Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: H5sNbRMHnyGESg9j7jRiPvhkzc9uGgs3TbBD85oFcXY=
Subject key identifier: FB:23:D5:CF:41:07:88:41:01:DA:14:3E:AA:08:9F:6B:F1:83:C9:40
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 0194BC3C5B4836A7094C1992083387C7F45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 0ECC
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=)
2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=)
3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: hfxXDikcgCbB+tXbs+amOI1GCxa0LYrHXrqrajBQ1uU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:48:36:a7:09:4c:19:92:08:33:87:c7:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=fb23d5cf4107884101da143eaa089f6bf183c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:20:c7:be:52:83:8f:94:7d:69:e5:c5:48:
1d:e6:59:4b:1e:ce:52:de:dd:03:25:c8:d7:a6:a0:
e3:a6:32:b5:1b:45:a7:d7:e2:40:32:6c:75:32:d5:
9e:2c:ea:e1:92:d2:69:4c:19:31:98:48:da:f3:ed:
af:10:6f:62:f7:51:85:a2:10:7f:fe:43:8a:47:58:
64:15:4c:2f:d8:bf:2b:40:bc:de:ec:c0:6d:58:7f:
65:99:61:1a:9d:8d:57:a4:f0:eb:0a:4d:07:b8:d5:
d5:bb:dd:6b:8b:85:dc:ba:d8:c1:64:21:8b:e0:0c:
45:81:52:13:29:6e:e8:06:9b:bd:5b:1a:1d:8b:63:
9b:2b:32:18:08:b0:5e:b5:27:fd:5d:b7:e8:8c:90:
85:d4:c0:53:a7:86:64:8b:eb:b1:b4:26:4a:ca:50:
1c:e2:dd:8a:ea:33:2a:54:37:46:0c:e7:1b:53:ec:
8b:1d:ca:67:77:e6:f8:06:b9:25:e0:c1:6c:06:dd:
7c:0d:24:78:b3:19:fc:a1:e1:9d:41:b7:c3:f2:98:
e9:62:f2:00:64:24:69:aa:99:55:06:2b:36:3e:9a:
35:92:ef:ab:01:68:0e:f0:a4:c3:06:27:e7:3f:09:
6c:63:e2:b0:ef:d8:d0:de:37:30:cb:28:f2:d7:56:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:23:D5:CF:41:07:88:41:01:DA:14:3E:AA:08:9F:6B:F1:83:C9:40
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:eb:36:70:f5:3a:b4:09:f1:44:5f:a2:e8:c3:10:85:40:e6:
4d:ad:e9:be:a1:31:5f:0d:20:cb:a6:5e:5f:7c:e5:0f:c1:90:
59:51:4e:20:6e:f1:c6:4b:2b:5e:10:26:04:9b:ec:59:f2:7a:
2a:d0:4b:52:8b:8f:61:ad:98:68:a2:d9:86:68:c9:5e:af:36:
35:a8:bd:c3:89:24:59:9e:66:03:af:8e:f8:08:b2:fb:65:22:
52:66:04:cb:98:18:33:d8:ee:94:2a:a3:79:f1:e6:75:c2:5d:
95:9b:ba:69:db:dd:d8:f9:1d:19:de:45:a8:01:7f:0d:4f:dd:
53:49:6d:5b:9c:ef:5f:f0:95:95:62:6c:71:67:de:7d:bc:80:
99:f4:e4:d3:d2:bd:93:6c:23:17:5b:5c:57:7c:7c:26:08:45:
bb:db:fd:47:28:03:9b:d3:b7:7b:72:81:c0:fb:68:f7:0a:83:
02:48:e5:ed:e2:05:ed:6c:6b:4e:24:84:20:6b:ef:14:41:c6:
b0:b4:ac:c1:09:b2:23:42:ac:e9:99:e5:1a:87:60:e3:90:d1:
79:e5:cb:2c:62:ef:ed:e8:52:8f:1e:29:a1:30:6d:22:ce:2b:
c7:7d:48:2f:f6:19:f1:c1:06:e2:bc:fa:af:13:aa:79:1b:4b:
0e:35:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:20 2025 by rpki-client