Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: jFkbzFygb/2kFsf4o2M34tMSB/ThCKs/iGplsNvhmL8=
Subject key identifier: FE:7F:C1:F4:54:D4:79:AA:66:9F:E0:71:B6:91:6D:DD:F4:ED:4D:1D
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 0194BD4EC45C7A092EFF045461A8504B0B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: JvsrGOmdYOj8LXBMZEYawL3mwhbYzoF1c2zqe12soBg=)
2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:5c:7a:09:2e:ff:04:54:61:a8:50:4b:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=fe7fc1f454d479aa669fe071b6916dddf4ed4d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:50:ed:f5:ff:c7:ca:ad:b7:9a:17:9b:27:
c8:f0:c8:13:e9:45:eb:dc:90:d9:1d:cd:73:60:f8:
eb:62:4c:38:5f:63:6e:9e:cd:2b:0d:df:16:79:89:
a5:cf:18:b8:2f:91:2f:5a:27:03:ac:a9:4d:ca:89:
3a:fd:57:cd:0f:25:3f:cf:5f:1f:87:d7:3d:fe:4e:
ad:75:42:73:17:21:a7:90:42:d5:41:0f:92:d4:8f:
ad:b6:45:03:21:7e:8f:46:2b:34:1f:d2:43:7a:75:
c2:27:d4:69:91:08:a3:3e:66:0e:a9:a4:ce:ba:23:
6f:c5:be:9a:69:5f:38:1c:a1:a2:b5:43:d7:2b:3b:
9c:72:78:0e:c6:f0:8a:15:42:2f:c1:fd:6b:5d:6c:
dc:5c:8c:f0:a4:18:55:7a:83:fd:16:2b:35:bf:62:
6d:f2:94:da:d0:91:2c:b5:d6:82:24:95:ac:8c:ed:
6f:a0:55:f9:5e:e6:a8:9a:d7:08:f6:ed:c4:6d:1d:
0d:98:84:20:f4:14:46:90:d5:cf:08:ab:ba:6d:72:
ec:02:6a:0a:a6:0e:1d:3a:2d:a0:02:26:9f:3a:f5:
da:10:8c:17:8e:cc:cf:b3:1d:13:4e:a3:c7:36:98:
b4:75:4d:c5:bd:8b:6e:3d:15:74:01:c5:45:c2:11:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:C1:F4:54:D4:79:AA:66:9F:E0:71:B6:91:6D:DD:F4:ED:4D:1D
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b2:aa:45:69:0a:e2:de:1b:7b:87:b8:b7:27:86:2d:dc:37:
b7:f2:ad:52:7e:a0:16:f1:a7:c8:34:a0:32:a7:e5:fc:00:fd:
20:c4:19:7c:2b:a2:3e:c6:fa:78:86:4c:dc:fe:44:10:46:c8:
85:d9:1e:99:96:69:a7:99:db:eb:54:7d:74:f9:cb:74:1d:b9:
70:67:e7:90:cf:5d:8b:73:df:bd:22:30:6c:f6:e9:2c:76:56:
eb:51:e5:51:95:1b:d1:4e:85:b4:66:ba:14:80:2d:df:61:6c:
b5:e9:cb:3d:09:63:b9:f0:0a:1a:41:9b:f8:00:cb:a8:b3:8f:
97:32:34:00:e7:90:80:bc:df:e2:ba:d5:2b:fe:2e:78:e8:a0:
2e:e2:cf:d0:4a:dc:bf:61:32:84:1d:05:85:42:f6:c6:07:95:
ba:d9:9e:1d:b9:34:54:1b:38:04:b5:7e:ce:0e:70:68:14:d5:
e4:d3:de:e3:0b:4a:d9:a2:78:41:90:85:81:21:d7:2b:2b:89:
44:a9:be:82:08:71:59:a1:77:e3:b0:28:6d:75:c3:16:6a:cd:
e5:e2:80:30:a1:6b:8b:64:ac:d2:fa:21:98:e8:c5:9f:09:ed:
49:b7:ee:18:88:7c:cd:82:76:97:e1:1f:cd:e3:7b:bd:8e:c8:
d5:2b:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:46 2025 by rpki-client