Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: H2agRE0kT/y7F8EuYbPjfCLs+IQx92LzK8xFe9xbV40=
Subject key identifier: B7:20:07:48:41:D4:B2:C0:80:0D:4E:D4:92:5A:06:A7:E5:A7:F7:2F
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0194BD17C8A7FC2BD4AA33D550DF12FD4670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 016C
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: LfGgE-LuNECxbnJjQPipuFhLg2I.roa (hash: sLqkOyJdwRO4Ttr9wdylpZQWm0xGNFrW7MHGvK06MGA=)
2: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
3: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: fBaP+FGpbilvmjdyCh/x/7RAzofRvA1cSodFCBgZM/8=)
4: Wlq8JczS5O9x_-wRlhfNjfhOXSo.roa (hash: gCijQxztNK0z51fdMos9bsaBQa/7dff7n+52J3xqq5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c8:a7:fc:2b:d4:aa:33:d5:50:df:12:fd:46:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=b720074841d4b2c0800d4ed4925a06a7e5a7f72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:73:25:19:35:7b:cc:d2:5b:dc:96:93:7d:
d7:a0:5c:2d:07:82:66:6f:3a:a0:de:c1:b9:97:1f:
4d:13:4c:77:3d:6f:c0:e0:ff:5f:e8:54:e1:26:40:
65:17:63:34:1a:6d:ad:f1:d6:3f:64:2a:e5:27:84:
53:0d:66:a3:93:4e:1a:b0:b5:d4:01:c8:1a:12:34:
3d:10:08:10:3b:8d:84:25:7e:7f:c4:ae:ea:dd:85:
08:87:49:c9:cc:64:95:e7:83:88:7c:9b:38:d9:ba:
35:85:96:c0:47:47:ca:19:f4:56:1e:f0:81:0a:d8:
e5:00:07:55:a1:ab:ef:9d:4e:b2:01:b4:ce:e2:67:
7c:14:c9:25:48:7f:f2:f5:55:3e:e0:e3:06:74:56:
bb:77:e2:e4:77:65:e4:bf:10:73:83:59:98:bf:20:
a6:9b:e0:67:25:1e:90:cf:b3:31:46:e1:53:49:21:
aa:de:a9:e7:dd:3b:3a:82:cb:f0:97:20:3b:d4:23:
1b:aa:7f:cd:7a:e2:10:57:46:ed:c4:65:6e:65:5b:
34:ae:fa:bc:bc:04:c1:e4:ac:f4:f8:05:00:bd:78:
6a:1d:62:6c:58:94:33:ae:d1:24:3a:1b:47:db:da:
84:ce:78:d5:75:76:75:14:1b:8f:7b:db:8d:33:79:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:07:48:41:D4:B2:C0:80:0D:4E:D4:92:5A:06:A7:E5:A7:F7:2F
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:87:9b:88:13:b6:9d:3d:97:0d:e6:db:44:2e:57:35:11:
ed:6e:4a:d5:b2:97:9d:9c:a3:a4:b4:a1:8d:fa:02:e2:d7:51:
82:cf:42:be:12:9a:31:0d:a1:d0:69:bd:33:62:11:84:43:da:
88:a1:e2:e5:89:55:f4:cd:b1:62:a9:26:97:49:c4:62:78:b6:
80:24:01:a8:28:68:c9:e4:d1:63:d0:5d:c6:04:b2:96:ab:48:
e8:95:55:36:d6:e5:4b:93:1d:43:9e:84:d3:df:12:08:21:b7:
7a:09:b9:e1:13:2f:96:5b:5f:5f:83:0d:4c:97:2e:91:12:67:
63:76:75:c3:98:dd:61:14:68:8e:f7:70:ae:b9:5a:a1:d7:af:
4a:9d:0d:27:2a:a2:34:05:b1:69:08:40:dc:6d:41:9c:34:7a:
57:57:b7:97:ac:de:03:6d:3c:a6:8b:c0:3c:2a:e8:a2:33:a2:
ad:a7:87:85:76:75:6b:d2:fe:3a:ab:fd:69:79:ff:29:09:1a:
2a:8b:b8:06:1e:ca:41:ab:ab:57:82:aa:14:18:2c:56:5f:e4:
4b:81:1f:1c:93:ad:98:9f:bb:7e:2c:09:6f:4b:ad:8a:16:8f:
f2:46:d3:3c:1b:53:20:1b:55:03:a2:c4:2e:41:ff:aa:09:58:
07:a0:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:09 2025 by rpki-client