Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: 6mI/tqZMKgRov9F25ALyiVjTqlhr67OmQm6ud4DKkjs=
Subject key identifier: 53:92:02:C1:7D:79:DF:99:96:6B:49:5C:F3:19:A1:9F:65:92:B9:D7
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 0194BD854887616BF57D9646FB670DE07393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 082C
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: 55T0/+h0gLmMRBvRfVig76TRYJqYgOx3Z6q+1cGT5GE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:87:61:6b:f5:7d:96:46:fb:67:0d:e0:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=539202c17d79df99966b495cf319a19f6592b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:41:51:dd:d6:d9:34:d1:3a:b3:0a:93:a2:
40:7b:fe:e6:79:7c:19:7e:78:33:a1:fb:40:82:84:
5a:b2:14:3f:fa:9e:bd:05:25:11:82:23:57:83:fb:
3e:6f:97:59:a9:af:b2:d0:88:50:1a:eb:eb:2e:e8:
1d:59:d4:36:32:91:3f:df:8a:0e:e0:a6:53:38:55:
78:43:71:6d:e9:69:7e:30:aa:5b:8b:4a:a4:e9:ae:
3a:3c:75:d1:47:66:c4:47:bb:ed:f7:b9:45:ff:cd:
5e:bf:59:50:fd:d3:8f:d0:1f:18:dc:87:a3:a1:4e:
de:81:cc:79:d0:0b:74:9e:5c:bd:58:8a:66:c7:3a:
0a:56:f2:a6:55:12:e8:c0:28:34:33:5b:71:a7:4a:
82:ef:ae:e9:fd:89:9c:d5:1b:30:44:99:55:e2:2a:
8e:29:9b:2c:21:7c:ef:47:06:d7:18:86:10:c2:bc:
8d:6d:59:c2:09:14:d5:71:54:f5:cc:c6:f9:5f:23:
5f:47:7e:12:5b:bb:94:9d:bb:cb:28:23:70:5b:e5:
19:28:af:76:7b:5c:67:6d:0f:64:cf:c2:18:c6:71:
1b:e5:b5:60:8c:be:e3:d4:68:37:25:3a:43:34:e6:
28:80:12:18:85:90:44:09:6f:ea:11:4c:78:3b:17:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:02:C1:7D:79:DF:99:96:6B:49:5C:F3:19:A1:9F:65:92:B9:D7
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1f:96:72:b9:13:a9:eb:47:6e:89:fd:b7:85:52:5d:a7:7a:
37:c0:c6:45:e6:fa:cc:b9:58:b7:d1:47:6a:38:f4:b4:c5:4b:
a0:4c:bd:37:95:5e:21:d7:24:81:0c:59:14:3a:8a:57:b3:96:
7e:79:87:43:73:62:d2:1e:b3:18:7f:c0:8e:45:03:df:57:dd:
28:2e:14:02:2e:5d:d8:90:44:28:2c:b5:a7:c6:91:2a:d7:b8:
58:21:ca:c1:e6:bc:7a:d7:ee:64:9f:fe:8a:ac:e8:d0:75:af:
c0:c1:4a:83:2e:b8:8f:85:c6:63:ea:cb:87:90:5a:20:24:8b:
d1:72:e3:37:a0:f0:21:82:e7:64:9c:99:4b:b6:a6:6e:d5:24:
a8:ed:9a:32:74:3a:f5:cb:e4:28:07:0e:9c:e2:75:98:4f:87:
6c:17:28:35:e6:fd:01:6a:a6:d2:29:12:49:9d:06:13:ba:19:
f2:88:4a:b5:60:71:76:5e:99:c9:66:5d:38:9c:ef:ef:d7:67:
b4:82:3e:66:b2:bb:b3:44:e7:0a:6b:3e:cb:9e:ee:17:65:1a:
b8:ad:c6:d8:9c:01:d7:72:c2:70:36:ff:1f:b1:90:6e:e3:50:
4d:a8:a9:0d:35:92:a2:fa:50:e3:89:5a:ce:e1:16:e9:e9:0e:
1b:b5:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:29 2025 by rpki-client