Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: NhNyBM1c/e/pMuNuDXVMe7frbXl5t2y0UHxFJVhxzoo=
Subject key identifier: 2F:1D:75:75:E2:B4:9E:A9:10:75:F2:EE:F9:EC:A8:5C:C0:86:69:2C
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 0194BD858D6388CC3DE4C719CEC062B4B955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: tLLau7msVFcVUJVITV3D+8JSFvby1UqS0B9w/M3JCXs=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:63:88:cc:3d:e4:c7:19:ce:c0:62:b4:b9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=2f1d7575e2b49ea91075f2eef9eca85cc086692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:f6:a1:c1:1a:ea:2d:02:9f:9b:ef:1a:4d:
cb:94:af:dc:d3:1c:9b:4d:01:3b:e3:c8:ae:63:17:
37:e6:5b:36:a4:03:6e:d5:f8:22:21:7b:d5:13:ba:
cb:86:df:71:84:e0:2e:96:37:31:7a:ec:c9:7a:69:
01:5e:bb:a2:d4:55:93:f5:82:26:96:a2:df:ce:52:
10:05:b1:4a:37:08:87:62:89:2a:68:90:54:0d:3d:
0c:6a:f4:1f:63:53:37:a5:41:00:c8:43:5b:5f:6f:
81:2f:5b:9b:80:1e:ee:30:f9:d1:f7:a7:e8:c0:3d:
d2:c9:3c:4b:3b:cf:d1:b0:e4:35:95:5e:fd:03:24:
aa:26:54:8b:e8:f5:09:0f:0e:11:75:e9:1d:f9:58:
12:4e:4a:85:44:9b:68:1a:ef:8d:71:d8:46:bc:2d:
20:26:12:0d:78:89:55:65:62:59:9b:94:f1:ac:03:
7a:4e:a6:58:d7:e2:98:a2:d3:7d:91:1b:36:da:84:
f1:55:8e:4d:37:46:ea:a5:68:1e:84:06:96:ed:65:
1d:75:14:bd:0a:7e:86:0e:f9:a7:58:a5:f4:7e:16:
11:c1:36:78:8b:a8:e9:44:51:4e:41:88:4d:45:da:
f6:36:6a:d5:c9:95:29:48:f5:2e:d2:e8:49:11:0d:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:75:75:E2:B4:9E:A9:10:75:F2:EE:F9:EC:A8:5C:C0:86:69:2C
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:3b:0a:b3:d8:b2:fb:81:93:f1:9f:61:a2:4d:3d:e1:4e:
c6:3d:98:c2:e9:ea:a9:12:c3:2d:0f:8d:b6:8b:76:25:bc:fa:
a3:36:36:5b:d6:31:87:66:33:a7:b7:17:24:45:6c:89:0a:ef:
c5:ad:cb:85:4e:2f:8d:11:90:19:a0:86:7b:2a:91:1e:59:2b:
3d:eb:0b:05:a3:bc:9b:69:eb:36:24:c7:8e:34:56:24:e0:a3:
12:7f:26:87:1f:b5:cd:4e:51:33:2c:1f:9b:0c:63:2c:6f:86:
af:1a:af:72:90:b0:a5:2f:d4:6d:c7:a7:a0:a0:56:33:f3:63:
7a:a8:c8:4f:5f:1e:ff:49:66:55:01:2d:7c:0b:14:29:c8:de:
69:e0:68:86:96:9c:72:70:94:de:5d:d3:71:7f:a4:ba:99:3a:
0d:8e:a4:05:8f:bb:1b:eb:57:6c:e8:9f:10:b4:b5:46:8a:bc:
0e:40:d9:ed:cc:4c:12:15:5e:0b:4f:7c:0a:1d:e2:67:d7:f5:
fe:d6:a4:53:77:a4:4e:e5:e0:7b:49:c0:0e:1c:58:c6:07:1a:
0a:e3:82:7d:2d:3f:00:c3:46:66:5d:08:3b:05:72:c3:04:2f:
6f:1e:7a:a6:4c:90:39:6a:91:fc:cb:d9:5b:c2:0f:21:f2:a9:
75:b7:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:29 2025 by rpki-client