Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: /QRS/wdT/wChBzumB0gzvIMEAvaauQRwvQ3SMN9QdFw=
Subject key identifier: E7:20:B0:7B:B9:DB:F6:D6:44:85:63:4B:D0:E9:2A:70:50:5E:50:98
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 0194BCAA125743282506AB05AA4C09B18567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 46WoegmIkS8QL_J6FbxBkD87iiI.roa (hash: U0pIUVkWJNq7HiCSxGgpV90jaz+MKbll3yx6GCWcg+0=)
2: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: OnZp8VIxcd11uR6jwNIHvJ9ow9Byn5aUsvSzA/9fX40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:57:43:28:25:06:ab:05:aa:4c:09:b1:85:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=e720b07bb9dbf6d64485634bd0e92a70505e5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:db:64:65:09:c2:59:ec:f7:2a:ed:e3:b1:
6f:89:e0:c0:63:79:b0:4e:9c:56:75:9a:68:4f:d2:
2c:c8:3a:1f:94:4d:11:e7:0d:98:84:58:4a:c0:1d:
f4:9a:c1:68:1c:97:5a:5b:50:05:98:9e:24:c7:56:
fd:ca:ae:7a:ba:2c:37:fb:83:05:42:28:84:71:51:
89:53:6c:d6:f8:c4:f3:9e:fe:b5:3a:ec:bd:5e:56:
65:a0:45:4d:11:8f:af:65:31:11:b3:13:79:79:18:
96:6a:cf:10:1c:88:c1:01:8a:85:35:c9:e9:39:d3:
60:36:63:41:49:cc:93:6c:dd:89:e7:d6:2e:36:05:
40:7f:bb:53:50:b9:58:43:46:d8:29:28:ec:f9:82:
15:a0:2e:ed:27:d7:57:c6:a6:a2:56:81:c0:84:b0:
eb:07:f7:1c:df:1a:34:c0:2a:d5:ee:49:99:d7:fa:
de:08:63:a0:1c:a4:75:00:b2:0c:a2:7f:d9:6f:7b:
ae:c1:07:41:42:d9:73:53:50:1f:fb:ff:58:43:92:
8c:e0:7b:86:f2:52:91:f0:d3:20:aa:80:ba:dc:ed:
ce:74:e7:8c:b0:aa:2d:30:b3:7f:95:a5:44:57:9f:
0c:0d:1d:bb:29:ab:20:48:2f:13:88:c2:8c:76:bc:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:B0:7B:B9:DB:F6:D6:44:85:63:4B:D0:E9:2A:70:50:5E:50:98
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:2f:02:71:39:2d:f6:d8:86:10:5f:0c:7b:db:31:2e:bd:
96:22:c2:14:f1:92:3b:d6:14:08:4a:b4:d9:3a:c1:3e:83:e4:
ac:92:a1:c9:5b:ee:dc:c4:3f:c0:07:5b:ae:5d:39:b5:98:11:
13:c6:1f:a4:89:73:b0:a7:f3:74:6b:f7:43:08:ef:5b:ac:fb:
2c:33:73:b0:25:f0:b6:3f:62:1d:8a:34:13:36:31:61:52:b9:
d1:23:9a:ff:fb:af:ed:c0:9e:40:5e:af:08:cc:1b:55:e7:70:
ee:15:4b:4c:e9:6f:60:53:15:24:db:96:e0:ea:35:70:3c:2e:
fe:a7:aa:12:96:57:39:94:9b:8b:2e:e2:d8:37:2a:c1:66:bf:
8a:c3:04:50:e9:b5:e6:a4:35:64:df:f5:7e:e8:7a:9b:23:29:
e3:9e:f6:de:de:7f:c5:9f:d9:7b:de:71:92:e1:3f:cf:41:34:
9d:3e:46:4e:1b:de:a1:eb:a7:9d:71:f8:89:da:00:a3:c7:14:
df:64:04:81:80:f6:fa:a2:6e:98:c7:6e:76:86:a5:7b:c1:cf:
40:38:7f:b9:ad:d0:83:16:a5:20:bc:9e:1e:8d:39:59:4b:fe:
8e:e7:5c:57:f6:ae:bc:b6:9b:e3:60:37:ae:21:9d:2e:25:1e:
a3:18:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:31 2025 by rpki-client