Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: TykmHVicl0MxNNnhzhO6qiobNTWeDQCQcdzIVUkd+bc=
Subject key identifier: 0F:BB:07:99:6A:A1:F3:15:60:C8:DB:69:0D:16:00:7A:22:06:A1:00
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 0194BD1765B3249ACDEB28A8A84BEC866749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: 4FO5DZ/GcxPfeHFZlWzpoa9AvAousfM+vfdjIS5uZbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:65:b3:24:9a:cd:eb:28:a8:a8:4b:ec:86:67:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=0fbb07996aa1f31560c8db690d16007a2206a100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:5c:24:1a:d8:8f:89:0b:a0:d5:99:df:a7:
20:3c:bd:63:98:0c:cc:c9:ed:ea:4a:a6:b0:9e:df:
fd:7c:92:89:e9:43:ee:7e:dc:c1:f9:3d:b4:92:94:
19:3f:d3:17:ad:8f:68:68:83:5f:41:47:64:98:d3:
01:32:da:73:ac:1e:cf:60:f5:c0:27:a6:01:09:77:
e1:cf:38:70:74:62:d8:00:fb:97:89:fa:99:1d:45:
dd:e0:74:fb:25:48:68:90:a6:2f:8a:94:4a:c2:b4:
76:ac:2f:34:9c:56:5d:7d:7d:e5:d6:cc:93:25:12:
4a:4c:49:3e:b3:4c:20:2d:43:f1:76:ba:1b:3c:0a:
60:f5:e3:35:6b:eb:71:30:ef:6b:47:59:de:36:4f:
69:b0:81:fb:76:93:d5:2f:56:a6:04:9e:08:d0:37:
d1:65:eb:94:99:62:59:6a:66:4e:09:77:cc:e3:b7:
2c:94:8a:e2:43:54:27:36:75:8e:9b:09:ec:1f:b5:
c0:a6:6c:6e:d8:4f:cd:4c:73:b1:19:a7:1c:38:43:
5e:e5:6c:ae:d7:28:8c:27:6d:bb:3b:1f:e5:45:db:
cd:27:02:c7:8a:e4:4b:b8:08:ce:dd:58:2b:2f:46:
41:eb:1c:74:c0:cb:db:da:10:2f:42:8c:a5:59:ca:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:07:99:6A:A1:F3:15:60:C8:DB:69:0D:16:00:7A:22:06:A1:00
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:75:1b:45:46:fe:7f:83:bc:50:95:6c:1e:66:48:e6:c3:4a:
26:b7:e2:f9:2e:8b:49:fa:aa:c4:b1:99:12:a9:9e:1a:f0:1d:
73:81:5d:12:53:e4:10:b9:e8:25:b5:48:09:fe:05:da:3e:35:
7f:23:2d:df:cc:be:32:42:3c:26:e3:07:23:b0:11:58:23:47:
0d:e9:aa:08:43:01:72:77:15:a6:d2:f6:cb:ed:cd:e1:a3:a2:
fa:d0:3f:ba:e6:85:f4:4c:a4:0b:be:fc:2b:4d:59:bf:ac:55:
95:9d:78:60:bd:b0:de:e4:a3:77:1b:b6:46:16:e6:c3:71:a9:
e1:67:06:75:cc:ca:52:ef:90:01:e6:67:a3:07:03:a7:7a:72:
37:c7:29:b2:c7:b6:ad:2c:eb:8c:98:0d:f3:71:ff:43:74:b1:
3c:4d:6d:22:f4:1c:06:de:c1:11:2e:76:a3:a8:b5:9e:54:62:
ca:3e:74:af:e9:0a:40:4f:98:77:f6:8c:b3:a4:e2:28:1a:49:
4d:f2:fa:de:3a:bb:e5:ba:ab:b4:e3:ce:6a:f5:1e:d4:ea:6c:
fc:a9:2e:70:a7:96:11:f0:72:44:a7:9d:77:6d:4e:97:00:46:
07:84:36:60:34:85:13:7a:da:f2:22:ea:62:50:10:2e:64:88:
ac:a7:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:25 2025 by rpki-client