Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: hJOrfg1PdKWdIbOw1jStgv2mgkkWX2+1S5+2LPCzg4s=
Subject key identifier: 89:83:0F:72:32:9B:8B:BF:1C:6F:67:44:DE:C0:8A:24:02:32:12:E3
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 0194BD17E7E590855FDC3BFF49BF0BD945D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: Lp7eR6eCvcZSMA+UTfhreYLFaOmHTmHDofwn/Y+Y+Yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:e5:90:85:5f:dc:3b:ff:49:bf:0b:d9:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=89830f72329b8bbf1c6f6744dec08a24023212e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:a6:6c:aa:1f:02:9f:e6:78:29:0f:6d:df:
15:d7:73:a9:b1:bf:dc:cb:ef:b3:d7:b1:2c:a7:04:
e9:9b:8b:1a:c2:15:1c:d8:3a:8d:0b:71:9b:75:75:
f5:6b:5f:24:9b:9e:7b:da:63:44:08:20:05:66:4f:
63:0e:05:0f:43:6f:45:08:1c:26:b1:24:c2:04:9c:
da:dd:e2:3a:16:77:f8:b0:b4:be:d7:96:c8:df:20:
ad:2c:6f:cd:a9:58:c6:f3:1f:14:b2:51:73:0f:9a:
70:ec:85:87:34:58:7c:0d:33:38:41:e8:4c:4e:2e:
2a:b0:89:61:bc:8c:f4:87:2d:42:a0:bf:c9:a4:b1:
43:aa:ef:d1:3b:2c:41:ae:95:cc:47:d1:c8:57:b3:
c5:e5:ef:b0:be:2b:1b:33:1f:c7:c9:20:1f:d6:23:
3e:af:f1:e8:18:a0:90:5b:24:71:cd:45:72:3e:67:
73:c5:ff:d5:97:d3:ac:7f:35:3a:9f:c7:2a:8f:1b:
43:55:97:3c:98:43:6a:dd:42:33:69:66:f4:db:95:
2f:1b:ff:af:27:76:26:ca:32:99:30:09:7c:4b:95:
81:fc:1e:16:ab:4f:86:25:e7:a1:c3:56:d4:91:19:
9f:05:68:8f:28:2c:31:6a:32:1a:4e:1f:4c:45:f2:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:0F:72:32:9B:8B:BF:1C:6F:67:44:DE:C0:8A:24:02:32:12:E3
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:30:c0:e1:94:6e:8b:63:d1:f5:6b:b2:d1:55:da:d5:e6:e7:
57:af:14:61:6e:05:eb:0e:f0:44:a4:c5:5d:ba:82:a9:63:89:
44:e6:2b:8d:23:f6:cd:b6:ea:45:54:7b:8c:bf:bc:2d:17:f0:
e2:65:b3:b3:9a:42:ca:e8:cc:26:54:6b:5c:7f:b2:62:1d:61:
5d:af:68:85:0a:ed:b1:4a:22:5a:67:e9:e7:12:ec:35:8d:50:
eb:4c:02:d4:ed:93:8a:a0:07:0c:2f:4a:de:bc:8e:69:f2:89:
03:8c:aa:36:e9:bd:af:55:21:eb:d8:84:38:8a:00:a0:d2:14:
d5:63:0d:62:8b:99:bc:8b:ad:d9:02:d3:9a:e6:ee:cc:43:95:
77:ca:0f:6b:ff:70:23:26:8c:12:12:55:07:8d:f1:64:16:a8:
75:c4:4e:a6:05:dc:27:d9:65:76:6a:46:5f:ea:5b:50:e1:73:
30:d2:5e:ab:06:cd:4a:8e:e6:dd:fc:c7:94:16:12:7c:4a:f1:
e2:03:eb:74:21:b5:9a:30:68:1b:d7:dd:47:18:06:6c:65:5f:
d8:23:b0:f5:4c:c3:65:83:c6:51:7c:23:b3:f2:74:cc:1a:c8:
3b:98:23:14:9d:f2:7f:0c:cb:9e:4d:f0:25:11:6a:4b:25:a3:
34:ab:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:34:54 2025 by rpki-client