Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
File: VZWbC9oKD1kfloQIU58zGBC7JTQ.mft (raw, json)
Hash identifier: IPYqRRs+VuDeozHuZsSfqQOAvfVWXhiRK+iudNfwffM=
Subject key identifier: 3E:C8:B0:B8:A1:3D:41:52:2E:69:4E:CA:C7:9F:AF:C9:30:33:51:60
Authority key identifier: 55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
Certificate issuer: /CN=55959b0bda0a0f591f968408539f331810bb2534
Certificate serial: 0194BC7306AD832CC87F49CD3818E2203FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
Manifest number: 03F8
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: D8q3zZybrkkTxQ66z-bvyVnna6E.roa (hash: LTQ6bdwzOLtEATCcAV7gj7XVypFsof5F2Jlq1M3S9uM=)
2: VZWbC9oKD1kfloQIU58zGBC7JTQ.crl (hash: Yfw0wANYE83N/dtrhVaJKsLprAwiNtyHnkofGi6fVRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:ad:83:2c:c8:7f:49:cd:38:18:e2:20:3f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55959b0bda0a0f591f968408539f331810bb2534
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=3ec8b0b8a13d41522e694ecac79fafc930335160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:27:0c:16:95:17:cf:bc:39:f1:8d:c6:e7:
40:bd:23:35:f5:58:e3:8c:95:15:4c:6c:50:e8:60:
7f:e3:ca:6f:81:af:f4:30:23:0f:14:e3:35:9e:05:
e8:de:87:69:22:da:33:dd:25:20:13:16:14:ed:59:
50:4a:ad:b0:c3:c5:ff:67:f2:f6:f0:e9:8e:8a:34:
55:f3:94:43:02:97:7e:8d:19:77:77:1e:a2:b9:cd:
a5:b6:4c:e3:89:3a:45:24:a0:06:88:42:4c:7c:9c:
f9:cc:8d:54:2c:70:83:fa:c4:da:41:a7:1c:4a:75:
9d:37:1f:95:91:7c:97:b1:41:84:06:24:bf:f0:d8:
30:65:d6:d8:8d:ce:92:cb:47:5d:e3:b2:8b:1e:8d:
45:f9:27:21:f1:11:ba:8a:3c:c2:2c:40:f3:16:82:
d4:f9:ec:66:9e:bb:c3:2d:eb:11:f3:8f:03:1f:d3:
89:e2:a5:24:a5:b4:00:fb:e8:34:a4:5d:ad:ef:0d:
07:98:e1:26:50:54:97:2d:1d:3c:20:87:29:80:1a:
43:91:4e:47:ee:7b:66:84:1a:80:4e:06:f7:e9:8e:
44:9e:63:8e:b9:a2:94:dd:02:3f:24:4c:0d:fc:80:
75:d3:78:9c:b3:7f:f5:02:3f:35:c2:55:f8:7d:11:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:B0:B8:A1:3D:41:52:2E:69:4E:CA:C7:9F:AF:C9:30:33:51:60
X509v3 Authority Key Identifier:
keyid:55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d9:50:b0:e9:56:ef:92:5c:b5:64:df:c3:8f:ee:f0:68:97:
97:98:51:84:7f:38:e4:26:82:06:a8:e0:c4:da:02:5e:d3:a4:
c9:f9:17:c0:02:9f:bd:8f:7e:cd:b4:0f:5e:b3:c3:f2:d2:6e:
35:9b:29:e3:5a:fd:55:ad:58:1e:87:a2:58:a4:fa:d4:10:f1:
52:9e:c8:bd:a3:0c:93:16:0c:c9:41:9e:d2:b5:7d:ab:a4:71:
a9:1e:3f:cf:72:3f:7f:f3:7d:0d:1a:8b:37:81:2b:f9:d6:c4:
e2:8f:9e:dd:70:01:5e:94:ec:7e:1d:58:80:93:83:71:29:66:
25:77:46:a4:1e:f0:32:1a:5c:ab:94:0c:b5:c8:dc:95:f8:8d:
8c:c3:1b:27:a8:58:c4:3d:f7:06:e3:fd:1d:06:f7:8c:9a:d2:
06:31:17:ad:64:3d:47:4e:cf:2c:1f:3f:d9:bb:b2:89:3e:76:
4d:a0:a3:9a:f9:fd:80:cf:62:d6:1f:4d:66:ab:57:72:78:79:
04:74:49:4d:b3:49:7d:ba:9c:4c:ce:57:67:7c:1c:61:cb:ff:
ee:cf:83:ef:85:3b:b6:0b:3f:f4:8c:fb:e8:fd:2e:78:f1:8c:
85:8d:00:61:e9:4a:a7:4e:af:10:3c:27:8b:77:12:51:b6:87:
84:6c:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:01:15 2025 by rpki-client