Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: 4SJr4yM9NEY1hbj5WBgXhs1nNA+x4J4vA8ev8O3E9Is=
Subject key identifier: E4:86:FB:99:A6:36:D0:5E:71:E5:03:28:B6:95:D4:80:F9:74:FE:87
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 0194BD179A8B43DE3AD017315B845ECE2447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 06D9
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: AqjWxZeSwbPgxKK184DTgjjwpG4izbSYjhMORCF4k4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:8b:43:de:3a:d0:17:31:5b:84:5e:ce:24:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=e486fb99a636d05e71e50328b695d480f974fe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:a9:f0:cb:cd:82:b4:46:92:c0:77:de:b4:
6a:09:44:3e:15:cc:e8:aa:26:78:fd:5a:de:65:de:
4f:86:87:23:a2:54:99:82:55:61:53:1a:b8:e2:8c:
5d:ca:62:b8:b1:72:c2:e1:1b:5f:58:2e:19:a4:03:
37:84:5f:48:bf:1c:68:0c:36:fd:74:76:2e:09:3e:
70:33:62:b6:4d:07:d0:cd:55:6a:c7:44:b4:69:d0:
c3:46:86:b3:31:90:b6:ee:e2:5d:c1:8d:cb:4f:00:
71:71:87:c7:b6:8b:d5:44:a5:2d:19:a7:90:13:ef:
29:b5:c6:33:42:3f:5f:85:f4:65:d1:e2:87:61:63:
4c:e5:64:6f:67:b2:33:b9:85:9e:35:0b:ac:e1:1f:
9e:09:08:07:f3:0b:91:42:5a:84:37:e2:89:61:52:
e9:7b:5f:92:55:e6:40:67:07:32:58:2e:f6:27:cb:
00:8b:8a:bb:38:35:8c:8c:cd:39:02:b0:63:7f:e1:
ed:c8:4f:4c:01:94:4a:ae:f9:cd:ba:0d:79:07:6c:
80:75:f2:e2:cf:50:b3:f8:8b:3e:d4:01:e6:f8:e4:
15:43:40:f0:bc:a0:54:bb:7e:cc:87:c1:4d:d4:0b:
b3:a2:e2:97:6e:88:0a:81:d8:0c:d2:9b:9b:93:f8:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:FB:99:A6:36:D0:5E:71:E5:03:28:B6:95:D4:80:F9:74:FE:87
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c1:e2:e2:7d:dd:82:ec:3a:e5:a1:4b:48:7b:09:fa:3a:27:
7c:b3:22:49:d4:fa:4a:e2:64:c0:2a:e3:14:fb:e4:61:b8:ff:
10:cc:e5:b2:b5:92:cc:b7:f9:0f:84:47:63:b5:52:10:bc:52:
16:76:82:8f:0e:75:e6:cf:0d:44:94:15:ab:63:c7:93:09:07:
bd:ae:22:ba:8c:5a:ed:dc:a1:da:e5:d3:d1:24:c1:8a:90:3c:
56:b4:fd:44:75:f8:72:17:97:12:c1:c3:bc:c8:98:e1:45:bb:
53:aa:10:ba:a7:13:46:42:37:a7:e4:90:4f:a9:c4:b5:f3:db:
24:f3:37:3e:03:8c:7b:f7:a9:05:d6:05:20:7f:61:60:f8:b1:
49:d6:f6:17:9d:65:c7:19:68:41:e6:14:e0:e0:db:18:1d:19:
3f:7a:b2:cc:1b:74:95:40:0a:70:a2:76:08:ac:65:e7:5d:e3:
d0:00:27:0e:b3:51:2f:8a:24:89:5a:35:84:5d:c2:d3:cc:7f:
ee:74:e0:b2:48:75:b9:e6:ba:b5:2a:c4:3a:a2:94:97:3a:f9:
2f:8d:bc:41:3e:f0:8f:5b:6a:75:fd:6c:21:94:8e:7e:93:0f:
84:3d:64:61:09:6b:42:6c:16:9a:3e:ac:b6:56:3f:fc:95:c2:
0f:41:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:57 2025 by rpki-client