Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: apKVq9drtN4zk8iP7I0hUdHZjqdU749q16SiVzG2314=
Subject key identifier: 8D:B6:6F:97:BB:0C:81:D1:AB:36:DB:60:35:DA:B8:FE:F4:67:39:52
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 0194BD4E762002926CD8203EF98EA9298818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 0F5D
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: P83701MbBgdssWcaWZ4mythIifiFlpkDqMwVelWIm8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:20:02:92:6c:d8:20:3e:f9:8e:a9:29:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=8db66f97bb0c81d1ab36db6035dab8fef4673952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:08:48:8f:d5:ec:3a:71:96:94:b0:83:ce:
bb:46:c5:f6:d2:4c:af:08:4f:27:94:df:d3:bc:7f:
c2:fc:bd:7b:54:da:8c:91:c0:68:c2:19:c9:8a:c1:
1f:73:11:d2:b6:63:1b:e8:8f:f5:f9:15:56:e8:0d:
d6:25:d8:fc:5a:ff:b5:32:df:5f:56:01:8d:db:18:
16:0d:17:f6:dc:da:33:c5:2d:52:3d:e6:9f:a7:6e:
2b:de:6b:e5:09:63:5d:98:92:c4:80:51:e2:e7:05:
54:1c:2b:d4:b0:12:39:ac:58:c8:0c:49:22:76:1e:
ef:a8:51:c2:7f:44:4b:47:ca:e0:1f:be:a2:0e:9a:
07:61:a4:4a:66:55:a6:cc:21:64:28:a2:fd:1e:90:
b2:57:d3:31:83:16:70:39:37:ef:cd:c8:2a:2f:53:
02:5b:31:7d:4f:fe:ca:86:de:9d:5f:32:22:26:da:
1b:b2:a0:f9:37:0a:b4:7c:54:90:4a:b5:dd:77:49:
cb:01:96:59:e8:94:36:7b:1b:c5:a7:70:3a:40:1b:
80:3f:5e:f2:9d:30:55:51:49:cd:84:cc:5c:05:fd:
c6:d0:b6:1f:8c:6b:db:dc:bd:2a:69:af:51:c6:ea:
fb:d4:6f:9d:a9:b7:d2:e5:0e:68:a3:03:5b:f2:41:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B6:6F:97:BB:0C:81:D1:AB:36:DB:60:35:DA:B8:FE:F4:67:39:52
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cd:bc:09:45:d5:6a:5d:06:bd:5c:79:bd:19:33:8d:76:48:
03:77:56:27:f1:2b:c9:ce:b7:31:84:f6:07:ee:f7:58:9a:8b:
88:8b:90:13:a1:ef:9d:72:af:05:92:b2:80:6e:5b:1e:ce:e5:
5a:c9:8e:70:df:86:53:bb:79:72:76:a8:37:7c:e8:d4:8c:1e:
4f:a9:d6:4c:28:cc:9b:1a:5e:ed:44:cd:22:dd:29:ff:c8:fc:
d1:6c:1c:e8:c1:4b:b4:98:b6:3f:c3:a1:01:fb:64:e8:fd:1b:
a7:5a:38:a5:d1:53:bb:fd:fc:c6:96:cd:05:0d:b2:57:17:92:
a1:9f:8a:82:08:00:29:8d:75:ac:a4:f0:89:62:db:bc:b9:c4:
af:7d:4d:56:96:07:09:dc:27:ca:ad:97:7c:20:78:da:75:b1:
90:a4:62:04:f2:07:b3:d8:f1:cb:d7:f4:c9:c3:d0:fe:5f:e7:
5d:d9:51:1c:83:df:2a:8c:21:48:7a:87:b0:d6:6a:f9:1a:3e:
08:eb:10:be:a1:c9:37:ec:d9:b1:42:36:c5:7e:82:38:ed:0a:
d4:76:d9:2a:bf:a4:af:7f:91:32:56:c9:63:c8:c0:a3:1e:02:
da:eb:53:0c:88:14:5b:a3:0d:56:92:87:f3:ff:b3:c8:33:e5:
9c:da:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:28 2025 by rpki-client