Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: T53tfzEsOqHChkz9AxZRQD7AYQty2UgMMeaYwZ6nNdE=
Subject key identifier: E8:0A:4A:97:2E:0C:5F:EC:6C:88:23:33:CC:CE:99:24:AC:8B:FB:D9
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 0194BD4E7B0212A571DA43D5D7C1C320E617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: UhsmaxCJnaxEsaR6nDxF0qr08JkbvFMAMS4lpCB+6k8=)
3: WlRHIXptT_S64nV3DW81yd2ZZKE.roa (hash: DKPLrRVX61PvJUwFkp98O053sj3SrffGgI9/nDZtIsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:02:12:a5:71:da:43:d5:d7:c1:c3:20:e6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=e80a4a972e0c5fec6c882333ccce9924ac8bfbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:0f:f4:c2:d5:60:c5:59:84:6f:40:1b:83:
e3:81:81:b2:97:57:7c:75:7c:82:49:61:ef:4c:8b:
fd:66:f4:82:10:d6:86:0b:ec:dc:90:97:72:c9:b9:
d2:fc:3d:18:3e:08:e7:62:d9:d4:60:c4:7d:22:cc:
6b:0e:e0:9c:bf:38:ab:05:7d:ef:4c:05:61:1b:92:
b1:6b:b3:0a:99:6d:31:a3:64:1b:3f:62:2e:b8:32:
5c:fe:d0:94:e8:a1:6c:ea:5c:e5:fe:33:e6:23:cd:
fe:b6:1e:3b:81:52:0b:c5:3f:1b:88:1b:41:35:aa:
ef:ac:6e:96:4d:db:b4:89:1a:7f:12:7d:14:14:99:
6e:6a:cd:d6:0d:27:7a:5f:e6:58:88:59:34:a3:42:
82:46:bd:28:06:fa:94:43:f7:db:1c:84:ee:11:75:
39:f2:0d:af:ee:01:73:ea:ab:55:9d:01:c2:84:78:
3e:dd:df:5e:2e:be:50:3b:ac:27:7f:45:e7:7b:cf:
40:b4:57:dd:a6:a1:f7:28:37:1c:5f:cb:05:e0:c1:
3e:eb:ce:fa:58:0f:f8:86:67:19:22:5f:94:d4:be:
27:5c:54:b0:fe:ac:b7:c0:c3:31:3d:7c:91:c9:7d:
9a:24:98:1e:41:4c:0d:ba:e6:e2:7f:67:55:03:68:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0A:4A:97:2E:0C:5F:EC:6C:88:23:33:CC:CE:99:24:AC:8B:FB:D9
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d9:d6:27:cf:b3:5f:13:ca:ad:1f:ba:47:78:54:fe:ea:97:
05:ea:72:95:f8:bc:83:b5:91:a0:a9:97:96:51:ce:e5:a6:0f:
50:a5:8a:90:7f:68:ea:e1:f5:b2:81:08:8b:d4:e9:83:4f:b1:
91:2a:b6:33:c0:d4:95:2b:59:da:ec:98:cb:f0:56:4d:17:24:
da:83:49:33:f4:5a:d1:a5:99:a7:1f:da:38:39:79:6a:6b:03:
eb:32:62:a4:b1:70:c4:75:21:d1:ca:76:5a:a5:a6:90:da:80:
53:55:dd:22:21:e3:f0:c3:92:e1:df:16:44:5d:6e:66:59:c5:
63:67:36:02:8f:fe:c1:83:ce:fa:ed:5c:37:5e:80:fa:e3:c3:
25:30:60:35:02:6c:a5:dc:20:25:47:61:64:ac:e8:87:30:48:
a6:39:20:c9:62:b2:b7:f9:37:79:0b:4f:e1:6f:75:a3:69:04:
03:27:ca:b4:69:39:1a:8f:b0:cf:5f:b1:90:1d:92:ac:b7:1a:
42:f2:65:7a:3f:3e:86:9d:17:06:54:f8:83:9d:7f:89:60:19:
e3:18:46:3a:77:a6:bc:bc:9c:4d:a3:2d:cf:4f:dd:48:69:cb:
b5:4c:f4:dc:6a:c2:79:b4:77:c0:b6:4c:5a:6a:27:88:1e:a4:
53:63:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client