Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: dzxFA5D0aLJrUvobLOLMQyvA6O/6lja4wyM9emQtDM4=
Subject key identifier: 51:97:10:C6:65:CF:B8:E7:6F:42:D5:ED:2D:E3:C5:01:38:97:A6:EB
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 0194BD17A8B7A057DC241314C1FB0D311743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: TCeGBV81TPCfuRkKWRpnv1RghAE0yOXask8/cNoE3Qc=)
2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a8:b7:a0:57:dc:24:13:14:c1:fb:0d:31:17:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=519710c665cfb8e76f42d5ed2de3c5013897a6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:47:7a:bf:8a:bc:95:0e:b5:f1:2a:3b:96:
68:17:85:ea:eb:47:39:c1:d5:80:c9:05:c6:be:a3:
27:0a:9d:c1:fe:e3:72:bd:62:84:12:63:2e:61:ac:
e3:e4:30:88:9e:06:25:4b:40:3e:ac:6b:c1:7b:91:
94:ef:4a:6b:3c:20:51:9d:13:0c:ab:fd:77:ef:95:
70:88:1e:5e:18:9e:8d:29:c6:e1:20:ba:f9:66:c0:
0c:cc:04:d7:57:9f:db:85:ee:15:e3:92:e8:f9:23:
a8:90:e4:ee:a9:a3:67:66:25:5e:11:77:cc:a9:5f:
6e:fd:79:52:6c:f0:50:da:db:56:54:56:cd:87:01:
7d:40:e0:bd:24:0c:1b:00:38:47:ce:2f:93:5b:fd:
e5:f5:50:03:c8:74:a7:e4:52:1b:31:d4:3a:b9:ef:
1e:da:e4:04:3a:e5:46:cd:79:b7:87:1e:ac:df:7b:
53:25:74:b9:be:4c:d3:18:3c:61:0c:a4:d8:13:4d:
bf:af:28:a3:09:ae:00:5b:77:95:5b:b8:9b:43:a6:
ed:d6:4a:5b:d2:4b:00:17:7e:b3:27:fd:a1:57:03:
aa:70:5b:4c:eb:61:43:f2:fd:6c:2a:9e:15:86:d6:
b8:a4:8a:3d:eb:48:11:8e:29:b1:66:af:64:75:0e:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:10:C6:65:CF:B8:E7:6F:42:D5:ED:2D:E3:C5:01:38:97:A6:EB
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:ce:97:cc:8f:42:bb:28:80:03:c6:5b:f4:8a:dc:8b:a4:
c8:a4:ae:ed:9e:9d:44:55:99:16:b3:74:e4:f7:97:d4:d1:ab:
a3:94:a7:6f:5c:cb:a3:a4:69:c6:a1:f7:8e:ad:9e:9c:58:d5:
dd:ab:ea:81:8d:18:77:e9:59:19:5c:b5:97:52:3a:37:d2:e6:
e6:81:dd:ad:d7:04:dc:75:c5:e1:a2:8c:23:37:b7:86:66:0a:
d8:a6:b0:12:7e:b3:df:1d:d8:d2:30:bf:cc:78:52:2d:78:ab:
fa:bb:07:1c:84:bb:3f:73:6c:bb:67:a3:c1:46:80:57:50:d1:
bc:89:e2:8e:4d:71:e9:1f:55:a4:b5:59:dc:b4:5c:c6:00:2c:
c6:ee:73:12:a5:00:24:00:d5:17:f5:44:2d:89:bc:b4:20:d6:
9f:65:76:4b:0d:df:b8:15:2f:38:d5:1d:d6:48:36:de:48:61:
df:d7:6a:c7:24:c8:eb:38:53:1f:59:29:ae:b0:7f:27:62:22:
a9:68:f8:bb:fa:0f:46:d4:06:a8:a1:13:a2:54:f8:d4:74:a8:
9b:27:f7:51:8d:1c:a0:60:d9:94:fd:50:1f:df:55:e5:7b:ce:
47:17:a8:19:bb:6a:f0:4e:3b:87:55:da:de:4f:2e:c9:68:85:
4b:71:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:12:59 2025 by rpki-client