Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: 3BzBz5zZqtcPMaEKaUeN9kdJJwspnyw9tkUf6+Nepmk=
Subject key identifier: FC:0F:B8:DB:BE:52:A9:6A:2E:18:9E:48:81:AF:1E:AC:65:15:1A:6B
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 0194BC3C26D2CEEB8C15460607597BC6713C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0797
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: 1JhWCz8+ykkJv2lCO/ZfbcfkztwcnzQK34au3JAHH8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:d2:ce:eb:8c:15:46:06:07:59:7b:c6:71:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=fc0fb8dbbe52a96a2e189e4881af1eac65151a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:51:82:06:a4:10:b5:55:23:19:fd:6d:b4:
e2:5f:59:47:e9:dc:8d:08:c0:a4:47:38:51:cc:08:
62:3f:91:c9:00:13:9b:6d:56:f3:bb:94:74:ee:17:
92:1b:6b:53:a4:5a:50:c6:e6:d8:fa:ae:d0:b2:be:
0c:86:9b:c5:75:60:19:98:82:c2:9a:8b:28:77:bb:
6e:ba:6c:34:c1:0c:0d:94:cb:fa:f7:5b:4c:a3:bc:
44:ce:6a:d1:d8:37:5f:68:18:0d:cd:21:67:25:6a:
fe:90:46:d5:ad:7f:15:3c:8c:36:c8:27:04:e4:11:
f2:8a:4f:62:61:5b:0d:f1:22:41:e6:df:a3:ef:e8:
e8:7e:f8:27:06:63:96:b2:7e:fd:bc:0b:f2:54:dd:
17:4a:34:10:3d:64:6d:2b:bc:2d:c4:79:5b:17:ec:
14:be:3c:16:85:97:30:5d:00:45:c1:56:93:7f:18:
e4:60:86:21:92:be:c6:4b:9e:d1:f9:5a:f5:f7:31:
8e:a3:c5:79:45:dd:53:fe:39:ef:43:4f:d1:7e:60:
a4:81:f9:23:04:63:7e:cf:fb:2b:d5:73:0f:4d:0c:
c7:84:90:0c:a5:37:6e:f1:9b:be:7a:19:0b:6e:31:
4b:8f:b4:fa:b3:3a:86:45:cb:c1:67:f8:97:78:e8:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:B8:DB:BE:52:A9:6A:2E:18:9E:48:81:AF:1E:AC:65:15:1A:6B
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c7:db:a7:5f:69:2d:cd:6b:8e:e1:2d:a8:ad:58:e2:28:71:
dc:ca:e7:e3:8f:43:13:fc:3c:65:c5:13:95:a0:71:34:b4:e7:
b3:d4:4c:41:84:11:3b:db:11:fd:a4:01:41:19:43:42:0a:4a:
88:72:5a:99:64:1d:18:fe:15:3c:8f:ac:aa:0f:90:8a:cf:92:
47:10:12:bc:2b:39:4e:b2:5f:df:19:39:3c:ff:b4:9d:3f:c3:
d1:af:8f:2d:9e:a5:1a:92:6d:27:79:50:cb:af:a9:07:c4:71:
0c:11:11:e0:a6:9d:0a:fb:41:3a:59:7b:83:0b:22:b5:5c:da:
33:b1:af:5b:de:36:2e:c7:34:5d:63:4c:5c:45:2c:d6:59:6d:
4d:b8:04:b0:11:0e:47:0b:41:16:e8:65:3d:e1:b2:de:66:5c:
8f:54:81:ec:d3:c7:19:90:1b:ba:71:e8:80:48:cd:92:e6:6f:
9d:4c:13:4d:08:e3:32:df:60:58:ad:4c:f8:a5:c9:d3:c5:aa:
01:44:ea:6e:38:e7:ca:94:c4:e6:51:bd:2c:10:90:87:2b:ed:
ff:c4:eb:71:c2:a2:99:9d:a4:ab:6e:6a:54:4d:35:d1:f9:64:
ff:77:79:a5:2e:ab:8f:4d:45:6c:86:bf:11:42:3d:e7:3a:67:
df:b1:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:51 2025 by rpki-client