Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File: vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier: kH+q0cdr7h6C/kehgacMLW0X1/i3dHyvxs10CWFEG5E=
Subject key identifier: 04:CE:61:C6:65:98:14:EF:D4:BC:E0:94:42:EE:A1:87:EC:AB:10:97
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer: /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial: 0194BC04EE8607225C90DB5E5A27CBECC593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number: 0DE3
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: ySen1jXhO7KE+aqyu9V2digGP7q9wTw9xMnAFbuhV/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:86:07:22:5c:90:db:5e:5a:27:cb:ec:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=04ce61c6659814efd4bce09442eea187ecab1097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:9d:de:be:19:65:ee:77:c4:e4:25:43:69:
ec:f6:61:6f:91:b4:7b:db:04:66:1c:e7:dd:7e:63:
3d:e1:19:88:57:2b:61:7a:6c:30:1a:9b:c4:87:d1:
e0:f7:eb:67:d3:ef:5b:ab:29:bd:0c:b4:09:8f:b4:
89:2f:a5:70:00:fb:82:52:18:86:15:d4:c6:f1:a6:
f0:c9:6b:7d:de:b5:63:bd:5b:fb:a0:43:cc:e6:5f:
ea:2a:6f:e7:18:78:92:13:48:df:60:84:f1:ad:75:
cd:2c:c2:eb:28:0a:6c:dd:cc:c6:19:a4:f0:d7:ac:
a6:09:04:6d:89:9b:d0:a6:0b:9c:86:ed:04:55:31:
8c:55:02:be:eb:44:d5:59:92:b8:29:0f:49:70:49:
25:70:79:19:3b:aa:fa:cb:a8:66:8f:cc:ee:bf:7a:
7e:3a:9d:5d:08:a4:74:5b:fe:8c:3c:29:af:d6:33:
6d:31:98:d5:11:96:2a:fc:06:36:ad:58:02:24:24:
4e:36:e2:45:c2:db:16:7f:6c:bb:f7:d2:57:e2:a0:
5a:a8:ea:28:4c:b0:91:19:c9:63:ea:25:c5:3c:18:
87:72:a1:38:e1:46:59:6f:60:ee:55:9e:f0:43:49:
03:89:b5:ca:04:e2:2f:cd:ed:4f:f9:13:4c:22:17:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:61:C6:65:98:14:EF:D4:BC:E0:94:42:EE:A1:87:EC:AB:10:97
X509v3 Authority Key Identifier:
keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fc:81:e1:61:f6:91:ca:e5:8c:8c:68:8e:f0:11:cd:a2:13:
fc:90:a2:a2:3e:9e:1c:23:b9:c5:53:09:c0:4c:82:7c:4e:06:
80:d8:98:26:e3:1f:6d:df:89:71:94:56:59:58:89:3a:d9:e8:
5e:67:dc:a2:91:69:d8:2f:0a:53:fa:70:e7:00:8d:86:38:74:
4e:ed:8e:10:54:3d:4e:58:e0:8d:da:99:1a:9a:90:7c:cd:be:
1a:27:8b:1d:2e:ee:0b:50:e5:b0:bc:32:f2:36:fa:3e:2e:a9:
3b:e2:45:4a:ee:dd:d2:5d:69:2e:ac:4d:9b:35:79:b6:55:19:
f0:08:4e:14:cb:d3:48:8c:39:64:40:9e:8d:fa:a0:ea:01:c4:
32:51:ea:05:d7:c8:91:ec:28:47:4b:78:57:56:2e:8f:2c:a1:
2b:e6:ad:f9:31:31:0b:ec:77:da:d0:62:94:da:29:69:8a:18:
2d:86:d8:d4:fb:7f:59:cb:20:81:72:cf:62:6a:3b:b0:bd:05:
b2:3d:8a:a5:15:4b:a7:f6:48:19:36:6d:00:92:68:ba:56:7a:
66:73:8c:88:cb:46:60:54:73:a5:32:19:14:66:2c:e3:ab:bd:
b3:9c:40:2a:a8:11:c8:cf:94:1b:56:18:ed:e9:0c:c6:65:a9:
7b:dc:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:25 2025 by rpki-client