Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: 5+Jir+4Hio/xKp8b6DPvZF3QQqgtThhtXWyFsPFa+ic=
Subject key identifier: 33:9C:99:CC:66:F6:BD:01:01:8B:9D:C5:08:FB:99:99:DE:E2:F1:10
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 0194BBCE70611A81A9345C70EAC79A9A1AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1464
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: L9ZczXVqozc2Pw8H38NjZ6v20HthLeet9tK+wWoyvLo=)
3: eoZCDBDZswwD20kawwtGUsbiK5M.roa (hash: RQsTLPtP64I2OWiWyNV0HAEtc39bp9ZxrjglxqCB4CY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:61:1a:81:a9:34:5c:70:ea:c7:9a:9a:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=339c99cc66f6bd01018b9dc508fb9999dee2f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:d4:3b:15:f8:bc:b8:27:02:cb:1b:69:41:
5f:4b:d0:4a:67:84:1d:04:12:28:82:e4:ed:e8:96:
d0:55:fe:97:b6:dd:b7:0d:a1:a0:53:26:85:5a:f3:
6e:34:68:b4:a5:8d:65:d7:ff:ed:11:c9:51:0f:aa:
f4:8a:93:10:93:48:ed:1b:df:62:96:71:f0:23:32:
96:a2:dd:22:5c:59:0f:91:36:c5:2c:2c:eb:f3:b5:
cb:2e:63:ed:8a:7d:56:c6:90:fd:26:c0:45:17:bb:
74:85:a6:13:51:46:af:fc:41:e0:ba:3d:7f:53:3e:
3d:6d:ab:d7:70:52:c3:07:b6:bc:00:37:aa:58:49:
00:f5:7b:91:b5:dd:90:ce:4e:2d:60:bf:5e:a8:e3:
82:5f:34:83:ea:91:f5:6d:5a:c4:20:64:c4:45:22:
5a:b1:e0:20:d3:39:6c:3b:cd:42:de:cc:2f:00:d7:
31:3a:e6:f7:f0:1b:9c:d1:d1:d3:37:69:b4:b8:de:
c0:d0:ef:8d:f8:42:e4:f3:b5:b2:5c:14:87:8d:e5:
6a:aa:6d:c9:0f:26:04:e0:49:7f:b4:ab:f5:cb:c9:
37:45:44:07:e4:c5:92:68:85:5f:87:13:5e:ce:22:
45:83:cf:5f:a6:d6:87:3d:87:9a:91:6a:2f:d7:f6:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:99:CC:66:F6:BD:01:01:8B:9D:C5:08:FB:99:99:DE:E2:F1:10
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:6c:34:35:d4:c4:fe:5d:77:8a:00:a4:4f:14:23:2b:09:
05:9e:9c:ff:10:29:d6:00:d8:55:2b:f4:af:63:e3:33:97:c0:
81:c3:ff:aa:8c:76:fb:c1:b4:c2:92:21:0c:3a:08:41:ce:f3:
d8:1d:7b:23:f6:db:01:bb:ca:b4:10:74:8b:7b:d4:fc:9c:26:
66:9b:1d:2f:92:fb:cc:32:e8:b2:18:9a:78:46:d3:4e:4f:f2:
c3:23:f2:d6:5a:15:e9:9f:9a:db:5d:6b:ff:80:3c:53:5a:05:
ba:d1:15:cb:4d:57:aa:90:1d:a0:02:12:b4:06:58:10:76:9e:
f9:09:8c:b0:3b:3c:e8:f4:05:14:45:5f:70:37:73:86:85:62:
a0:b7:25:20:f7:2e:73:d5:f2:30:a1:c2:68:f5:c2:b1:fd:eb:
b2:65:85:ac:b6:69:8c:96:88:6b:9b:e9:ed:81:83:d2:4d:19:
db:78:4e:a6:7f:5d:d0:c8:24:7e:18:90:18:d8:b6:83:ef:da:
e3:85:1a:68:b8:61:f4:7e:c1:6c:6e:a0:9f:a4:60:82:b5:f2:
88:9b:17:7d:c6:8f:5c:24:c9:f2:1b:d3:2d:5f:ee:f1:f4:0d:
a6:e9:36:91:03:a1:5c:93:f3:ae:d0:85:41:dd:b4:82:25:38:
f9:6d:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:47:40 2025 by rpki-client