Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: dcv/GIPcy0i7/Mf0Hojj7Avb2n8z8QGaXUXHWdVaWg0=
Subject key identifier: 13:D6:08:1E:50:4D:93:0C:2E:32:84:57:6D:87:A8:11:A6:7C:85:63
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0194BC3BC2D6E6F73F9F8224DC197CC489FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: f7q+kwEbxr6TvVDwEswADYjknswMH/oAZqqOMaNn7O8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:d6:e6:f7:3f:9f:82:24:dc:19:7c:c4:89:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=13d6081e504d930c2e3284576d87a811a67c8563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:d5:22:25:7d:69:ad:00:db:12:b4:c5:0a:
e8:4b:4c:4d:df:9b:b2:8d:f7:79:4f:d1:73:b6:71:
68:e6:48:f3:bb:66:53:19:91:49:bf:eb:7f:5c:6f:
93:af:dd:f3:50:e0:a3:fc:af:b2:89:0f:f2:15:68:
22:47:4f:1b:31:46:53:cf:68:11:0f:a9:f2:89:78:
bc:0d:d0:d6:69:05:56:f4:12:cb:c8:42:ce:42:22:
26:74:c5:87:1a:6f:f7:74:33:92:22:43:a9:f7:a7:
90:e6:51:99:53:71:67:aa:82:02:1b:45:87:18:3e:
15:b7:10:9c:e4:7f:cc:fa:ec:5e:eb:48:d0:6e:53:
9d:b7:cf:ee:a6:cf:c7:f2:42:59:30:8d:0d:62:7d:
2f:12:92:1b:8b:fc:7e:72:2a:86:26:ce:fb:8c:f6:
79:be:fe:67:13:5d:3a:17:e3:30:c8:13:33:a2:72:
9b:7a:3f:62:ae:95:a6:e1:8d:5c:b7:d0:84:48:1e:
4f:35:88:d1:5e:18:7c:c3:64:9c:11:2b:0b:c1:f7:
36:3c:a2:98:fd:f6:08:13:1e:ce:c1:f8:52:f0:c4:
d9:d6:73:15:4e:4a:9a:c6:ec:ca:33:b8:18:3d:32:
8a:ac:90:0f:53:6b:fb:ad:d3:a4:6a:a9:53:1b:16:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:08:1E:50:4D:93:0C:2E:32:84:57:6D:87:A8:11:A6:7C:85:63
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:e4:26:1b:27:19:86:5f:02:fc:85:63:ee:ec:81:ef:5a:
51:21:7a:82:f9:14:52:2b:73:b8:35:8c:c0:cc:06:c0:96:df:
e2:89:c7:10:85:ba:e4:64:20:25:8a:13:c6:b3:00:ac:da:44:
4a:f4:3b:09:70:b7:6f:08:03:f8:d7:9f:c1:83:79:c4:8f:19:
53:ad:aa:0b:2e:47:e8:84:7c:be:de:37:6a:ec:b5:63:d5:f1:
60:b4:c7:35:1d:64:d1:ef:99:c7:1a:93:8a:f2:5b:4c:7d:ef:
b0:01:10:80:32:2e:4a:6d:e9:e7:55:81:a6:4e:4e:8e:15:e2:
22:46:d6:1a:0a:73:f0:08:20:29:f6:fb:a5:51:31:13:0c:13:
44:61:35:e8:b0:7b:3b:39:f8:6f:27:8d:69:51:b1:c7:23:c7:
17:b3:a2:59:14:f1:24:a6:e7:cd:e5:25:05:7b:5a:fd:7b:3c:
a9:ab:c8:10:f7:e2:86:a0:75:d2:eb:d1:75:b9:2c:fc:cd:9b:
56:0e:88:c9:17:d3:db:9e:b7:3c:93:8e:13:95:04:f2:09:57:
fd:2a:ff:32:63:6f:44:4e:16:98:a7:b8:64:78:24:65:80:a3:
3b:fa:f2:1a:45:95:5a:43:b9:69:2f:ea:99:37:09:53:6b:4d:
84:79:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:09 2025 by rpki-client