Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: 62B/SYH28atQyRB0gcLNuybsLmniZ2QMmrokojcxVW0=
Subject key identifier: AC:0A:91:41:7C:C1:75:2B:56:06:CA:A4:E3:29:2B:15:07:DF:B2:DA
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 0194BCA9A2FAB8631983AFCFD8167A2DA27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: iIaeJ9q23Oxn68jSD0eBIdxErvn2po5k1o3HfknmM0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:fa:b8:63:19:83:af:cf:d8:16:7a:2d:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=ac0a91417cc1752b5606caa4e3292b1507dfb2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:13:8e:93:85:4d:9c:85:74:ec:3b:ee:ba:
3f:0d:4d:c1:29:32:f2:1c:d2:29:a2:69:e4:6c:d9:
21:72:79:e7:f4:3f:c6:fa:d0:75:30:20:ea:95:9d:
59:cc:67:1e:a9:9f:6f:1f:c0:f0:43:53:bf:70:91:
a6:f1:db:b3:ef:c5:5d:39:00:a4:95:2f:c4:d3:d5:
c8:b5:4d:af:ef:fd:05:9d:aa:db:cd:c1:ec:83:92:
e4:41:7b:b2:0a:34:db:3b:c4:80:e6:56:ec:ed:62:
95:01:c0:cd:ca:fd:3b:0d:49:3f:93:5f:0e:fc:23:
a4:88:35:ff:0f:de:2f:70:44:a4:df:60:17:ac:75:
ad:91:6b:84:2f:05:48:91:89:d3:62:b8:29:f0:91:
45:6d:02:5c:65:0c:a6:2f:58:59:51:b3:b2:d8:c3:
78:17:25:50:07:40:30:18:81:0b:09:84:31:55:c3:
22:59:22:14:4c:80:b5:8a:04:f5:c2:1e:8d:54:44:
2f:70:0f:a4:42:bb:41:b7:74:8c:95:ba:4f:ed:97:
da:38:2a:da:92:79:5f:c9:bb:c5:81:91:78:92:49:
3f:f4:53:0c:cf:1c:e6:1f:b1:80:ac:ee:38:c8:68:
b3:20:66:91:3e:28:16:cd:bf:a9:f9:45:19:56:27:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0A:91:41:7C:C1:75:2B:56:06:CA:A4:E3:29:2B:15:07:DF:B2:DA
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:39:61:13:be:4e:a7:36:3d:ee:31:6e:9b:01:59:09:7d:8c:
73:b2:3f:9c:be:f9:31:1e:f4:ed:81:6d:e7:f6:d2:c9:11:c4:
7d:46:75:98:68:50:8f:a1:6d:63:14:9c:a2:36:66:23:58:97:
34:80:87:31:e1:4d:27:80:d2:df:36:c4:07:34:ab:84:ce:8d:
cf:98:c8:18:7b:a5:bd:c7:b4:1a:fe:3f:5f:61:44:08:18:a2:
52:03:43:de:05:86:1d:94:b0:8b:ad:f7:86:ad:77:b1:da:82:
1d:a8:cb:9a:a6:57:38:e7:94:e9:55:c1:6d:2d:b6:57:cb:d4:
d4:59:44:f1:d9:ac:03:d6:d3:e4:65:b6:e4:b0:b9:7f:44:30:
6c:ce:da:fe:7c:0a:ec:20:49:97:aa:d6:c8:ff:9e:e9:78:35:
08:02:bb:1a:6c:d7:5a:76:df:66:b1:0a:9a:59:cc:6a:3d:3d:
6e:4b:e6:e5:9e:4f:5c:00:c9:84:94:0a:48:05:7c:45:00:87:
a5:b9:51:93:fe:08:b0:02:38:85:7c:8b:aa:6d:82:19:c9:13:
97:1a:bc:32:8d:5e:f4:30:01:f9:45:c1:04:0a:52:5f:e5:d7:
1c:8c:88:25:2c:24:35:a7:27:20:e4:bd:3c:b4:06:be:97:c2:
71:77:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:58 2025 by rpki-client