Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier: SK3Xb7XeBQGk+QRwKFW/d5cc6AgvRtDu4Xw9RzzPNUA=
Subject key identifier: CE:F6:3F:2B:AB:B6:91:59:4C:B9:E1:89:91:F5:A6:7B:EE:7C:41:F9
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 0194BCAA110CA2EE1C245A21BFBC773EBB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number: 0604
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: t5asYkTm2W2cXeSAEA/N0s6Ef5EHpPLRwt1bkQBsI5M=)
2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:0c:a2:ee:1c:24:5a:21:bf:bc:77:3e:bb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=cef63f2babb691594cb9e18991f5a67bee7c41f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:e4:46:2d:87:81:1d:6e:57:62:58:d4:99:
9e:5f:37:3d:9f:76:ec:08:b1:da:5f:3b:96:ce:68:
04:93:1f:2e:72:06:9c:a2:99:ad:29:ad:5e:9d:57:
e7:a0:f6:9b:a1:9c:28:13:ce:07:3b:26:6a:19:e4:
78:ed:11:be:c0:2c:df:d6:04:50:a7:f8:66:40:ff:
d3:2b:23:6c:00:df:d9:33:a0:d0:9c:66:18:27:ba:
ff:6d:00:57:ed:be:08:16:bf:f8:e7:7a:d8:d0:45:
00:1d:9a:71:1a:1e:e5:2f:f8:25:c5:b4:28:e9:58:
3d:39:93:c0:6d:62:55:bd:96:f6:6e:91:aa:51:82:
9f:a0:b2:79:b6:e0:c7:95:55:b4:a4:6e:3c:a3:d6:
73:2f:2b:c5:80:1a:5f:22:25:9f:8f:65:50:81:ea:
09:f1:57:1e:9d:c9:22:6e:0d:66:23:a5:26:f6:65:
3b:80:5d:04:06:8f:11:bd:a6:58:49:c3:be:3c:b6:
26:af:0c:74:91:f1:fc:ba:52:09:a9:27:18:c9:05:
30:8d:58:e0:f3:3a:a5:78:d0:1e:76:72:ad:a5:46:
27:20:0d:6d:d1:9f:f1:10:e9:5d:94:fe:4f:13:20:
b7:b4:8f:47:9f:9a:c3:e0:07:87:84:6d:3b:a5:4f:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:3F:2B:AB:B6:91:59:4C:B9:E1:89:91:F5:A6:7B:EE:7C:41:F9
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:c3:c1:de:55:c4:61:18:db:4d:fb:d2:55:b2:5f:04:a2:
5c:0e:89:a5:39:96:2d:41:e3:99:55:b0:22:ab:2b:6c:f5:39:
8b:7a:b6:48:48:3d:a1:39:35:e7:41:1f:87:8f:51:88:ed:7c:
a7:9d:5c:10:e7:b4:f3:77:e2:cf:51:62:37:e8:a1:78:c0:1c:
58:69:c1:63:c4:86:6f:72:e4:5f:ed:6c:50:ee:a9:f5:d9:b2:
8c:0a:65:59:7c:71:98:a9:d7:1c:20:f5:5a:4a:fd:92:a8:00:
5f:11:92:16:2d:89:15:d2:73:46:38:ec:aa:5a:74:8c:15:f1:
19:f9:73:5e:8e:ef:f3:73:f0:83:18:83:e9:dc:43:3a:7c:0e:
57:29:86:5d:35:64:7a:81:75:c3:d8:9b:db:51:bb:58:38:eb:
79:0d:c2:71:8f:f2:ec:21:c0:20:23:1f:d3:b7:18:35:06:53:
ea:eb:4d:32:f7:41:fd:d2:82:03:5f:80:af:14:ca:03:3c:7f:
6c:e8:b0:67:1e:c3:a7:85:cd:74:25:cf:df:8b:81:91:ba:ef:
15:dd:9f:a6:37:90:11:57:5b:8d:73:c1:7d:22:af:a3:90:b9:
35:b5:68:bc:6b:06:28:1e:52:f4:d3:bb:28:67:c1:b8:f1:ed:
4c:95:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:44 2025 by rpki-client