Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: EEfRsVmNTZEWDyNH0WsZ3gJUOQgVadn02+mHlbfjDJI=
Subject key identifier: 15:3A:46:B5:B6:57:49:D2:7F:1F:F4:02:05:31:4D:23:4A:68:45:C8
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 0194BCA9B2577217984908A38598A7C61BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 0E0D
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: uoeEK87m77Lga/arAiqxbMgi3LUMeRE6bwtCa/rxtGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b2:57:72:17:98:49:08:a3:85:98:a7:c6:1b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=153a46b5b65749d27f1ff40205314d234a6845c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:29:55:81:6f:5e:75:81:53:ca:25:7d:aa:
37:80:01:fa:11:f2:03:2f:29:26:ab:ce:50:4e:59:
2f:3b:97:9d:05:85:b6:d7:bb:13:9b:51:ae:d7:4f:
da:51:b5:3a:b2:63:a3:b0:75:71:a0:c6:af:8a:57:
bd:51:a5:f5:1a:b9:fd:53:70:ef:7a:f0:3a:c8:bd:
29:d9:53:00:ee:67:62:65:ff:7c:bf:40:f3:5b:f4:
de:c9:37:9c:b9:ff:bc:0f:6d:ee:14:e3:38:bf:bf:
f5:15:97:62:21:9e:b0:ed:86:ed:d0:14:2d:10:66:
4c:60:75:56:7e:01:f3:67:9a:e0:34:b6:0f:b1:c8:
41:ad:dc:25:83:d2:e2:8b:d2:30:36:16:c1:f7:28:
46:b2:85:61:09:1c:1a:25:24:2c:49:cb:8f:fa:60:
d4:80:01:d6:4a:72:f2:f2:41:29:ff:dc:4a:2d:97:
84:ef:18:a2:f0:bf:8f:b0:d7:e2:51:a4:56:be:2d:
fd:41:7a:9d:94:ae:36:c9:44:9b:87:d0:d1:61:9a:
b4:b0:67:c9:f9:9b:3f:53:c5:41:32:37:f1:d0:0d:
c5:5d:b2:54:49:01:81:be:ce:8f:60:07:a8:9d:f1:
05:4c:f3:16:12:f9:3d:0d:01:1b:66:a7:6a:d6:fa:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:46:B5:B6:57:49:D2:7F:1F:F4:02:05:31:4D:23:4A:68:45:C8
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:07:7c:a4:50:c8:ab:45:b7:77:25:ac:88:19:e2:87:48:
86:9c:9a:fb:b5:95:16:a8:ce:4d:e0:10:af:51:3a:2d:5f:31:
37:9e:fb:3a:2d:f5:2f:1c:a9:f6:85:24:6e:e8:6c:6b:44:a1:
50:42:fe:10:d5:6f:b9:3c:51:ea:b3:04:9d:a1:a9:61:68:a7:
cf:49:1d:45:69:8d:f9:48:3d:3a:07:52:87:3f:54:01:9b:14:
be:95:2d:79:c0:72:cb:1b:50:56:34:c2:dc:09:bf:d5:15:37:
75:a0:cf:5f:1c:dc:46:3f:b2:aa:d9:26:54:f0:55:37:16:80:
b0:4a:c1:af:58:18:82:75:4a:ee:10:01:29:f4:26:d0:8a:d5:
44:32:4b:35:47:92:78:8e:87:68:50:95:fa:32:30:44:4a:07:
9c:50:34:29:84:0a:af:41:cb:e4:c2:9c:cd:20:91:9a:41:58:
e0:a6:7f:41:b3:11:3e:cb:a6:61:5b:f7:3c:f0:9c:1c:18:b1:
2d:92:1a:02:73:e5:b7:f9:57:58:e8:a3:87:36:6e:23:9e:d8:
a9:d1:19:27:90:1a:3a:52:a5:7f:93:7a:8b:92:22:d3:77:81:
3f:22:a3:27:14:bb:b7:3e:d6:d0:32:c4:7b:d4:b9:35:92:e8:
77:25:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:26 2025 by rpki-client