Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: duH5nuZU+hSBHGRLJHu8VuJfK/buAV9CdmDTD4kvXvE=
Subject key identifier: 56:1D:9D:74:7C:A5:79:45:35:1E:D6:81:84:A9:45:E4:0F:05:8E:93
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 0194BC04DE6FDFED6C47ADB30B41A3965908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: 018D
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 3e70ZZqi33Dl2b2l60x4ZQeIHq8.roa (hash: ezFIoSxfuKrnfHFTC4lkRDwVwAnl+AIoLI5PIzwvHuI=)
2: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: 3lcJ3f1kNkv0IOVHfGHnwwHekTSyANQbHmZYSHXa78g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:6f:df:ed:6c:47:ad:b3:0b:41:a3:96:59:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=561d9d747ca57945351ed68184a945e40f058e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:ec:d1:18:4a:9a:0b:a6:2a:53:9c:88:bf:
23:94:9e:e7:0b:69:49:de:78:e0:8f:4e:27:36:03:
de:1a:5a:04:06:ef:42:12:14:a9:1f:9d:4d:91:4e:
d5:20:2f:89:40:8b:f6:52:82:4d:a9:a6:5a:fd:ff:
a4:c2:5f:0b:9f:ba:5c:e8:5a:e0:2c:45:19:78:e1:
42:a4:1c:06:60:43:44:98:b3:48:61:0f:fe:c6:39:
13:e7:d0:53:b5:e9:cb:b8:f2:ae:d7:6e:14:ea:33:
55:62:8f:bc:76:c8:8f:07:b4:b8:d3:18:f9:30:8f:
23:64:f5:76:eb:96:82:d0:c3:35:38:7a:35:30:57:
a1:ff:b5:8e:7c:35:15:a5:96:ee:96:74:d3:aa:25:
10:71:78:6f:ed:eb:26:00:a8:96:3f:0e:3b:33:1b:
99:a0:a0:61:65:50:c1:53:a0:69:76:17:c4:9d:7d:
a8:0f:e2:99:b8:64:b1:0b:8e:0d:13:aa:99:1a:34:
4e:95:76:90:ff:6c:48:b1:4a:30:49:3e:07:42:22:
00:3f:7a:4b:ab:59:79:9a:4e:a7:2e:b5:6d:8e:54:
94:08:95:23:62:4e:df:61:45:fd:ad:49:f7:0b:86:
19:0b:83:1d:34:2d:76:8a:5a:83:25:0c:83:38:e0:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1D:9D:74:7C:A5:79:45:35:1E:D6:81:84:A9:45:E4:0F:05:8E:93
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ff:2f:70:7d:b9:96:8e:6a:4d:c0:a8:c9:00:d4:77:47:14:
94:c4:0b:23:bc:54:80:45:98:22:87:6a:4a:70:50:5f:ce:fe:
7e:7e:a4:16:2e:80:95:02:ae:70:89:3a:87:a1:77:a3:cb:97:
45:35:46:50:76:b5:be:06:60:b4:76:10:0f:dc:fa:7b:a2:b4:
c7:4e:33:7c:0b:24:fb:2c:27:bc:98:28:2e:d0:c7:c8:e9:8f:
3b:86:86:c8:2a:3b:e5:e5:15:3f:d2:c1:17:0a:5d:c3:72:1e:
cd:66:6b:6a:dc:3c:27:7f:b3:cd:7a:51:47:47:40:97:4d:7f:
88:71:be:3c:30:12:b9:8b:e0:aa:14:4b:e4:cc:28:b3:3b:60:
19:a5:03:52:a5:d0:ed:1f:94:cd:42:2c:35:63:a4:66:e1:f8:
5e:16:db:a3:bd:59:ec:80:e9:4c:be:ca:be:98:7b:a9:6d:69:
f8:ef:07:0e:31:52:ec:44:53:b3:0b:2f:c8:0c:1a:35:f9:5d:
a3:d9:91:87:96:f6:36:37:f1:5c:af:60:d0:f6:29:ee:dd:2b:
21:c5:10:29:40:d7:0b:96:f2:27:1d:a1:90:a8:51:22:1d:31:
9f:3a:40:1d:0e:63:16:86:f4:86:9e:a7:bc:e8:bd:24:cd:36:
93:c9:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:12 2025 by rpki-client