Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: axHsZKxpgC54OgQKYF1QAh7rFalwh/wrfm625KBvcnY=
Subject key identifier: CE:D1:08:12:D7:51:D3:73:D4:23:32:AA:85:93:31:87:25:57:1E:B9
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 0194BC730FD45B68E5B600C3721288189FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 0F13
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: 9kd7zF3Sg9suZ1MHRIw3HIXQ9uo91GgDUmcVbsFVXnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:d4:5b:68:e5:b6:00:c3:72:12:88:18:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=ced10812d751d373d42332aa8593318725571eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:3b:f5:08:de:b5:09:21:92:09:c4:01:15:
a8:d4:64:69:5c:b0:be:55:65:cc:03:8b:49:64:61:
89:31:43:8a:f8:c3:05:4c:0c:ee:96:f4:d7:a9:26:
f3:d1:a3:dc:42:0c:74:a7:82:a5:9a:14:cf:74:f0:
22:90:c9:5e:19:78:b6:59:36:de:5a:95:ca:62:1e:
ef:7e:80:3f:e2:20:93:ee:69:57:b0:f8:eb:e9:a7:
16:83:8c:7f:b7:4f:0e:1d:1a:36:a2:35:09:ba:73:
2a:84:e1:42:1e:24:da:4c:84:b7:59:82:8f:dd:08:
73:cf:a1:d4:18:7f:5b:68:1d:ce:03:2d:e5:1b:d3:
ce:99:d9:65:2a:dd:54:60:8a:3a:8d:3b:02:4a:0f:
30:aa:d1:87:96:1d:9e:53:f2:1c:20:04:90:e8:df:
6f:cd:67:96:8c:7d:8c:5e:85:16:3b:35:03:10:2f:
1f:6e:0d:60:97:35:93:e9:8a:f8:9b:0a:ac:b0:14:
8b:ad:ec:dd:d3:f5:18:ad:30:d6:c4:23:6f:b8:fd:
22:72:3b:7b:bc:e9:dc:67:9c:67:62:f4:9d:21:de:
71:a9:b7:8c:dc:4c:a9:50:d5:89:2f:bd:4e:37:ac:
23:32:d3:c8:fd:7f:e7:de:5e:69:53:b6:ff:a0:93:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:08:12:D7:51:D3:73:D4:23:32:AA:85:93:31:87:25:57:1E:B9
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:b5:2c:b2:98:34:4e:61:db:5f:1e:43:94:54:c8:5d:0e:
66:9a:54:cf:18:ad:d3:1b:82:cf:78:25:cb:9b:4f:c8:0a:be:
49:c3:8c:8b:b0:5d:83:81:fa:72:4b:fe:03:11:be:b9:dd:ef:
9a:fc:b1:13:a9:65:e7:56:7a:d9:c2:e8:f9:07:83:aa:0e:81:
9f:17:b1:eb:e4:82:55:ff:e2:2f:cc:91:9d:2f:a4:4c:bb:07:
a3:09:d4:91:22:81:7c:ff:14:1d:c0:c6:53:eb:a4:70:1c:7e:
67:23:4f:22:79:74:e3:ee:07:a1:a8:e6:03:55:42:c8:cd:ce:
fb:19:33:d1:0b:f3:98:42:4a:9d:18:e6:df:f1:2e:04:67:24:
8f:f0:57:b6:30:bd:f5:7d:15:9b:74:bd:09:83:15:43:31:6c:
82:57:19:64:f0:6e:d7:aa:42:ac:22:81:eb:e6:a5:f5:e9:9a:
6c:3d:b8:81:d1:9e:c1:25:05:47:fa:e2:12:f3:d9:99:35:dc:
31:33:17:b5:a7:98:40:38:80:b4:0b:5f:62:14:0c:f7:a0:59:
9a:07:2d:d0:9d:bb:5f:ff:3e:95:19:5e:52:da:9a:8e:5d:02:
35:88:4d:25:76:81:c9:78:12:2d:10:50:98:f2:35:8b:18:67:
61:f5:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client