Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: v28Jg4YxRX3QCkkkw0oWvXGRMEIlG6eKVAKJLEunqTc=
Subject key identifier: 60:DC:CD:E2:AE:6E:7B:3C:1A:2A:D5:DB:51:E4:F3:E3:F1:29:FF:75
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 0194BBCE499455A9185D6FA9667C8350C8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: oVlZZsBle3ifCnVHVNLFANh+Eh8bX8C+2veimUDKcmc=)
2: ktNttpuxLBXqDPnajC1uMms7PVY.roa (hash: pIzKLF9Fz5GZDmZS19BU00VQ6s02sXZYTjwLLFAr2+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:94:55:a9:18:5d:6f:a9:66:7c:83:50:c8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=60dccde2ae6e7b3c1a2ad5db51e4f3e3f129ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:ed:42:48:27:6a:80:cf:43:64:23:fe:a9:
c3:6a:ed:5f:b3:ab:f3:66:1f:52:a6:25:42:24:98:
55:10:cf:cd:d2:7c:fc:cf:d9:52:b0:ec:e8:01:02:
54:0e:f2:b3:fd:6a:79:29:be:35:3f:66:08:5d:b2:
64:b8:39:0f:94:65:94:da:68:20:c2:f0:61:8e:97:
78:f1:c4:14:75:67:9a:48:16:f5:47:c4:5a:77:34:
2e:70:71:96:db:e4:73:40:e8:45:1b:a8:e8:0b:75:
9b:23:00:4b:6d:04:58:b6:4e:c8:94:a5:a6:3a:73:
ab:72:52:ef:97:c8:84:3c:28:6b:ff:a3:82:aa:b1:
5a:4d:9b:66:94:80:30:42:94:59:08:3e:73:4a:89:
95:e2:d0:cb:7e:72:ca:7f:78:78:99:d8:ea:d2:96:
16:aa:c9:0b:82:b3:18:73:78:50:23:2b:af:53:d6:
51:65:ab:33:13:8b:56:53:ed:1e:03:1e:40:36:d4:
15:dc:61:50:8b:62:a2:4e:0c:9c:f9:d9:3c:28:70:
9b:d1:30:fc:56:f8:19:46:7e:b3:cd:57:69:47:0b:
b7:23:a8:a9:bc:bd:48:bc:74:e2:8e:65:96:fc:0d:
0c:f9:0f:ea:7b:fe:d1:c3:be:fd:15:9b:6b:4c:1f:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:CD:E2:AE:6E:7B:3C:1A:2A:D5:DB:51:E4:F3:E3:F1:29:FF:75
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:17:b4:5e:6f:77:57:b9:48:49:7c:2b:47:5a:29:ae:51:f5:
0b:ec:bf:d5:4a:78:8c:14:8b:98:67:49:9e:56:54:a4:7a:71:
be:f5:dc:19:17:ee:0c:15:40:d9:54:04:21:5e:10:ee:f2:5d:
a6:fd:85:a5:35:22:11:db:f3:40:0e:c9:47:38:bd:82:38:76:
0f:70:29:15:dc:a0:c4:c1:03:4e:ca:ea:63:e0:06:0a:ce:77:
a8:12:1c:39:64:0b:ef:ec:74:19:97:de:f1:41:a8:b8:aa:a1:
7d:2e:eb:dc:23:5a:9c:44:59:82:5c:1c:5a:26:39:87:ff:33:
7e:89:f4:06:e9:24:db:27:a6:09:8a:3e:b2:7f:f4:c2:88:14:
a8:9b:af:f7:eb:8e:9f:80:69:bb:f8:74:3c:f5:6c:30:71:78:
d1:81:93:73:eb:90:ea:3a:84:33:5f:f0:b3:3d:f7:7b:16:fc:
88:b1:ab:8e:99:94:13:39:10:dd:3c:e5:67:a4:bf:0a:46:3b:
ac:54:5c:37:64:e3:e9:6b:c4:e8:f8:9d:dd:31:5d:24:bb:91:
4f:fe:bb:3a:ee:d3:4e:f6:1b:da:b1:8c:5f:24:36:06:f5:8e:
13:e4:56:c0:d0:f7:24:a5:e7:13:79:0b:e2:b6:81:de:6a:5f:
ec:9c:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:07 2025 by rpki-client