Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: i29UtUGfSljM40hz7NQZF6c2VHOM9L3MhNR4eoVdRjc=
Subject key identifier: 75:B2:B2:9C:77:7A:64:80:D3:3E:F9:65:A8:3F:0B:C5:37:CC:37:EF
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 0194BC04D549207CBF9661FC8FDD244DBB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: r6OfBqxK021ATshNDIuRWm8jft/eNtWMbxYsNc7J4BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:49:20:7c:bf:96:61:fc:8f:dd:24:4d:bb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=75b2b29c777a6480d33ef965a83f0bc537cc37ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:e3:3f:4d:cd:f4:d8:9c:b3:0b:3d:d1:c2:
54:2d:e0:6e:91:cc:8a:c7:01:20:6c:70:f3:15:36:
90:9a:71:e6:dd:00:61:13:0b:ac:ea:73:a3:30:a8:
bc:23:86:d8:7a:13:92:7b:cc:fa:3e:e4:09:2d:b7:
62:33:11:15:53:38:06:2a:8c:11:1d:a1:9d:15:f8:
3a:8f:bc:8d:df:51:79:a6:dc:42:90:24:c0:54:c4:
0b:50:04:23:75:f6:84:45:54:f1:d5:d5:d9:77:1d:
52:37:c4:c6:d7:8d:df:c2:4c:c3:06:11:45:0f:16:
87:2a:0a:45:d9:34:10:ec:8f:e8:9b:41:6c:71:cb:
0d:ff:26:da:19:31:79:48:20:e1:af:56:ef:44:c6:
f9:d1:1d:7d:8c:9b:db:e7:fb:4c:5c:97:9d:97:34:
2a:46:31:ab:b8:ee:e0:ee:cc:72:95:37:44:d4:f1:
e7:b5:64:bd:0a:a6:ba:30:42:34:10:ad:95:29:36:
62:ec:3d:7f:f7:d1:b8:a2:7a:d8:4f:a8:05:c9:54:
4c:1a:f3:00:e1:57:c7:9a:d1:a2:57:69:72:2d:ac:
aa:25:85:82:50:54:02:50:9c:d6:77:64:47:d4:e3:
bd:4a:2c:ec:e5:86:2d:96:10:8b:41:53:f4:e8:c3:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:B2:9C:77:7A:64:80:D3:3E:F9:65:A8:3F:0B:C5:37:CC:37:EF
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:7b:46:c9:13:3c:e0:7d:74:33:25:35:21:f7:cd:52:04:
8b:3d:36:33:f2:73:36:50:fa:15:b8:18:7a:36:cb:56:86:19:
4c:17:a9:df:9f:7c:0d:50:ac:b1:19:f4:6a:07:2f:16:28:d1:
33:ea:2e:c6:35:5f:83:c0:9a:b1:d7:f3:6a:67:dd:df:2e:7a:
f3:f9:17:bc:33:28:74:a4:7b:b8:10:1b:56:b2:c4:5c:ff:8b:
dc:61:19:65:9a:65:3e:08:15:3d:78:51:09:e3:cf:c9:95:cf:
5e:3e:33:02:b2:cb:d7:d7:ad:d6:d7:0a:e7:c3:58:f9:ba:c0:
5c:d8:91:ea:35:08:5f:c5:7f:16:8d:ed:46:63:fa:a7:25:ca:
4d:d5:da:d3:29:cc:f1:19:16:2e:a6:5b:47:db:d2:9a:fe:80:
ec:0e:0e:a5:4d:f9:d1:48:87:aa:6c:03:6a:18:c9:44:00:e5:
87:2d:63:b5:f3:8f:74:c1:36:51:a1:5e:bb:15:67:bc:68:61:
a2:93:d0:b4:71:d6:88:15:70:d5:b1:e0:98:ae:61:0c:33:a9:
57:76:5b:02:49:e9:32:a2:7e:fc:3c:66:cb:7e:63:d8:2c:2e:
ee:b6:72:d5:5b:4a:5b:6b:80:10:4d:e9:9a:54:d3:90:67:31:
80:c8:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client