Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: D3S7E86X+xz7twRKwmreQGPecM8/Og0DSe78+MM8KA8=
Subject key identifier: C8:29:E3:56:3C:BD:59:B0:DA:20:A4:77:D5:11:7B:3B:68:56:96:75
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 0194BD175AAB9B741617F556D0C808A2C1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 09FD
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 9fv8VNH2Lb/yO/FBQ8eMuPOuVvO+YDjJkZadtX33jok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:ab:9b:74:16:17:f5:56:d0:c8:08:a2:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=c829e3563cbd59b0da20a477d5117b3b68569675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:1a:15:83:ce:33:ac:54:9b:34:4a:67:7b:
6a:8f:73:98:92:5e:4a:bc:a7:c7:a8:21:23:e8:37:
46:56:bb:13:2e:12:0d:63:40:33:cc:23:fb:5b:e4:
b0:c9:4c:63:08:6d:57:9e:6a:06:27:69:50:d3:d7:
dc:75:27:98:86:d4:3c:ee:e7:32:2b:51:4e:7e:36:
47:09:3a:83:2c:3d:b7:47:23:11:82:18:ce:20:4d:
c8:d8:37:97:8c:d7:e6:11:c0:f5:40:16:eb:fa:77:
68:9a:19:94:bd:84:a7:cd:ab:f5:fa:5f:7c:1f:c3:
64:67:1a:33:3d:95:c9:e4:59:6b:85:60:a2:b7:71:
db:73:01:01:15:59:6e:00:0f:a8:f7:2f:d8:97:8f:
09:91:1a:19:10:34:e7:2f:c7:a4:fd:16:4d:a5:4f:
b0:1f:20:2a:14:ed:2e:09:91:c0:e2:e1:4d:9c:15:
a2:ec:1b:9b:26:27:59:23:fb:4d:a1:a0:4d:89:4f:
d1:a2:ed:6f:0a:1e:81:b0:c0:3b:ae:42:ca:a6:c0:
70:a5:b2:9a:e3:b1:23:a1:6f:46:95:63:f6:9f:0a:
07:d4:96:4a:35:5c:d6:11:7a:e0:83:0f:3f:94:06:
1a:e3:83:ce:13:73:c9:81:0e:8a:20:d2:b7:6a:b8:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:E3:56:3C:BD:59:B0:DA:20:A4:77:D5:11:7B:3B:68:56:96:75
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:fc:be:86:22:d5:1e:1f:58:b3:6e:fe:71:35:04:41:99:
82:2b:2a:e1:d2:35:ba:60:4e:bf:09:60:62:ac:c5:d5:c7:ba:
3b:01:48:3c:78:f0:04:cd:b9:d4:2d:30:ee:d6:d2:0e:3a:9d:
91:a4:89:4e:c8:ef:e5:bf:81:fe:dc:87:bd:3d:c4:9e:36:fd:
84:80:ba:7d:c5:37:ec:06:6b:af:74:c9:4e:5f:57:f3:d8:59:
fc:e8:83:8f:4c:a8:28:33:75:1d:34:71:92:09:bd:eb:d4:98:
cd:8a:1f:9b:9c:f5:bc:78:b2:d2:c0:77:5c:07:f1:37:34:05:
7c:97:16:cd:d0:8f:f2:f0:3f:b8:c0:fd:f6:87:28:23:a9:d0:
6a:45:0e:fc:4d:c4:04:39:98:97:ad:a7:86:60:47:c6:25:a3:
2d:3c:37:15:72:55:cd:92:2e:f7:ec:8c:dd:64:65:59:74:c4:
f1:5e:49:6b:be:7a:d2:57:f5:26:6e:c1:75:f2:6f:ef:2a:a7:
67:b9:01:ca:93:4d:4e:94:6a:4f:32:60:d2:f1:ca:24:62:22:
a5:02:b1:73:ae:af:9a:f4:eb:98:8c:f1:8e:ce:7f:3c:f7:a7:
60:b7:49:89:82:84:61:bc:7b:06:1b:3f:1e:b1:b0:da:62:e8:
a2:84:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:15 2025 by rpki-client