Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: lrDdcN07z/wzKQVyens4bXCJtjyYVqmlTjHjDaNy774=
Subject key identifier: 92:75:A1:98:1A:05:68:B0:EF:79:38:67:10:A7:9E:20:6D:68:D2:0B
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 0194BC72FDAD3490951FBFDF1AD13AC6348B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 12DE
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: KptAVnO1os9fnhgiMUmRt6vIlceCP7T1WIKqp/sB1gw=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:ad:34:90:95:1f:bf:df:1a:d1:3a:c6:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=9275a1981a0568b0ef79386710a79e206d68d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:aa:d8:ac:6d:ba:74:c9:c6:21:7d:bb:91:
ee:a8:3d:4e:5c:d3:e1:5d:26:2c:81:47:7c:a3:f2:
a5:97:d0:21:c3:3e:e5:b2:40:c9:15:7d:0d:3f:6b:
a4:3b:47:8e:51:ed:c8:5f:45:84:1b:08:42:03:4e:
12:7a:e9:87:04:65:c1:4e:0b:bf:76:66:ca:a7:9c:
57:63:fb:15:23:20:47:f9:7c:96:97:e5:b6:1c:ae:
e5:1e:fa:12:38:aa:c1:35:3c:11:37:ff:e2:1a:33:
8f:02:31:c0:11:66:a7:67:2f:f0:c6:13:ea:e7:48:
0b:19:0c:80:56:0b:25:09:14:2f:f4:5e:bc:45:19:
55:12:4c:d7:bb:28:51:fc:15:83:b5:b2:f2:36:68:
83:bf:e3:81:e7:03:02:7f:44:e2:92:b8:6b:17:6b:
e6:53:e6:c3:cc:be:49:00:55:57:33:be:43:3c:99:
75:f8:0e:21:af:42:8d:df:74:a2:ac:02:57:18:48:
da:0c:5a:f1:0b:7f:12:c5:26:49:b6:d3:cc:13:55:
c9:eb:88:f7:87:36:8d:12:b9:99:0f:33:e4:8f:d6:
f1:50:dc:3f:fe:0b:a4:8d:78:e6:4e:78:63:f9:89:
87:7c:b4:f4:3f:6c:df:a5:68:89:21:34:f4:8b:b2:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:A1:98:1A:05:68:B0:EF:79:38:67:10:A7:9E:20:6D:68:D2:0B
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:22:e7:74:30:c3:ce:d5:95:6a:0b:a0:06:70:3f:2f:03:68:
56:11:fc:12:c8:05:fe:b7:bb:f3:9f:51:d0:bc:26:42:69:75:
1d:3b:0e:38:6f:36:a5:48:e9:d1:44:99:40:3c:e2:8e:14:1f:
ca:fe:c4:bd:6b:b9:71:cf:7f:a4:89:97:d4:ca:ec:78:3d:95:
59:10:55:5e:e5:a1:4d:f6:16:32:40:f6:e4:c5:68:cb:35:4d:
40:47:4f:94:a8:10:d3:08:9a:01:0f:02:e1:6d:bc:50:27:fa:
e7:53:35:59:97:20:ba:43:d2:d8:5a:0b:cc:09:dc:cc:d5:62:
a4:13:81:dd:f9:1c:6f:54:fa:ab:18:bb:78:57:db:80:89:41:
84:9e:03:b2:46:35:a0:44:f5:38:bf:49:87:34:51:c5:71:ab:
ad:37:d1:d9:5c:66:ee:13:53:32:0c:de:5b:4b:b1:01:65:d5:
45:fa:96:4a:7d:e8:54:97:d5:8f:67:d0:90:f6:55:da:30:b0:
f4:09:b5:98:7f:cc:5b:c1:75:26:65:93:3c:a0:30:78:25:86:
99:d1:46:ab:b6:51:32:a4:ac:8a:02:0b:7f:70:f5:1d:37:f4:
30:36:85:5f:a8:8f:9a:6b:1c:09:83:5f:6f:ff:fb:1e:1f:ee:
e2:90:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:56 2025 by rpki-client