Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: 9IzF3Ix42eTtmJ9BkerdPSnzzrO0a3nCCcbkYTkivRY=
Subject key identifier: 43:49:E2:8A:79:81:BE:E5:77:B5:CA:33:01:37:08:25:CC:86:61:7B
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 0194BBCDBBCF405D8E1F60091CE444BD0E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 0C41
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: 34Jb3G1pqiD6eFOLIIKT6Awu6LPTqv0tXjsQXZU56NM=)
2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:cf:40:5d:8e:1f:60:09:1c:e4:44:bd:0e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=4349e28a7981bee577b5ca3301370825cc86617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:fc:31:03:3c:23:1c:8c:e6:f0:06:58:b1:
d6:1e:9c:a9:50:7a:0d:69:a0:c9:a3:79:d6:b3:ab:
8e:fa:01:92:da:5e:6d:e1:ab:30:39:2c:45:f6:9a:
d5:a6:0f:c5:5e:e0:43:03:b5:89:3a:19:14:15:0d:
94:24:23:a4:97:c0:b4:42:c4:f7:6c:b4:0c:a0:f1:
2f:c6:2b:3e:66:5b:54:89:f2:c6:26:e6:1f:87:36:
8f:1d:5f:7e:f8:0a:b7:d1:9a:7c:e5:18:71:41:15:
c0:72:aa:f0:47:17:8f:a2:b6:74:5e:a5:6b:fe:be:
01:ec:0f:f0:33:9f:19:56:e7:fd:73:c7:c3:94:10:
f8:55:63:09:0d:7a:8b:82:30:ea:3a:20:e5:a3:4e:
71:d4:8c:15:da:c2:71:cd:f5:41:4c:c4:ef:bd:64:
98:46:7b:6b:11:66:c9:c8:a6:3b:7a:29:5d:c6:0b:
68:f2:eb:32:a3:a5:7a:86:88:7e:22:6a:29:d5:d9:
12:81:a0:51:db:f2:96:9a:e3:cc:0e:3f:30:b7:2e:
46:84:75:95:fd:b8:36:c8:2d:2d:df:e2:1c:c9:25:
06:ab:01:a5:60:64:2a:d0:00:9a:c6:be:d0:79:ce:
c1:6e:4c:19:cb:b7:c5:27:2c:b4:08:c3:52:06:57:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:E2:8A:79:81:BE:E5:77:B5:CA:33:01:37:08:25:CC:86:61:7B
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ab:19:ea:a9:86:c9:39:75:d3:9c:55:6c:33:50:78:30:86:
46:2e:a5:05:ee:01:64:22:8d:ff:ed:67:a7:f7:5c:3e:b3:d9:
b9:3a:6f:50:b5:cd:2f:d1:f6:19:ea:86:55:69:5e:71:66:24:
da:92:b6:72:6f:34:ac:6d:49:6c:d1:03:42:70:65:d9:6e:f9:
aa:14:76:a8:84:d3:d2:5b:2d:80:91:62:63:48:10:6b:70:ff:
1b:30:17:54:0f:4a:19:33:e9:c6:54:2e:48:a3:46:4b:9a:53:
8e:dd:c6:40:c2:c2:8a:23:15:da:17:1f:14:4e:1c:3d:60:f5:
22:bc:4f:d7:a9:aa:f7:3a:65:ae:9f:ee:3e:3b:c5:80:53:2e:
c9:be:27:8d:78:6d:1e:40:25:be:a8:69:83:73:d6:b4:48:34:
65:78:fa:c7:bc:5d:41:d3:8a:44:9a:64:7a:57:ba:7b:86:38:
a1:e8:9d:66:b6:4e:63:e0:6b:f0:6b:c4:e8:91:e9:d2:e1:8d:
6c:72:0b:e5:ca:67:4f:c8:4e:55:4a:58:c4:ad:c5:4f:d8:19:
26:ac:ed:34:4b:c4:fe:c5:e1:48:c4:e8:d7:c9:fe:43:e3:96:
6e:4a:ae:e5:fc:55:f3:d9:9c:4c:1f:63:f2:7f:2c:3e:7d:9f:
44:bb:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:04 2025 by rpki-client