Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: pCBt7BEx4Ux2KHNbRjZ88bUFy1BD4qHZYBGbQQihQEs=
Subject key identifier: 9D:D4:CE:D4:BA:93:B6:49:F6:F9:D6:07:BA:F4:88:07:FE:20:46:83
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 0194BBCEDCE7CA299159C106D27617BDD04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0CA5
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: Oq3MWuKncrMOvHAQurZisWwSHe8l3xKhNhSBb9TPPNc=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dc:e7:ca:29:91:59:c1:06:d2:76:17:bd:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=9dd4ced4ba93b649f6f9d607baf48807fe204683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:35:33:5e:f2:5a:6a:f5:b7:bf:f1:af:a8:
b0:db:2d:b8:ee:b8:88:0f:97:e5:e6:c2:dd:fd:55:
fa:6f:86:58:bf:84:36:03:ee:48:6b:52:09:8d:e1:
95:7e:2d:e7:4f:e9:1c:88:97:d8:da:3c:fb:7b:1b:
c8:55:f0:d8:85:10:a8:3c:9d:70:ab:85:04:b9:9e:
0e:f5:a4:28:42:c1:3b:8a:36:33:a6:e7:5a:94:db:
fb:a2:b6:d0:80:19:32:4b:9d:7c:7a:2a:45:2f:72:
f7:df:3d:35:c5:06:3d:04:85:2e:a3:32:e6:ae:f7:
45:7d:94:71:c0:1e:22:16:d1:9f:60:16:13:c2:0a:
db:08:b4:1a:e4:3b:2f:d1:ba:51:a3:11:e8:a9:03:
d6:da:37:75:46:b9:fd:30:ab:27:61:4b:5d:29:7c:
22:c0:d5:ef:d9:a8:d9:31:92:c1:ae:e0:40:8e:06:
01:bd:61:e1:3b:17:6d:13:19:c5:1c:d9:77:76:a1:
81:72:fd:99:31:bc:ff:f7:1a:2a:40:55:7f:9d:a8:
51:1c:18:0a:9f:87:86:6a:fe:de:e5:63:81:f7:e5:
d7:7f:38:9a:cc:e3:a5:d0:53:24:fa:98:4d:3f:f2:
ae:48:90:7d:0c:e7:40:7d:f3:2b:64:f9:8a:55:ff:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:CE:D4:BA:93:B6:49:F6:F9:D6:07:BA:F4:88:07:FE:20:46:83
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5b:4e:35:14:ea:a7:ab:9c:ae:35:5e:4a:27:06:c3:e5:ae:
34:2f:9c:28:68:7d:3a:23:da:96:ad:e1:66:89:cc:14:84:49:
4a:d7:08:30:11:c7:91:a8:cd:a2:37:e2:e6:2c:31:2e:2b:57:
aa:21:50:4b:cf:38:61:9b:61:b3:8b:c4:4d:e3:85:a4:75:45:
b1:23:0a:aa:ad:d7:31:33:0e:a8:81:ce:a0:b6:9d:7f:6d:4b:
39:6f:86:7c:08:47:fd:15:64:51:84:5e:92:a1:0d:32:b8:7d:
11:1d:56:31:be:72:fe:28:c8:9c:38:63:c5:65:08:79:c0:c4:
7f:39:46:91:43:c2:2d:5d:53:d5:61:e6:89:93:e6:81:56:26:
72:f2:28:94:e8:98:d1:74:f2:32:88:9a:dd:2f:da:aa:da:94:
d9:fc:5a:96:29:7c:72:b1:14:78:c6:dd:7f:c4:23:72:b7:6c:
4f:69:25:5e:c4:2c:63:5a:09:74:8d:44:a2:7a:aa:e4:f4:58:
87:9b:b0:50:23:0a:d2:97:6a:7f:a0:7f:6c:71:a4:09:9c:67:
d7:6d:2d:4b:5b:31:1e:29:3e:86:2f:19:d3:e5:59:32:ad:bd:
50:52:88:4e:78:f6:60:9c:7e:13:c8:ad:d6:1d:ea:ac:9b:75:
4c:ee:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:52 2025 by rpki-client