Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier: vXACBT4ERP3Eda1H3m1dtQLa2uG442UJ0MnbCRYlsuw=
Subject key identifier: 85:21:40:ED:20:15:A9:6E:14:34:83:99:6C:7A:83:5E:74:76:9D:94
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial: 0194BCAA2A36C4F6AFB132AC460E59C3FC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number: 1079
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: zWHTTJQ1RaxCVL5YM9I1nCrbyGHJjMMULne50AKIBDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:36:c4:f6:af:b1:32:ac:46:0e:59:c3:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=852140ed2015a96e143483996c7a835e74769d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:4f:21:3f:cc:2d:2c:85:79:73:88:fe:6c:
4b:30:ad:08:8a:49:3c:19:3e:b8:c2:51:5a:e6:46:
ae:f8:78:94:e4:57:8f:bb:bb:bd:c4:29:b5:9e:6e:
6c:6d:b1:46:7a:f0:51:f9:5d:59:3e:da:43:f8:c7:
2e:aa:03:e7:f3:df:10:dd:80:d8:0e:48:9c:da:9b:
fb:25:24:da:03:02:00:e5:32:97:ef:4a:9a:1a:d1:
fa:3f:fc:05:93:e6:86:44:fc:5c:4b:6a:6b:c8:60:
20:9e:6b:e2:a4:ad:fc:d5:d7:ad:b8:ce:85:5e:d1:
f3:f9:c6:e7:b8:22:51:b8:32:be:5c:4f:c5:c6:dd:
45:65:ea:ea:3a:da:d1:a4:ef:1c:3c:58:4d:ed:f1:
36:54:2a:a5:c9:2a:cf:53:43:e1:f6:9a:ff:77:8e:
83:5e:8a:a5:54:32:55:c3:00:1a:93:39:c1:2a:78:
86:86:39:2f:43:2f:bf:43:a5:11:1f:36:30:76:9f:
4f:74:63:2a:3c:98:f7:83:d0:a9:d2:c7:4e:1d:bd:
0f:1c:a7:eb:65:82:fe:d1:9c:1e:ea:b0:f1:45:a7:
cb:d5:68:11:a9:05:b1:79:6f:42:7e:3a:4d:d8:f1:
47:19:18:ee:fd:20:ba:40:95:1c:f8:0d:9f:a9:17:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:40:ED:20:15:A9:6E:14:34:83:99:6C:7A:83:5E:74:76:9D:94
X509v3 Authority Key Identifier:
keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9b:18:87:9a:5e:19:97:bc:88:23:c0:5d:c8:d7:49:85:c7:
5b:19:fb:39:a2:8c:cb:3a:ca:f3:fd:d3:e5:e8:1a:06:8b:e9:
9e:ef:3c:9f:4c:49:22:8f:65:ab:ed:f7:70:e3:2e:bf:d3:3b:
b6:13:b6:8e:88:e3:27:8d:5d:8d:84:89:22:27:3e:bb:be:67:
39:80:4a:02:12:56:8c:f0:59:78:95:b1:4d:44:85:c0:6e:f6:
5e:ad:6d:b8:24:0b:d9:19:5c:13:e8:a8:14:1f:26:65:e9:c0:
21:d5:b0:26:36:dd:d5:34:bc:b5:18:c9:81:c2:5d:c5:28:33:
cc:29:27:f9:4c:5e:14:95:09:9a:63:96:29:e5:17:86:d3:66:
64:dc:bc:ef:00:85:1a:7e:07:35:a6:33:cc:17:0a:00:e6:64:
2b:ca:e0:59:e8:1e:e9:21:95:4c:af:40:fb:bb:04:e7:9e:8a:
8f:9f:42:f5:a9:e3:23:a4:1a:61:a3:78:20:df:14:e9:bf:e8:
48:d9:be:fd:6c:06:08:77:0f:cf:98:af:ba:07:41:3e:09:46:
76:9c:d6:fd:51:74:0a:ee:7f:54:cf:a5:d3:56:7b:64:ef:50:
a8:84:46:fe:f3:50:5c:9d:53:62:5f:3a:df:da:f4:e0:06:3b:
72:70:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:09 2025 by rpki-client