Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: pF3xwZOfzOe5jI7Enb9Qn19GFV1Mr/oevipG1GgH/TU=
Subject key identifier: AA:2D:4A:7B:CA:A6:B0:E7:2E:A4:38:5D:9D:E7:72:C3:81:A4:5D:56
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 0194BCE0CBAA697BB46F6B37C014202C5A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 11C6
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: F5ZNxn3ce2XjairEyKO3p8ebUqA3fcvJEgsURdZqy54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:aa:69:7b:b4:6f:6b:37:c0:14:20:2c:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=aa2d4a7bcaa6b0e72ea4385d9de772c381a45d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:6f:f9:be:61:ff:50:8d:6a:3e:06:23:b2:
d9:14:28:db:81:37:d6:f5:d7:38:25:85:ca:54:0e:
de:d1:31:c4:df:66:be:31:e9:05:29:63:fa:31:33:
65:8e:81:4b:9f:c4:f5:ef:fa:37:46:b5:a2:7e:cc:
3c:f4:12:77:ec:d0:ca:06:69:7f:1a:ac:b5:3e:33:
06:ef:de:bf:a9:34:c6:9c:5c:f7:39:f4:91:c4:83:
ba:ea:88:18:c1:58:6b:5b:45:58:4f:1a:8a:7c:0c:
19:4a:4f:4c:7c:9e:e5:fb:61:8b:ad:41:ed:57:df:
56:1c:ff:da:45:37:35:56:e5:9e:c5:fd:cf:5a:ed:
02:55:c3:2b:6a:88:c3:89:84:d1:82:24:fe:d3:84:
3b:01:38:dc:b7:bc:67:0d:31:03:fb:de:e6:eb:38:
b3:3c:70:e0:9f:2e:5c:67:a5:d2:e4:51:dc:e5:af:
73:c0:9d:b1:d8:cb:74:b1:3a:8e:ea:22:42:b5:66:
9e:2c:03:fd:5b:9d:55:af:05:ed:6c:a2:ea:a0:61:
8d:ca:31:e4:ac:8b:44:be:7b:73:24:60:28:5d:de:
82:60:28:e9:93:88:9b:9e:98:65:60:19:1a:cc:f6:
11:7f:02:5b:c3:e0:fa:04:51:dd:4f:23:2c:40:e8:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:4A:7B:CA:A6:B0:E7:2E:A4:38:5D:9D:E7:72:C3:81:A4:5D:56
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:98:af:3a:88:e4:1a:5d:6b:23:cd:fd:e7:6c:94:6e:59:
6e:40:5d:b8:34:3b:80:71:da:2e:03:35:bb:f0:cc:2a:a1:00:
7b:0e:61:30:33:0b:1d:90:f8:a1:65:a7:31:04:d4:50:94:30:
4e:76:8f:57:ba:e9:92:ac:0c:41:29:80:59:4c:d0:fe:d2:a1:
8f:f4:08:12:21:59:ab:89:29:7c:84:6f:71:50:cf:e0:5c:df:
86:de:a7:e5:be:c1:bd:c7:6b:61:b5:78:69:0b:84:d3:99:1b:
e4:d1:8a:c9:b5:ce:0b:10:a5:2f:3b:0d:99:10:44:2c:ff:63:
2b:d0:ef:2f:be:0f:e9:ae:f0:a2:d1:ef:a3:dc:82:a7:f3:d3:
86:24:46:b5:bf:36:ec:04:6d:87:14:17:d2:e8:78:fc:64:cd:
31:ac:e5:e8:cc:e0:0b:1e:72:e5:b6:78:f5:ed:c1:ef:d6:35:
0e:ed:52:9d:e0:26:1f:4d:45:00:ab:ba:31:4b:c2:7e:0d:2a:
e9:7f:1b:21:13:d0:f5:52:58:e8:f9:12:6c:d3:ec:77:d2:06:
61:9e:8a:86:65:19:4f:8b:c1:02:f8:ce:fe:ac:7a:08:b9:20:
bc:30:d7:44:d9:0b:b4:ef:e0:5d:a4:a2:7b:b3:a9:23:81:d4:
c5:72:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:29 2025 by rpki-client