Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: cWghxplQP1SVZj08dWoP+Q2h045m0+DgzpT63xd5Rbk=
Subject key identifier: CB:2D:1D:C4:0E:56:3B:A5:CB:32:F6:B2:07:E6:FF:48:72:5F:24:0F
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0194BD858415FA3FBB2FCD23FEAE4F862432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0C6B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: tOKp3WK75NHr6YF9tMunZnbrD4ZzxK/VvgEQJ9waaQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:84:15:fa:3f:bb:2f:cd:23:fe:ae:4f:86:24:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=cb2d1dc40e563ba5cb32f6b207e6ff48725f240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:df:3a:46:d0:c8:6c:e3:ed:4c:16:ac:4c:
6b:63:2c:27:1c:7d:2d:73:bc:89:d5:1e:a2:52:73:
e5:d4:ae:49:00:24:d9:2f:d4:60:50:d3:00:d8:23:
49:d8:d4:12:6d:d8:6a:f4:21:47:cc:09:64:35:5b:
60:e6:9a:d0:54:2f:05:76:f5:67:2f:a3:d9:57:ce:
c9:70:2e:66:10:4c:a0:94:18:79:a9:a5:dc:67:17:
a5:7f:f9:cd:8f:62:79:79:64:39:62:f1:fd:32:d7:
15:b5:d2:16:f6:10:ea:e0:77:42:0b:50:dd:bf:ac:
24:a1:05:1a:e0:44:30:a9:a4:c5:72:df:64:40:ba:
47:eb:ce:03:67:0d:2f:05:1e:34:c6:da:3c:e2:d6:
5b:30:9b:bf:c6:37:23:60:66:fa:2a:5c:ce:47:fd:
ec:b0:56:cc:7f:c9:21:ab:56:ef:d4:6e:03:a3:5b:
18:83:d3:b8:44:1b:df:4d:6d:f3:e5:0a:f3:44:4c:
27:31:b7:f6:15:ef:d2:0b:c8:1a:b3:6f:15:0a:75:
89:ca:4e:80:87:06:ed:11:b5:a9:8e:97:b9:68:2e:
92:a4:90:a4:7b:44:d7:cc:92:7b:56:dd:65:5c:92:
fd:e4:ec:c1:73:26:0c:85:7d:04:d7:ee:64:73:2e:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2D:1D:C4:0E:56:3B:A5:CB:32:F6:B2:07:E6:FF:48:72:5F:24:0F
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:71:41:dd:01:0b:48:79:65:41:76:fa:98:e4:2b:5b:4a:
93:17:5c:4e:45:e0:2f:df:88:9a:52:0f:fa:0c:ee:6d:80:dc:
ce:b1:01:dc:5a:37:4c:0b:9d:aa:55:ae:93:49:79:1e:84:30:
82:ce:5e:bc:1f:2a:ed:4c:0f:bb:2a:48:b9:fa:1c:90:7b:f6:
fe:60:81:2f:7c:9c:35:5d:97:30:7e:32:7d:52:ce:5e:57:01:
22:d6:82:e8:de:c1:64:6e:11:65:76:2f:88:c7:60:bd:8c:87:
6c:1a:6a:ff:f6:4b:5f:6f:ed:cc:cf:ef:cf:87:a8:c4:84:83:
a6:68:77:a6:75:38:ae:f0:23:57:8d:f7:07:95:fa:52:05:a2:
f3:bc:28:9a:77:8b:19:58:a4:78:74:49:02:49:8a:4e:32:f8:
81:d8:cb:ce:eb:cb:fa:4d:d8:3a:88:a3:69:93:79:48:f5:aa:
89:6c:c1:1a:84:79:22:61:6b:58:88:fb:d7:68:e5:b7:e7:3c:
ac:e0:96:2b:c5:34:d8:9f:28:a2:24:1e:30:fc:2c:b9:80:af:
e4:9d:ef:f6:0d:9b:ea:8f:5a:fa:e8:11:d7:dd:12:be:ca:58:
95:d2:a8:7d:48:41:11:6c:16:c9:20:2e:62:aa:17:06:f4:b3:
ae:f5:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:36 2025 by rpki-client