Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: 81MWAxkXrIKN6KhURZ8fHu6LlqTElIOE+8SuewkDX9Y=
Subject key identifier: D9:FA:41:42:EA:FE:BC:9E:93:92:B7:DB:6B:2F:8B:18:25:9A:C5:DF
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 0194BC72F77668EB014A3991FCF5C00D6241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0E1E
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: qznJCq51d5hE5j/U2Ael4KKUIw192VGD5xVffzslESs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f7:76:68:eb:01:4a:39:91:fc:f5:c0:0d:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=d9fa4142eafebc9e9392b7db6b2f8b18259ac5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:06:2a:03:a5:4d:73:9b:1b:00:c4:6b:20:
75:e5:92:f2:97:92:4e:30:a8:81:58:28:74:6d:b2:
82:6c:2d:14:c3:d1:41:17:40:00:89:5e:63:b6:44:
54:09:13:19:be:ee:3d:bd:fa:68:0d:83:7d:67:11:
ee:87:d9:40:b7:8d:60:96:54:ce:a1:2b:ef:23:a2:
02:53:98:20:08:5d:32:6c:a9:c9:2b:08:f4:e6:7e:
6d:0b:45:b8:60:a6:fb:66:47:f7:e9:f1:2a:0f:c0:
03:68:bd:14:b1:98:d8:03:ec:20:32:b0:56:9a:71:
a0:f6:c8:02:f1:a8:13:8f:ba:bf:7b:8e:69:84:51:
07:92:47:cf:9d:d2:84:f8:11:a0:e3:2c:ee:a3:23:
22:b9:b6:c7:ee:b7:b0:e2:c0:6b:4a:c9:02:cd:e1:
f3:fb:25:b6:6f:71:63:05:d4:ee:2d:65:e3:e2:a7:
32:bb:08:3b:86:3c:3d:4d:d1:f0:1c:5b:66:12:bc:
71:22:a1:85:a8:eb:c7:33:09:54:93:68:28:2a:3f:
5d:60:09:54:c2:9c:1f:6c:ed:8f:92:c2:bc:27:4a:
fb:69:b4:e2:4c:ac:f5:c8:d9:fb:84:99:8d:56:c2:
a0:41:ac:eb:4b:4b:d1:50:d2:81:ca:a1:87:0f:a1:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:41:42:EA:FE:BC:9E:93:92:B7:DB:6B:2F:8B:18:25:9A:C5:DF
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:8a:67:05:63:53:57:59:2b:70:9b:e2:58:91:7e:71:e6:
00:1a:bc:25:41:8a:4a:3c:22:6b:53:9f:f0:fa:39:91:d2:9a:
9d:12:44:3a:f1:c1:c9:aa:cf:32:bd:6f:eb:71:9e:2e:fd:d7:
f6:0b:84:c7:eb:2a:42:3f:30:7e:10:16:b5:25:66:1b:16:0a:
bc:16:17:c2:96:6a:bd:06:87:d9:36:cf:38:1e:82:cc:09:1c:
5e:1d:ac:f0:77:1f:2a:0d:e5:16:f5:a6:95:14:1a:0f:7a:86:
c3:a9:0f:5a:3b:81:b7:aa:0e:d7:a1:2e:b5:50:7c:48:56:4a:
7e:37:98:40:3c:6f:f2:ef:e1:76:d9:e1:d8:73:6b:fd:6e:ab:
93:bb:5d:7c:ce:dd:a3:ba:39:c5:fc:f0:1c:b5:73:ec:e4:e2:
1b:cf:fc:f3:63:58:c2:8a:27:86:ea:88:c3:eb:66:3b:7f:6e:
4f:53:cd:33:b2:59:b8:aa:6e:03:50:2b:85:23:72:fc:e9:fc:
b2:1e:b8:69:c4:7c:1a:43:5b:f5:37:29:2f:96:50:2e:d8:0b:
e5:a7:9c:7c:94:58:19:76:9b:33:d4:e8:98:c4:64:b1:a4:c9:
b4:8c:bf:a3:32:82:43:ee:5f:30:fc:5e:ef:05:d9:98:c3:63:
43:ee:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client