
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: I5z7FuZ1GCarasEu/dMWf6Q7wSbCxQ8/Xc1L3wQ2RII=
Subject key identifier: 3C:A0:93:72:F4:BE:CC:12:10:DA:93:91:95:B6:4D:70:D5:43:2C:88
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 0194BD4ED158DECA88D2E29654D1DDFC3EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 1313
Signing time: Fri 31 Jan 2025 17:00:46 +0000
Manifest this update: Fri 31 Jan 2025 17:00:46 +0000
Manifest next update: Sat 01 Feb 2025 17:00:46 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: s7uZvJ6+jVD0gdar/A4uBl1V9gxiEOFUwtgNdGlktGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:d1:58:de:ca:88:d2:e2:96:54:d1:dd:fc:3e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jan 31 17:00:46 2025 GMT
Not After : Feb 1 17:00:46 2025 GMT
Subject: CN=3ca09372f4becc1210da939195b64d70d5432c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:be:fb:f3:68:2f:80:f7:f4:0f:55:16:99:
23:9c:ea:4f:68:2a:40:6d:d5:aa:4c:3d:0f:2c:a7:
d3:ed:ac:58:a4:77:84:e8:92:74:f5:6c:0b:3a:68:
70:b0:59:2f:09:c6:e2:52:c1:01:dd:2c:c9:c9:f3:
e3:7d:98:07:43:b9:e5:ee:a7:21:d5:cd:9b:08:1f:
2e:4a:c5:ec:4e:fb:d4:8b:e5:a9:ea:33:12:54:66:
13:67:0f:f4:ef:3a:28:af:68:f1:72:b0:8b:73:4c:
ac:a1:c6:3b:be:cb:b1:91:f2:b6:e5:3c:96:88:06:
72:07:a2:86:ce:fd:67:f6:f6:27:a2:5c:1c:1e:55:
2a:9a:b7:ef:9a:a7:41:15:d3:76:5d:65:a7:1e:a5:
39:f9:94:72:a7:a6:f5:9b:4a:e0:99:4d:0d:1b:97:
96:8f:3d:cb:7b:57:e5:a2:6c:27:52:be:73:1d:7b:
e5:8a:1f:08:18:57:7b:ca:f6:83:ac:93:ef:fc:d9:
37:69:b9:e8:84:c5:81:48:70:51:0f:3c:d4:af:77:
86:65:37:1a:10:33:7b:fc:b6:18:4d:4e:f2:41:f5:
83:20:24:ec:77:31:39:cc:02:55:62:aa:da:3d:66:
ab:ff:07:b2:bf:70:93:97:51:c2:69:43:36:22:3d:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:93:72:F4:BE:CC:12:10:DA:93:91:95:B6:4D:70:D5:43:2C:88
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7b:54:fb:ed:dd:4f:a8:a5:ea:49:59:87:98:2f:d9:81:7c:
ff:ed:cf:7d:83:47:d2:45:b5:4a:b2:cd:90:6e:eb:a3:f1:f7:
6b:12:9e:e3:80:e4:b2:ef:6d:6c:94:74:a1:ba:61:08:ae:25:
1e:49:c4:5b:69:56:11:9d:b9:e8:99:74:e0:aa:5f:01:a1:7d:
b3:b4:4e:70:1d:1b:93:e3:69:31:e5:16:32:12:5f:cc:cd:2e:
7a:94:5d:f8:09:70:b6:2e:6e:3a:87:37:e3:14:4a:23:90:0b:
be:2b:a2:3d:db:9d:6b:59:d6:72:27:51:04:64:6f:5e:07:e5:
fa:17:b3:4f:e1:11:4f:b8:85:b6:90:6f:5b:b5:7f:d7:5d:aa:
9d:10:86:bf:d5:e0:d5:ef:74:3a:99:6e:55:6f:27:7c:f7:43:
45:d2:2c:2d:59:a9:80:25:d5:25:ec:1a:2b:a2:97:f8:82:7e:
cd:a5:67:a4:98:b6:dd:f8:e8:84:29:bf:10:aa:63:b2:99:60:
0f:15:06:e0:d0:8d:ce:92:85:22:cd:b3:5f:83:9f:be:64:31:
e7:86:d0:00:71:4b:33:a8:09:d9:9b:32:07:90:29:81:3c:c4:
e9:10:37:d2:3e:54:a4:e3:9c:59:0a:29:a5:12:0b:6c:94:f4:
5f:20:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:10 2025 by rpki-client