
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: x2EJSWWR19DWMKECK2CNZ+VuhbUu6jUHsOtm0tyYyEs=
Subject key identifier: B9:2A:7D:B7:3B:DC:5C:D7:35:98:5E:70:18:4E:CF:44:15:CB:87:C0
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 0194BD4EA69FCEA79E5323D53F75D78F1E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: 1oUAPFvyqcUcu8hs5bjWypNYvoLAm9NSOtNLHwSzaqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:9f:ce:a7:9e:53:23:d5:3f:75:d7:8f:1e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=b92a7db73bdc5cd735985e70184ecf4415cb87c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:7b:fd:d7:cd:d6:c6:8b:da:6e:77:fd:4e:
79:c8:cb:64:8d:4b:0f:d5:5f:98:26:78:f0:8a:d6:
af:aa:a7:19:7e:5b:80:2a:7b:0d:07:d8:84:cb:c0:
fc:64:84:29:11:b5:21:04:b6:e9:d4:13:cf:17:6b:
24:7f:5f:b7:bd:2a:b8:2f:1e:ad:76:9d:c6:b7:a1:
6d:a6:c5:71:89:32:d7:5f:ac:bd:aa:6f:c9:f8:35:
a0:8a:06:29:ca:8f:af:bb:ee:aa:dc:98:9a:95:18:
58:59:6e:d0:99:a4:cb:3e:4a:17:ce:19:34:b7:3b:
03:b3:cc:b2:88:60:52:97:9d:51:22:6f:d3:57:e3:
06:3f:a4:ed:ac:3b:e9:cb:40:5c:7d:b9:04:2b:b2:
e4:cf:96:12:58:93:91:00:c9:03:c2:16:2d:90:f6:
76:51:c5:38:0a:c1:0c:fd:e2:c8:09:f2:a5:ba:ed:
b3:68:70:c6:72:f3:df:4f:83:bb:f9:57:dc:25:cb:
26:0e:d9:ef:99:ef:44:17:49:7e:24:a6:ae:ab:b2:
4f:be:04:4c:5b:97:93:56:ae:c9:04:9c:f0:2d:f9:
a2:a9:c9:51:06:aa:d0:0b:13:89:9b:6f:a6:a3:10:
26:1a:e0:3c:29:0a:85:bb:62:6f:91:d1:ec:f0:fd:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:7D:B7:3B:DC:5C:D7:35:98:5E:70:18:4E:CF:44:15:CB:87:C0
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2e:7f:4b:66:29:75:fb:14:b4:b6:60:d9:9a:09:67:bc:ba:
71:a4:fa:7b:a7:24:d5:ff:e6:03:e2:27:3e:4f:91:9e:5b:80:
d9:38:3f:b7:33:25:00:b3:0a:d9:55:35:11:a9:84:6f:c9:91:
ba:e7:ce:ae:ad:73:05:52:8d:eb:61:d3:96:a7:81:e4:f7:03:
ee:86:59:50:c7:8f:a2:26:9a:c7:76:c5:39:73:94:28:b4:14:
9b:65:75:9d:01:4e:ee:6c:00:8a:d5:3d:b4:3c:eb:bb:98:c0:
78:c6:ed:c6:9b:3e:b6:62:7b:0c:44:f1:2c:9b:1b:05:35:9a:
39:b9:1a:87:8e:c7:59:95:b2:82:0c:68:ba:16:83:5f:b6:76:
74:0d:1b:fb:6b:ec:9c:93:4b:0d:cd:ca:a9:07:30:01:15:31:
a5:a2:fb:95:44:08:a0:d8:19:64:00:b3:ab:96:8c:f4:fa:70:
d9:55:bc:bd:56:b7:a8:a3:85:f5:2a:e8:3e:fb:77:8c:34:40:
75:22:90:3b:84:7b:54:71:3a:9f:59:54:40:23:4a:c2:95:dc:
f0:51:56:8d:f3:4a:c1:03:31:a5:dd:ad:a1:1e:64:45:7a:3f:
0e:aa:52:4e:f5:2c:5c:d8:e6:0f:4f:47:de:b9:85:f3:01:d3:
26:d2:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:41 2025 by rpki-client