b8:23:7e:4d:ae:
e5:a3:bb:c2:23:ac:7b:22:21:77:94:28:30:b8:01:
2c:cf:28:ed:05:96:2f:b4:b4:f8:59:d2:83:33:85:
5e:4d:1c:07:53:79:10:bc:36:dd:85:f8:09:cb:ce:
21:a7:e7:bc:56:21:d1:1d:14:5b:ff:d9:8c:9a:c5:
1c:11:d8:99:64:e5:6a:f7:eb:ee:ac:7a:b1:15:46:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:AC:6A:3C:7B:C9:0E:ED:0D:ED:F0:D0:6E:66:DB:06:31:09:52
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:a2:af:69:5c:ee:35:7c:bd:66:b6:c8:ed:cc:5d:d8:78:
a3:33:b8:87:a3:ba:40:35:b1:34:96:0d:ee:be:a5:a0:d9:d3:
5b:16:f5:07:09:57:11:f2:4f:2a:59:62:4b:e8:d5:a3:1c:df:
5b:41:3f:3c:45:31:1e:92:60:3e:73:a4:7f:91:9d:09:ab:4e:
02:8c:0b:b9:9d:60:31:6d:a5:dd:41:b8:85:3d:be:95:cb:b1:
23:58:a8:b9:1f:31:66:a2:ae:8c:5d:4b:b8:63:17:46:ed:2f:
8b:3c:5b:89:4f:05:2e:0d:cb:56:d0:40:22:62:a6:96:4a:b1:
e1:c1:63:73:3b:ef:e2:2f:1d:3c:0f:32:cf:b1:7d:55:12:db:
31:d7:71:19:dc:41:fc:e7:f0:b7:44:be:bb:61:93:48:d0:22:
5a:d1:99:a5:fc:93:cd:17:5d:10:1c:f8:f3:b8:96:94:3a:c0:
10:9e:33:e7:8f:2b:29:ee:16:81:03:02:77:aa:dd:3e:fc:7a:
47:a4:47:c0:93:e0:7a:65:c3:bf:09:53:b3:65:1d:3f:ff:5e:
47:dd:ce:e0:99:1f:a7:da:95:e2:4a:d1:e9:3b:54:f7:ee:f7:
3b:b9:6e:1b:09:1a:eb:ac:2c:91:33:78:33:f4:32:ee:dd:b6:
08:4c:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:10 2025 by rpki-client