Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: kIL/dF7rhH/CqAgG0wTAdqFNIOyPTavvfQ/V225+AT0=
Subject key identifier: 4F:C1:85:E1:44:C4:1A:31:7A:4B:CF:D6:32:E3:55:86:C7:17:C2:C1
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 0194BCA98762655C76B57B9EAA02F9907718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0BDF
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: 0wbObVGnqPVrThbRRYYSCpY053BOhEaVs0yDwCdVl0c=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:62:65:5c:76:b5:7b:9e:aa:02:f9:90:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=4fc185e144c41a317a4bcfd632e35586c717c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:91:c9:df:e7:75:4b:da:c3:19:a4:4a:03:
4d:9c:74:e8:72:38:d4:66:9d:63:04:ce:d6:d2:c7:
07:a1:7c:40:ae:b4:96:e9:2f:ba:89:25:08:da:09:
69:d5:0d:42:bc:9e:6a:c5:e3:07:00:0d:57:4f:53:
14:01:8a:5a:8e:04:00:0b:ad:14:57:bf:9f:13:6a:
33:20:91:93:84:1a:a3:62:1f:1a:e9:b8:20:b3:21:
1d:f1:ec:83:81:a9:45:42:e0:12:75:da:d6:04:4a:
4e:d9:b1:f0:28:b5:1c:a5:e3:c5:a9:83:99:ed:13:
97:fe:25:39:a8:e6:61:2d:bd:dd:2e:81:19:b6:0a:
0a:4c:9b:b9:0e:b1:42:2c:6b:16:e8:20:05:61:0d:
dd:f5:84:da:33:c3:44:be:51:fa:8f:0a:42:92:2d:
80:85:2e:a7:8f:2a:c5:3f:1b:f9:86:9e:23:4f:d0:
b7:5e:a3:17:17:84:4a:04:57:fa:91:d2:d7:64:9e:
af:81:83:fa:0d:1c:b4:3b:6b:63:79:b4:63:13:1b:
f3:49:d8:03:07:72:22:a4:7c:d0:b5:61:b7:33:06:
68:4d:75:41:b1:64:9c:90:c0:b2:7a:16:fc:97:6f:
1e:0f:29:f0:cd:e5:28:34:86:bf:9d:34:59:0b:7e:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:85:E1:44:C4:1A:31:7A:4B:CF:D6:32:E3:55:86:C7:17:C2:C1
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:49:bf:72:ec:78:58:48:21:6f:37:02:53:9e:3d:aa:c4:70:
68:81:d2:c9:5a:c8:ad:ef:f6:2e:be:a4:4f:8f:c1:62:bd:77:
1a:bd:f5:db:5a:d5:1d:9e:79:c8:47:49:b9:1b:ef:4a:db:d7:
cb:f2:cf:be:13:6a:50:06:27:80:d3:c0:27:09:08:64:87:ec:
ea:35:92:e6:33:f8:c9:90:dd:13:56:06:05:2a:ee:c8:07:70:
51:33:1d:09:f4:75:98:c6:76:6b:1f:5b:db:1a:2a:a9:6c:ae:
cd:6c:2f:d0:07:36:42:1f:26:3d:5c:07:3d:ab:67:fc:fa:1a:
f3:2a:65:f9:a5:ae:a4:90:22:f3:e5:a4:3d:cc:a5:ce:3c:bd:
4f:43:ad:44:8c:a1:53:c5:3a:ff:7c:93:09:c0:42:2e:9a:d9:
02:22:cb:01:78:f7:c3:1d:de:02:ce:11:c2:3a:d1:b8:04:16:
81:6f:dc:8d:d1:86:4e:37:87:75:ec:c0:50:f9:6f:f2:69:f7:
fc:f3:3a:a0:f2:7a:5f:43:6b:f6:75:f5:e3:f2:38:33:9d:83:
90:18:0e:bd:06:5d:98:67:04:83:1c:e2:71:9d:ff:bc:92:98:
4d:c3:e0:36:08:f1:cd:4f:40:4d:32:5b:51:57:64:f2:c8:6d:
52:fd:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:10 2025 by rpki-client