Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File: Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier: gGoSnpPd2xIwtzBccdJ6YpeOE6dnkpqvmTTO9THBZFs=
Subject key identifier: AB:21:26:FB:7A:01:28:0C:14:6D:56:1E:B8:FD:EA:E0:E8:8E:63:34
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer: /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial: 0194BC04FBBF9FEFFB34EA6D88029C952EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number: 021A
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: KF26PGwCSGs50wqTBD0k8PuALPEYWI5AxrQoJjBC8kQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:bf:9f:ef:fb:34:ea:6d:88:02:9c:95:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=ab2126fb7a01280c146d561eb8fdeae0e88e6334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:cc:14:dd:e7:29:bd:07:2d:2f:0f:63:0f:
23:76:17:c3:49:e3:a6:c8:61:a0:a6:47:ff:73:4c:
7f:2e:88:0c:d7:18:30:96:42:94:84:49:48:1d:97:
77:c6:7c:49:f3:ef:66:07:1e:d6:e8:6c:35:88:4a:
45:2e:b6:86:cb:2b:85:d7:8f:ea:28:d2:b0:52:4a:
10:77:41:b0:b5:7d:46:6d:fd:85:cd:09:62:c3:6f:
52:c9:65:32:fc:3c:5f:c7:11:49:77:7d:f7:e7:e4:
2a:3a:d4:80:92:f2:73:5c:09:f4:e8:0d:2d:a5:07:
c3:39:4c:10:d4:ad:96:3e:c9:c1:14:c3:7a:6d:9b:
4d:66:65:fa:2d:22:df:1e:67:8e:31:7d:8b:03:aa:
e7:d5:25:dd:ea:fd:76:46:bb:8f:ea:e6:88:f7:a4:
7d:3e:b8:41:79:1d:ba:35:c9:b1:a2:72:fb:68:6d:
9e:60:32:e5:9d:28:b1:48:84:8c:b6:31:0e:c8:78:
0a:b8:66:7e:4d:61:23:ca:be:a1:4e:a5:12:e6:00:
f8:a7:f4:e5:b0:c0:97:91:78:e3:67:7a:a2:81:80:
cc:9d:91:4c:71:d3:d0:e3:af:41:f4:37:08:e8:f3:
41:bd:65:bd:53:97:cc:d1:93:45:79:2d:01:a9:dd:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:21:26:FB:7A:01:28:0C:14:6D:56:1E:B8:FD:EA:E0:E8:8E:63:34
X509v3 Authority Key Identifier:
keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:55:1e:38:cd:b8:f4:86:46:f8:28:12:1d:48:74:95:30:93:
f9:1c:f7:34:f8:fb:12:aa:a0:cb:c6:9c:e3:69:0f:f0:63:64:
40:7b:8b:3d:87:11:1b:61:e8:7b:cf:65:c3:41:09:24:31:90:
2c:e9:dd:91:e0:bd:4c:07:3f:07:ec:76:50:c4:80:1a:76:6d:
1a:16:37:9f:ee:dd:89:f5:ac:04:d2:90:66:f2:f1:ae:c4:08:
09:a8:b5:75:9e:b1:c4:63:72:d0:7b:a8:db:29:ad:c3:cd:39:
6d:d6:93:d7:61:82:20:4a:c4:bf:60:54:0a:a9:fa:e8:51:ed:
43:d7:11:43:cc:f3:99:c7:39:ac:2b:42:d2:ad:b9:50:3c:5f:
4a:5d:e0:e5:72:82:0e:76:23:c4:50:c7:59:e6:3b:53:79:6c:
da:d3:6a:5f:2e:8f:0c:7d:07:2b:23:b1:7d:4d:14:de:65:77:
6c:aa:c0:e1:bc:3a:f6:72:af:01:81:e7:a1:c5:9b:bf:e4:7e:
22:b7:d8:95:48:e1:8b:a7:4e:c7:79:ba:cf:13:dd:59:d6:c2:
56:bd:35:a1:f7:b0:60:9b:ba:c3:47:e3:ab:f2:22:f7:c5:d6:
28:3b:0d:bc:2e:d6:e5:24:f8:a9:7f:c8:88:60:50:f0:7b:81:
06:fc:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:03 2025 by rpki-client