Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: 1NUM4ymASWi70uuNCFYa8kHDbxUwHfCBaq11SBaLoi8=
Subject key identifier: 86:7A:31:B8:10:35:99:0F:0B:FF:B5:57:D0:B1:96:63:A4:6C:FF:85
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 0194BCA9CE7F188FA983EE3C8B832B0E05F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: GRyNep5RKyPWueDEDr9dTjkXYp/A3QP7cvAKRCKRVzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:7f:18:8f:a9:83:ee:3c:8b:83:2b:0e:05:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=867a31b81035990f0bffb557d0b19663a46cff85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:8e:fc:81:b2:6e:df:17:fa:ff:51:58:ce:
8b:39:63:d2:4a:eb:a0:ea:db:a0:d6:c6:31:7f:48:
68:00:e9:52:2c:de:d1:1c:03:95:15:fe:1c:cc:99:
0a:f8:2b:5b:72:c6:82:84:e9:58:3d:67:7b:74:fd:
bc:16:64:c8:ab:96:9e:9e:87:92:e3:aa:20:d1:95:
1a:0d:f4:e9:7d:c7:e1:d9:5a:8e:d2:58:e8:94:65:
74:4c:7b:39:b0:f3:d4:53:2b:7c:81:09:d1:7c:a2:
a1:44:95:ee:b2:c4:2b:1b:aa:bc:55:2f:9b:88:db:
3e:26:c5:64:90:30:69:13:40:93:f3:99:4a:17:e4:
56:d7:6b:dc:11:5e:64:68:53:c1:de:c1:20:41:c7:
98:c7:8c:23:b3:34:79:04:4c:8c:ad:4c:e4:51:5c:
00:6f:38:40:4c:e0:35:70:2f:f8:5e:9d:26:04:c0:
89:ae:3a:ef:b4:4e:0f:b2:27:3d:ba:fc:9a:1c:2f:
76:c9:f4:8c:52:4e:0d:80:71:87:04:19:50:3e:61:
25:8f:2e:6b:a3:bc:49:46:a6:7c:2a:e2:d9:c1:49:
b5:63:45:7c:84:b6:35:97:77:4d:99:5c:67:9e:a6:
d8:a1:46:a7:2f:42:64:66:a7:0a:25:81:b5:ef:5a:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7A:31:B8:10:35:99:0F:0B:FF:B5:57:D0:B1:96:63:A4:6C:FF:85
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:f5:51:46:51:25:e2:67:12:4a:f6:f5:15:b1:0c:5f:05:
fb:42:6d:d4:93:57:26:97:37:fc:3a:65:64:9b:2e:bb:dd:f8:
b8:af:40:ad:e3:4c:05:57:7b:73:25:dc:b5:69:a7:65:7e:08:
c7:90:78:21:e5:84:cd:66:9b:d9:86:bf:e7:d8:9f:74:fb:c6:
8b:e1:97:d0:a5:5f:35:a0:08:fd:b5:90:d4:81:c6:7e:05:80:
f4:ae:ba:c6:0f:32:2f:79:2e:94:bb:ef:b6:a9:48:4b:90:af:
51:1e:2e:5d:bf:9f:5c:5e:1e:0a:16:b7:8a:12:61:15:4e:8d:
2f:41:81:a5:9c:f8:37:d0:b2:a6:c0:2b:4d:91:df:6e:d5:b5:
16:bc:66:8a:61:15:74:6a:dc:f0:6b:3b:f9:c5:d1:cf:68:8f:
90:c4:22:56:aa:56:3b:7d:cf:47:06:df:3a:4f:2c:db:cc:96:
16:f6:aa:be:12:b4:ed:fd:d2:e5:87:d2:b9:84:d0:8a:e2:50:
d8:8e:7c:05:8c:0a:e9:69:67:3c:26:ba:47:bc:9f:e0:a7:fb:
9a:a7:90:64:97:f6:e6:b8:a0:9d:94:46:b1:7f:16:ca:c7:c9:
97:5b:39:56:84:03:a0:c3:20:1d:b7:4a:19:6e:76:ea:fa:88:
a8:53:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:28:51 2025 by rpki-client