Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: aLVNsZ69Qkrbr5RaCd2/VLJLtILg+L8Namx7FcUSyf8=
Subject key identifier: F5:6D:E9:30:16:AA:D7:10:43:B2:2E:DC:80:7B:9B:1A:08:97:B8:E3
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 0194BC3BDF8798CF854AD5744FD8E1F08D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 04CA
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: JMe5OSsUssdeaIGQa1c344mqkWSRSE5VibVCEeQ+A3Q=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:87:98:cf:85:4a:d5:74:4f:d8:e1:f0:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=f56de93016aad71043b22edc807b9b1a0897b8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:48:85:b5:d4:0c:43:be:46:24:0c:48:c9:
59:05:49:0d:66:52:40:b1:34:e1:e1:67:cb:e7:f8:
c7:3c:d3:07:d2:e7:59:58:bb:3c:55:d7:24:73:28:
2e:82:00:f4:06:bf:d5:e9:2b:db:41:03:14:00:24:
c1:d8:b2:ba:74:92:40:8b:b6:ae:cc:47:14:e6:45:
ef:f4:96:fc:b4:a6:67:b7:74:fd:b1:41:4b:61:71:
bb:90:7a:ff:a3:16:cb:55:84:83:1c:2d:8c:82:2c:
83:99:66:21:a8:fd:ad:13:ae:a4:2d:a4:6c:96:8a:
17:26:85:37:e4:df:d6:d2:d8:2f:1e:41:60:0c:d0:
c7:46:63:4c:7b:f2:17:03:e6:ee:9d:a5:c2:b9:3c:
35:80:20:65:f7:04:82:19:40:15:39:97:40:88:07:
95:81:df:3d:62:5c:6b:3c:fa:09:f3:c5:be:ed:78:
51:c4:2e:da:2a:5d:45:c7:de:21:24:3d:31:b7:e1:
1b:e3:d0:33:e8:a8:79:72:63:e3:77:22:2d:8f:c9:
6c:66:f8:d2:20:09:c7:b7:65:ea:5c:d6:2d:bc:df:
2b:9f:21:e0:68:e7:90:2f:40:40:e7:dd:c9:b7:88:
ce:10:67:e3:f5:7a:72:ca:ec:c1:59:79:64:23:67:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:E9:30:16:AA:D7:10:43:B2:2E:DC:80:7B:9B:1A:08:97:B8:E3
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:27:80:dc:26:35:78:59:6d:97:ff:10:50:c2:63:ab:70:
e3:90:7f:c8:2e:0c:5a:9c:e5:6b:27:65:48:7b:1f:19:9e:36:
82:08:66:1a:46:64:26:dd:46:cc:da:52:59:a9:1b:6d:be:42:
89:b1:99:2d:bb:b1:4e:08:2f:ee:14:b3:37:3d:2f:1d:0b:4e:
a1:71:c4:19:3b:10:b8:2e:51:9b:d2:44:48:28:9f:c5:3e:44:
f6:7b:1a:0b:db:9b:10:fb:ae:59:cd:71:2b:60:99:bc:f5:a5:
86:94:91:37:04:92:d9:25:99:2f:15:f2:ec:5f:15:ba:50:f7:
3c:b8:b1:2e:5c:59:b7:b2:b2:40:7c:0f:49:1d:26:64:d9:11:
47:34:e2:8e:b9:62:93:9e:cd:8d:24:08:1e:f4:92:65:73:eb:
ee:d0:16:a4:bf:26:e0:6d:04:62:62:cb:3b:9b:00:e6:2f:25:
9c:2b:ce:26:22:5b:1f:b1:32:31:24:40:5d:b3:08:0e:38:05:
ef:a4:65:21:9d:e7:41:7a:f4:85:4c:ff:90:ea:17:7c:c3:0d:
09:43:43:6c:1f:0b:ea:10:17:06:6f:c4:81:ad:2f:56:a6:1c:
b2:2d:bb:b9:3d:ae:e6:ce:36:95:5f:90:ad:0b:83:f7:80:2c:
79:8c:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:31 2025 by rpki-client