Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier: Rm5xoL/rFNmL+Nz27rv5ulnYJKnxi1Hfv6jEerrKYGE=
Subject key identifier: A5:5F:6D:E9:A2:9D:03:FE:B0:62:5B:2B:A7:07:51:DA:AC:CA:18:37
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 0194BC3C91907D6175C9ABB0671EF5A1DA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number: 05B1
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: DJCyyjiUp9nwdpKQzcIqKi2kXBwi6IfELjYzhMzNW5g=)
2: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:90:7d:61:75:c9:ab:b0:67:1e:f5:a1:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=a55f6de9a29d03feb0625b2ba70751daacca1837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:cb:35:7c:da:d3:fe:71:c9:c5:17:16:4c:
d0:ac:84:53:54:96:c3:62:a1:6e:26:e9:26:f5:a2:
fb:d2:0a:bf:f8:ae:11:67:23:b1:43:52:8e:5b:e9:
e0:d6:4b:41:90:60:85:89:4a:b2:2a:ce:58:27:f4:
8f:3b:7f:6a:d6:2a:29:d7:9f:38:c5:ae:d0:8d:d5:
b8:bf:c6:9e:02:ed:c7:0c:8b:ac:0e:e9:f9:a1:e3:
98:7a:5c:dd:49:65:10:6f:f2:6c:12:7a:74:1c:64:
69:b8:2b:8b:e1:50:c5:b5:f8:e1:2d:86:d8:a5:97:
41:ac:a8:88:fc:5f:43:c0:99:7c:be:4e:b7:08:10:
3b:4c:f7:25:db:13:b1:63:55:1e:03:02:db:0b:6a:
b0:98:86:9c:ec:30:53:73:f6:dd:f4:08:d7:44:5c:
f9:11:02:20:fb:92:2c:e6:3c:41:d1:1c:d4:ec:3d:
85:5f:57:6d:44:a5:cf:ab:52:bc:06:b7:f3:57:12:
9b:99:f0:b3:d6:5a:47:47:11:b2:35:f8:2a:45:01:
58:51:b4:20:09:31:bc:0e:23:ec:a8:63:f7:c3:32:
c8:62:ec:ec:6e:17:6b:f7:a0:ec:fe:fe:45:e5:15:
66:9f:8e:6b:ea:72:6c:ac:8b:13:03:d5:79:5e:2c:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:6D:E9:A2:9D:03:FE:B0:62:5B:2B:A7:07:51:DA:AC:CA:18:37
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ae:6d:da:ab:33:82:61:0e:a3:8f:91:e4:3f:8a:20:da:65:
32:7f:72:64:d3:29:09:39:2a:7d:6d:02:a5:ae:e0:3b:43:00:
63:75:ea:76:94:1e:f4:a3:fd:c4:c9:bd:b6:0c:51:06:a8:55:
23:27:43:14:38:c3:d0:fd:45:6e:3c:df:12:a5:45:1a:4f:7a:
4f:a6:f2:ea:1b:16:71:59:c9:76:37:6f:28:84:21:e4:97:b7:
c9:82:3d:3d:2c:e6:fd:fe:a0:c2:be:21:a2:0b:a8:8e:72:47:
5e:21:e4:90:68:07:03:3c:8c:bd:97:bf:95:2d:5c:48:d0:6d:
8e:82:c1:8e:16:93:e1:62:3a:d5:ec:5f:19:29:fd:54:e6:f0:
f3:c2:bf:92:0f:2b:4b:b2:64:85:2d:6c:b6:f6:bc:7f:87:9a:
4c:a3:59:7e:f9:01:86:9e:81:5a:12:4c:9c:6e:8f:37:6a:f1:
5f:31:3c:b8:b7:18:2f:62:80:54:39:a8:89:dd:50:af:cb:bc:
b5:8d:2d:9a:6c:35:6b:e1:86:b0:bf:7c:8f:dc:71:0a:24:92:
3d:be:9c:f8:99:ac:00:83:b8:7e:eb:25:52:40:9a:b6:4c:a6:
0f:22:d6:a3:7f:05:50:36:07:19:0f:f0:c4:4e:f6:44:fa:ad:
59:54:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client