Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File: VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier: GGAOhg4y24l8A2VmUbqncC6kmnkDvvGuISwLJPniJOc=
Subject key identifier: E8:93:30:EC:1B:0A:11:FD:CD:64:75:F8:F9:A2:9E:3B:48:CB:33:E0
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 0194BC3C7F78625DD8698B86A1B7F6EEE3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number: 1319
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 6a60S-TRqBKotvyyPQBxdiB70Sc.roa (hash: 2NeGJ4f2HswIAojn272Lhr6pkTIi9fGcxUkPl+OU7Uw=)
2: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: Le5UZDoWDkYF5x5D4ghRArNuOYrA3hHYTbOplV1fPSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:78:62:5d:d8:69:8b:86:a1:b7:f6:ee:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=e89330ec1b0a11fdcd6475f8f9a29e3b48cb33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:29:97:27:f4:43:ed:4e:c7:c6:a6:6d:fe:
2e:a6:ad:36:3e:bc:38:31:43:31:ca:ea:f3:b8:f5:
d7:db:cb:52:01:17:0b:ec:98:bf:f5:b3:23:fb:11:
6e:18:70:c5:aa:32:0a:a6:7a:db:4b:ad:8a:c3:fd:
58:44:ac:19:66:3c:8a:ea:1d:6a:8f:72:63:1e:88:
f9:8f:69:bc:ab:65:31:68:b8:14:51:49:b5:3e:91:
20:ac:9c:3f:2e:47:01:a5:c0:56:c4:77:50:39:72:
32:0f:a3:11:4d:74:5d:3d:e3:e6:24:8b:23:8c:e8:
ef:be:d5:7e:41:25:18:fb:e4:b7:c8:35:9d:da:91:
83:1f:ab:16:8f:5b:eb:79:c3:79:31:1f:83:d3:77:
62:98:30:d4:ee:dd:01:82:37:73:d2:e9:e8:9e:df:
f9:e9:5d:09:ce:f2:cb:85:83:1b:09:62:34:25:65:
1f:ab:97:3a:0b:2e:b4:13:3e:99:c4:fe:e0:4f:31:
5d:af:3f:2d:8d:4c:03:f9:2d:07:cb:ad:49:af:5f:
17:53:a3:9f:e0:08:57:04:8c:10:17:00:9e:9f:7d:
c4:70:14:43:ea:f0:be:f6:cb:b4:03:f9:10:0c:82:
e5:d9:b6:7f:bd:33:11:21:67:62:04:fa:29:e1:ce:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:30:EC:1B:0A:11:FD:CD:64:75:F8:F9:A2:9E:3B:48:CB:33:E0
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a9:56:08:40:c3:66:f7:10:06:96:db:f2:51:fc:44:08:7f:
68:0c:f5:2f:71:8d:39:67:7b:84:09:7f:49:ed:3f:fe:b7:75:
69:ab:fa:06:da:8f:5a:17:ba:7f:fc:94:2e:d3:51:43:14:0a:
90:bb:35:56:85:48:f7:ce:f6:ed:7d:29:c6:36:44:2a:a9:b9:
21:c9:82:62:e3:69:31:49:b1:8e:b8:4b:a7:55:4f:ca:57:f5:
08:09:1f:6b:98:f5:69:6c:f7:87:d3:3a:23:08:34:fb:0a:57:
65:59:62:ec:ac:51:d1:9d:41:d9:70:3a:7e:35:5c:e0:e6:44:
33:07:93:dd:b9:7d:4a:31:3c:d2:c7:d1:2e:06:72:66:7e:f6:
dd:c5:61:99:fa:e4:2c:a4:74:2f:fd:09:b2:d4:e2:69:3b:c8:
59:bf:8c:45:98:f9:91:38:f4:fb:da:be:f9:fa:3a:29:d1:2b:
2a:be:8d:61:01:51:05:83:1b:de:be:67:03:21:9f:f0:67:15:
b8:41:26:f9:79:9a:40:8e:d1:3b:b3:33:7e:86:68:91:a3:88:
e9:c1:7b:44:03:f5:7a:c0:94:85:2f:9b:28:cc:d9:9f:6e:26:
e5:5f:e9:6c:8a:e1:b7:94:26:36:b4:98:d7:04:45:75:0c:31:
81:b5:80:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:03 2025 by rpki-client