Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File: VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier: BUDuiwF/7Caf5Yrb3JEc1QCcqqiU87bF/8ki86FTRcw=
Subject key identifier: F5:6F:45:35:B1:19:F0:0B:AD:B5:9F:CC:E8:DF:ED:B7:D8:6E:3A:0B
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer: /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial: 0194BD17A79AD3A3818B6246B441264733EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number: 0363
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: evjKcLvQea0L3OkGCh50k6XfOpWjTXgPSG2eJp+8u0w=)
2: kniutbSU_-qRAK95UI_8HV0omH8.roa (hash: O5mP5p6KZHlt5DYxryJnWdH3oyg1kqV5mUt5tDGEri0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:9a:d3:a3:81:8b:62:46:b4:41:26:47:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=f56f4535b119f00badb59fcce8dfedb7d86e3a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:10:98:05:d1:da:3c:0a:94:16:14:99:fd:d4:
1c:11:00:59:8f:dc:ad:5f:51:74:40:76:8c:60:34:
ed:c7:34:84:92:b9:29:6a:7d:93:5f:bb:fd:ed:f6:
eb:81:aa:46:fe:7f:ab:d0:0a:9a:87:61:51:c7:24:
e1:03:ab:d1:a3:b7:54:c0:32:ec:ef:db:17:5c:ac:
b2:a4:e4:51:88:2d:fb:03:af:85:9a:ce:1d:76:c4:
b4:e4:29:9e:a1:a1:22:f0:4f:f4:cf:fa:5b:3f:e8:
9d:64:14:2e:98:43:8b:8f:bb:ca:21:f8:8a:6d:fc:
c0:86:a8:b3:8e:49:fb:54:a0:08:d5:25:8c:82:54:
7b:91:4d:b5:18:26:6d:5e:db:d4:78:81:53:4a:6a:
e9:b2:b3:49:b6:d7:cc:7c:be:7c:38:ef:64:0d:77:
29:aa:9a:11:b6:ca:a5:e0:d3:58:32:29:11:6e:00:
af:b2:de:d6:49:dc:6a:74:77:26:a6:be:e4:d1:2a:
b1:b6:29:e1:3f:76:44:c7:36:45:2e:ea:13:e3:aa:
29:94:56:00:63:fc:57:b3:08:8c:b7:a5:52:8b:f1:
30:2a:23:01:c4:80:e7:ef:20:60:0b:8f:00:79:67:
61:9a:46:f7:bd:6e:7d:22:77:9e:e0:90:b1:4e:17:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6F:45:35:B1:19:F0:0B:AD:B5:9F:CC:E8:DF:ED:B7:D8:6E:3A:0B
X509v3 Authority Key Identifier:
keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:11:fb:8d:3d:e7:ba:3f:37:b7:3b:82:36:f5:82:36:d4:
fc:7b:5b:28:3a:61:c7:e2:c5:ea:1b:05:77:72:7b:f5:74:6d:
fa:d0:79:10:78:c5:3c:95:ba:41:b5:1a:85:e9:66:42:a9:e5:
66:d2:b2:79:8d:1d:58:b8:27:05:26:be:1e:d5:74:bb:19:09:
b9:74:f9:10:d8:76:7e:ec:9c:12:16:ca:d9:c6:38:bb:99:35:
3f:eb:8f:73:bc:3e:5e:9e:89:62:6c:56:f5:16:d0:79:97:83:
c9:7f:4c:7c:6d:38:26:4c:02:e1:2d:42:70:de:a6:86:59:07:
b0:66:91:03:bf:1e:e5:12:8c:5c:0e:c5:f3:88:54:6f:b6:65:
3d:9b:80:8d:56:b5:07:53:d2:ca:cc:df:57:3a:72:1a:df:ca:
4d:61:8e:4d:58:fa:c3:04:be:97:58:e8:73:84:2b:9c:70:d7:
e4:79:76:6a:42:c4:4e:10:cb:ab:78:22:48:9a:ea:a8:3d:a3:
56:cf:c3:3b:8d:08:3d:e7:54:f2:94:02:79:4e:f7:f6:ec:87:
44:88:f6:f8:0f:3c:2f:ce:44:b1:9c:dc:1f:e3:96:7f:3e:bd:
d5:c5:ea:36:e6:ea:31:6c:45:48:f8:6d:f8:d9:95:4c:40:f5:
d7:09:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:49 2025 by rpki-client