Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: AQOca357IT34OK0ySzU6DW+rVzxXWMhbtGs79egoEKQ=
Subject key identifier: 3E:51:15:B7:C8:FE:7B:73:62:BD:C0:76:5C:4B:B3:DF:E2:1D:BE:AC
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 0194BBCE4C227B209C357B949FF7FBBD1BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 030D
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: gvjHREmxPgzFXn+gY2Ww4FxPzWJjF+g2+Cz7tpZog7s=)
2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:22:7b:20:9c:35:7b:94:9f:f7:fb:bd:1b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=3e5115b7c8fe7b7362bdc0765c4bb3dfe21dbeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:1e:8c:56:20:67:37:df:1a:ce:76:55:2f:
ce:5e:1c:63:bb:a3:86:34:57:6f:aa:9a:52:91:cc:
76:e9:ac:52:13:6b:4e:25:ed:b9:82:1d:36:6e:0e:
ab:78:c6:e0:03:0e:76:16:80:28:ad:1d:e5:02:2b:
dd:34:68:16:b0:c2:f4:0b:70:d6:c3:79:91:d0:05:
37:bc:1c:cb:b5:34:52:68:44:80:33:68:da:a3:07:
7d:5e:8b:cb:1d:82:99:5b:0b:14:19:52:08:6a:07:
d5:f1:19:bb:ba:c4:be:bc:29:04:e6:5d:bf:80:48:
12:c1:d1:e9:cd:cc:65:37:a8:01:50:e5:3b:3b:bf:
e4:53:d0:90:8e:3b:dc:4e:d2:c9:bc:16:f4:65:73:
9d:14:f9:fa:f4:e9:3a:d8:b0:50:4f:cc:25:c9:8f:
76:a3:8d:29:2e:6b:e1:b7:4d:f7:11:2b:fa:b8:6e:
8c:4b:8b:24:fd:aa:ec:7f:fd:8c:3e:b0:55:a7:b0:
1e:02:25:de:ae:a2:12:0f:62:db:60:57:dd:ae:5d:
f9:92:af:76:22:bf:bb:fc:01:32:93:77:f0:12:12:
07:75:a2:7b:c0:54:f8:2f:f2:48:5b:49:62:48:6e:
c7:22:a1:25:e5:b5:c4:5b:4d:37:be:b5:05:a5:46:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:15:B7:C8:FE:7B:73:62:BD:C0:76:5C:4B:B3:DF:E2:1D:BE:AC
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7b:f6:d3:a8:91:e2:ef:6e:ba:6b:5b:2b:07:a6:30:1a:df:
60:26:ab:15:fe:d2:f7:1a:96:f3:a9:30:1d:30:44:62:18:e1:
3d:68:f3:d9:d2:7f:45:af:06:32:88:20:5c:d5:6d:6f:ef:47:
f4:f6:81:ae:85:cd:61:87:61:3a:42:cd:a2:8c:c3:3f:88:5f:
3a:ab:4c:54:83:81:92:50:c5:f7:d4:a2:e0:04:c8:a9:4c:2b:
34:e4:c1:10:f1:2c:f5:37:f2:ad:f3:b9:29:a0:28:c8:67:41:
19:4e:05:88:5c:b1:e6:a4:ca:92:7f:88:05:b5:5d:de:2a:b6:
9d:ae:2a:1e:0e:5a:e3:aa:d0:aa:59:58:36:64:26:f1:e5:87:
98:2c:31:7b:4c:bc:15:42:64:04:91:c7:3a:87:5c:e0:bb:7c:
e2:1d:b7:94:60:d6:c4:6a:a2:4f:e2:e4:5c:20:d8:c0:80:1c:
84:7e:06:6e:c9:b4:3c:fe:00:1d:b1:d9:46:2a:96:87:f8:9a:
f3:ea:3b:ef:3e:10:84:6f:a1:90:7d:db:8b:db:d8:85:76:9c:
32:5c:b4:fc:68:f8:5f:d7:d4:39:76:eb:30:39:37:f4:4f:b8:
4d:b1:fc:ec:49:7f:bb:83:28:eb:cd:65:04:ab:c6:8e:14:e6:
32:cf:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:16 2025 by rpki-client