Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
File: VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft (raw, json)
Hash identifier: 8ed4QfPAdY7qq1Yd7VV5RohlJ02NHiazXaFt3tu07UI=
Subject key identifier: 9B:51:25:91:A8:A3:46:4D:A2:2B:A7:EE:0C:A0:46:00:47:A6:BC:5A
Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
Certificate issuer: /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Certificate serial: 0194BCA9F90BC3E204B9487FD8FF71761100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
Manifest number: 129B
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl (hash: +5lttNENRXh+b8O0dZDy8/D4C6b2dwNZGJ0F2QWiEIA=)
2: rja0swvI9FWxE8KMSBLX04uSXw0.roa (hash: Z2Ufwd9m2IoyJqT+av4hl2D/R56gkSmO/5BjIjrBUGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:0b:c3:e2:04:b9:48:7f:d8:ff:71:76:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=9b512591a8a3464da22ba7ee0ca0460047a6bc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:89:74:eb:93:5f:0c:be:a0:39:04:c9:fa:
34:41:80:bd:e5:49:5b:3d:58:cc:12:8b:bf:7d:60:
88:1a:9b:1a:32:dc:3b:59:79:35:31:9f:63:fb:00:
18:fa:2a:c0:bd:a1:3c:71:e9:46:e2:bc:96:36:63:
91:68:24:95:98:76:44:0c:fc:5a:d8:d0:90:dd:ef:
00:b9:0d:be:05:b5:19:b1:80:39:40:da:fa:d5:e6:
41:79:1a:24:55:6b:b9:28:65:42:f2:08:d0:63:34:
4c:ad:4c:0d:6d:5a:c8:aa:65:96:53:f9:3d:06:46:
dc:c3:ef:98:22:45:35:1b:f9:cf:86:1d:e7:f2:d7:
c1:fe:8c:3b:f1:23:77:5b:4a:f6:33:1f:0e:fc:97:
d2:27:46:38:ca:29:50:9f:fb:cf:e7:0d:7e:a7:af:
2c:c8:05:96:e7:2d:92:a6:01:c8:b8:7a:d9:05:31:
51:7c:22:f1:06:4b:85:b6:75:2a:43:ea:90:69:92:
ee:7a:2c:f2:a4:b2:3c:32:10:db:c3:41:ef:31:34:
3f:69:2f:9c:7a:8b:f6:7c:6f:ce:6a:df:9b:d8:fe:
e3:c1:c9:34:08:20:bb:62:b5:84:14:3b:53:89:08:
77:ba:97:3f:de:2d:55:72:f7:23:3a:44:39:cc:94:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:25:91:A8:A3:46:4D:A2:2B:A7:EE:0C:A0:46:00:47:A6:BC:5A
X509v3 Authority Key Identifier:
keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:77:83:8d:58:1e:34:ff:1f:39:4e:00:6b:e1:d8:f0:1b:25:
61:1f:dc:1a:d9:32:d0:b4:52:ea:a5:41:b0:f4:b2:be:af:ad:
35:45:87:ec:99:d5:d6:98:78:13:b3:3f:66:6d:fd:df:c6:c0:
dc:cd:c7:0c:e1:ce:16:4a:b9:16:36:65:ce:3b:cc:2b:c6:55:
3c:91:57:47:f0:50:ca:40:1f:0e:81:24:e9:31:f3:4d:06:e0:
0e:88:9b:dc:e1:9d:84:e9:43:e3:9c:a4:86:81:4a:24:9b:6a:
f5:98:47:48:d2:21:cc:ca:b9:97:cb:03:d2:92:81:5e:c7:6f:
d9:e4:16:9c:a3:3f:8b:b1:5b:2f:49:f5:28:0e:9b:ac:d6:b1:
d5:30:81:70:7b:dc:44:5c:59:f0:66:c8:c8:dd:75:8d:ee:01:
02:d7:1b:40:1a:70:b5:ef:35:be:0d:b3:80:73:7b:90:82:c0:
a2:b9:8a:30:34:f2:9f:1c:20:6b:22:41:48:db:0e:95:f4:a6:
f1:7f:c7:91:83:4c:6a:3e:d0:d6:3c:c0:ae:03:5e:0e:1e:e5:
1a:40:2e:ca:bd:b2:fe:e1:4c:8e:58:44:0a:a5:3b:73:3c:18:
23:5b:30:9b:ff:9e:f1:75:fe:7f:01:89:cb:a5:5c:29:71:fe:
c0:96:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:25:35 2025 by rpki-client