Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: qHrMKM5SHNVWYkTAWCPUUXSwuUGLUbbKLHdzSGGGKas=
Subject key identifier: 84:6E:C5:5D:4D:33:9B:A4:90:16:09:76:3E:9D:3F:52:A2:EB:3C:B2
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 0194BC3C036159983A203E3A8171AD8871F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 10BE
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: GIScN7jhnxsgIQtJZOW9KhQbLlQmko4LDarbyuQj0e8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:61:59:98:3a:20:3e:3a:81:71:ad:88:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=846ec55d4d339ba4901609763e9d3f52a2eb3cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:0f:e4:44:54:fe:9c:c2:17:0a:2d:d5:0e:
26:e9:be:52:21:4c:a5:cd:8f:1b:3b:b3:1d:c1:ea:
57:16:d1:e8:ef:5a:d5:fb:30:6d:9a:e1:8a:30:54:
d8:27:b8:bc:27:32:bc:d2:d7:e9:0a:0f:8e:1d:43:
b1:5e:d5:89:a5:01:59:7e:b7:0a:f7:e0:4c:f5:62:
1f:c7:99:93:25:f9:df:de:a7:a6:06:cd:d6:6e:44:
ab:01:a0:06:db:13:77:8e:55:4f:8a:9e:d4:db:cf:
43:2f:33:a6:1a:5f:35:7a:ad:04:6a:13:64:fe:1e:
d7:a4:bd:ad:94:8b:45:e7:11:1d:13:6f:b1:64:79:
3d:2a:d8:c2:20:68:77:19:e1:ea:21:7c:ca:20:74:
f5:f3:06:ca:d3:cd:77:9b:90:90:9a:b9:01:0f:0b:
17:54:96:2d:ce:49:53:12:94:12:77:2f:5e:18:93:
6e:60:0d:5b:6a:0c:b6:16:3f:76:12:e1:8b:18:76:
45:49:ac:da:fa:a6:ba:7e:64:99:a4:5f:48:20:80:
ac:93:b5:ac:c7:a2:a7:83:c7:9c:07:86:f5:be:a6:
8d:ca:b0:1e:46:45:38:1f:c3:1e:2b:6f:cf:55:61:
fd:2b:79:b4:a4:f9:ed:5b:a9:e4:62:76:2f:04:82:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:C5:5D:4D:33:9B:A4:90:16:09:76:3E:9D:3F:52:A2:EB:3C:B2
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:28:64:0f:60:ec:d4:9d:54:80:cf:cb:37:5c:0f:8a:e9:
c1:d1:bd:35:e8:d6:4a:51:95:7d:f0:4c:f2:6e:55:22:ea:2c:
b5:a0:51:a8:15:31:58:16:13:d8:d0:eb:72:3e:7a:5c:8c:ab:
3e:23:66:27:cf:f6:cd:97:cd:24:6e:d2:62:0f:a5:1a:a1:1b:
28:1b:26:48:08:09:33:b3:2f:6f:61:45:f5:6e:72:9d:9a:55:
54:9c:99:76:dd:c4:a2:3d:3f:03:66:ab:c0:b5:8d:c4:ca:9c:
71:f9:2f:5c:f6:82:53:f7:05:5a:47:56:e6:65:6c:6d:0d:9a:
9a:f2:e3:25:dc:62:85:0e:30:78:44:0e:38:48:d9:34:b7:be:
f7:5b:22:10:11:1f:dc:96:bb:dc:92:92:f2:90:1f:cf:c6:18:
94:ad:2b:c3:4e:af:57:16:6c:b1:94:7b:f9:f6:90:9a:02:22:
9e:20:57:cb:e2:47:9e:3a:49:2f:16:0c:68:12:97:d5:a5:d8:
59:28:9b:41:70:7e:80:75:ac:7c:98:20:d8:50:80:93:60:cb:
31:aa:03:f9:4d:d3:bb:32:45:a2:2f:f3:8e:93:1e:e5:2e:b7:
09:73:c5:97:55:e8:5a:90:9e:dc:59:2f:73:d8:b3:1b:7b:ad:
3b:c8:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client