Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: 5cuMxvOHZrs3IBiC2Qxg5g2Mjfcvx7grzE1Y37cQSRw=
Subject key identifier: 35:37:ED:B5:2A:EA:48:E8:3F:F3:AA:77:98:F0:2C:17:80:62:D2:D7
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0194BCE0EC8FF16A64C19FE6A5422785B4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 11E6
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: hbP2VwvG19CX3SIXfaALeS7aSSxahK+Eeq5oMkj8Dto=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ec:8f:f1:6a:64:c1:9f:e6:a5:42:27:85:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=3537edb52aea48e83ff3aa7798f02c178062d2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:d2:f0:ae:92:28:56:28:6c:cf:70:d8:a1:
2f:31:c6:5d:73:f4:8c:31:5e:d5:dc:de:c9:92:36:
6b:3a:dd:ff:4b:a7:fb:f4:ab:dc:82:f8:a9:81:59:
b1:30:2f:cd:3c:7a:7e:77:03:92:84:e7:7e:b9:39:
d3:d3:d7:43:92:55:e2:e7:67:ab:53:46:a1:a7:f1:
08:21:da:39:9c:b9:3d:2c:c9:d8:fd:cf:c9:59:e2:
a3:c1:f5:39:11:a7:91:53:45:f5:1c:cc:48:63:80:
4b:28:88:34:30:1b:10:b8:1d:f4:a0:d0:f8:6e:46:
b2:cb:5a:08:2e:74:c5:fa:68:65:26:19:a9:b4:9f:
03:a5:03:bd:d2:84:ab:9d:77:cb:a4:4d:22:e8:70:
94:59:f8:04:fc:0d:4d:36:68:fb:e8:ff:c0:d0:9e:
a6:87:33:39:eb:64:0c:e3:a0:06:ce:07:29:b6:9d:
26:47:29:7d:d1:4b:c0:c6:dd:cd:55:70:1e:c1:b7:
62:25:0c:be:ab:41:7f:3f:79:34:8a:04:da:19:2f:
ea:8d:2a:d4:e8:5b:8d:89:58:bd:42:ab:dd:51:4f:
fd:18:a8:88:25:90:81:a0:e7:97:04:ad:c6:d6:2d:
79:07:1d:58:75:df:30:6a:eb:e6:07:5f:ca:ab:15:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:ED:B5:2A:EA:48:E8:3F:F3:AA:77:98:F0:2C:17:80:62:D2:D7
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cd:64:49:d4:d0:b2:a6:fb:b5:df:9c:00:e9:f8:45:d4:e2:
e7:dc:ac:ff:53:a5:2c:19:5c:4f:ba:02:d2:c4:8a:57:2c:07:
79:0a:a7:41:9c:64:3c:31:92:91:98:a3:7d:6d:50:8d:61:14:
66:92:93:8d:06:b3:89:80:37:16:b5:4a:99:1a:fc:f3:a5:c5:
81:9e:d8:8a:fb:f8:29:75:41:2c:41:e9:49:69:53:c1:a4:cd:
ce:23:3f:23:2f:d4:2e:1f:c0:e9:c3:05:52:e0:a8:f1:90:30:
fe:34:b0:b9:b9:96:8d:27:1a:75:09:c8:11:ff:49:79:7d:ec:
dd:93:4f:c9:8f:73:22:73:44:f3:62:0b:ff:21:8c:fb:28:bc:
4e:73:dd:5d:f2:eb:42:16:91:59:fa:be:39:e4:4c:4c:79:26:
48:b5:35:09:c3:5a:83:96:e3:9a:68:f4:a3:b2:ee:85:7a:10:
76:1c:b8:21:bf:ab:8e:86:74:82:a1:bc:b0:c2:61:34:3e:74:
ee:84:34:5b:dd:08:73:5f:a4:44:67:44:49:8a:15:34:0d:c3:
4d:ba:06:a3:0c:6b:10:fc:6b:9d:e5:12:93:e4:94:4b:83:7c:
2f:4e:aa:f1:03:39:5a:b9:46:b8:68:71:09:d9:59:ea:b0:d0:
4f:52:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:26 2025 by rpki-client