Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: qm7vU7jo0p0P5sx4Hmdf2DYJvPsCQZ7tcLQfwpWHJCA=
Subject key identifier: 76:83:F6:65:82:A5:58:D3:4E:5B:F7:B0:B4:B1:4A:07:9F:A0:3D:61
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 0194BC72E2501B707072EB860C52DD4B01F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 074C
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: zjZOSMSHT8zAHFNGOiThkFy+WnRAB7A2QENcuZ1uS1w=)
2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:50:1b:70:70:72:eb:86:0c:52:dd:4b:01:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=7683f66582a558d34e5bf7b0b4b14a079fa03d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:ec:49:67:70:30:35:18:c3:b4:c5:12:97:
ec:fb:b7:e0:66:88:7d:30:99:79:c7:ee:d9:c0:b3:
f1:1c:ac:a7:ac:53:74:73:a7:ec:a2:b7:20:99:27:
e8:d9:25:a9:80:d4:f9:31:32:49:c2:f1:d8:f3:07:
54:10:39:08:9d:04:8e:36:5c:1b:86:15:cd:34:88:
ee:8b:e9:16:4b:0d:b0:75:5a:24:67:e4:43:4c:ba:
e7:db:ff:ce:25:c0:b3:fc:fb:3b:26:38:01:17:5c:
57:d8:84:dc:7b:6a:cd:34:48:e2:1d:b3:19:bb:79:
bf:74:e8:4b:78:de:97:70:ee:e2:c1:00:33:7f:0f:
e8:a0:4f:1d:6d:7d:91:25:0b:b9:a7:61:93:77:1e:
90:d6:b6:41:dc:91:be:60:72:01:f1:75:8a:e2:a9:
0a:95:99:63:15:ff:d7:0f:1e:d5:76:14:35:7f:2a:
0e:24:80:f2:66:8d:e7:cc:d7:ea:55:cc:8f:88:32:
2a:dc:59:b4:3b:83:22:af:4d:2e:e1:82:0b:ba:3f:
0b:75:f2:c4:33:f8:4a:06:52:76:10:6d:b7:b3:e3:
96:7e:1a:9d:d0:dd:e8:5d:1d:a5:08:28:7a:6a:be:
31:55:2e:61:67:af:63:b4:01:8a:4c:c8:7c:f6:2a:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:F6:65:82:A5:58:D3:4E:5B:F7:B0:B4:B1:4A:07:9F:A0:3D:61
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1d:24:b1:75:46:fe:29:44:70:22:18:61:ad:c5:d9:55:e1:
20:d9:26:27:ca:a9:76:92:52:a7:fb:a3:5c:84:63:da:ad:78:
b2:b2:0a:13:d1:73:5d:aa:1d:2c:cf:83:e9:aa:df:0e:c7:c2:
e0:e3:7f:9e:19:07:59:c5:dd:01:38:5c:46:54:7f:94:85:5d:
97:3b:49:1e:b1:f5:81:67:06:04:04:02:63:45:9e:e9:a5:f7:
b4:18:48:94:e2:ab:0a:22:27:45:c2:33:dd:57:5e:19:e9:c1:
6e:b2:15:83:dc:c8:24:71:7a:fb:93:fd:46:cd:62:7c:ef:d2:
72:cb:76:22:fa:26:78:42:c6:ba:3d:3d:08:03:6b:97:3f:fc:
a5:3a:77:1b:25:05:79:9b:df:d0:26:4a:86:97:f7:6b:52:38:
66:3e:6f:20:fb:1f:e3:4c:f3:62:21:3e:73:15:a2:c8:14:f3:
86:4c:c4:44:78:67:b6:e7:ec:bf:6d:d1:cd:13:fe:7d:f7:b1:
1a:02:6a:29:3b:46:a0:4d:42:44:21:21:40:ac:5f:11:23:b9:
39:e5:5a:ae:eb:79:bc:d0:91:4c:36:80:16:8e:e9:1a:fc:76:
23:9b:ad:1a:15:d0:6c:0c:af:7c:a8:81:06:82:41:13:d2:11:
56:df:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client