Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: KsKlrhvkqUaNQpwk1tpKoglKDjerXBrKnlxu/TPUmGg=
Subject key identifier: 8D:9A:44:6E:28:EE:28:4A:5D:AE:F2:47:2F:7F:3F:27:DB:20:AF:F1
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 0194BD4E35D1FD3D80B9A59257EAFDA62F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:06 +0000
Manifest this update: Fri 31 Jan 2025 17:00:06 +0000
Manifest next update: Sat 01 Feb 2025 17:00:06 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: hML6W74yYElGbNhGoZDjNIOfaGejTXHBOt8KNhp1JtM=)
2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:35:d1:fd:3d:80:b9:a5:92:57:ea:fd:a6:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Jan 31 17:00:06 2025 GMT
Not After : Feb 1 17:00:06 2025 GMT
Subject: CN=8d9a446e28ee284a5daef2472f7f3f27db20aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:4e:cb:07:30:74:fd:8c:c9:b9:e6:12:b8:
66:05:3e:df:3e:86:d8:9d:e4:a2:41:1d:68:6a:b0:
d6:dd:d1:5d:3b:8f:e6:1b:04:de:24:93:ee:9c:f9:
e5:85:e4:05:05:39:f8:62:19:91:86:7b:ff:3e:ef:
bf:3c:78:ad:f1:5f:81:58:cc:54:1b:5f:47:f6:e0:
0d:cd:a5:96:60:f0:84:3a:5e:6e:92:04:56:60:49:
c5:d8:7a:b5:88:3b:4a:12:2f:cc:bf:bd:be:7e:9a:
b9:38:5d:77:2d:21:16:09:b5:d2:70:ec:8d:78:f1:
3e:92:fb:eb:1a:04:4d:ab:05:84:e4:aa:53:74:e6:
40:12:e0:ed:b8:0e:b8:09:27:17:ea:bc:53:4a:bf:
14:a6:f1:cf:14:7f:cc:e8:8d:0b:10:7e:b1:44:65:
f0:47:a4:37:9a:75:c9:74:c6:c5:89:13:8b:08:65:
95:2a:e7:3b:1b:43:5a:07:04:e3:ea:24:07:52:b0:
ec:f8:18:5b:93:57:39:7e:89:0e:87:c6:72:99:06:
fb:35:29:5d:f2:ab:e7:e6:6e:52:f4:ad:ca:49:00:
aa:cd:96:9e:8d:43:d8:83:c2:93:f6:cb:1e:4f:8b:
7e:e4:7d:4e:c8:7a:ca:c7:b4:1a:22:9f:41:3d:68:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9A:44:6E:28:EE:28:4A:5D:AE:F2:47:2F:7F:3F:27:DB:20:AF:F1
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ac:ed:81:66:ca:d0:05:e8:e8:f6:68:42:11:5f:31:8a:d9:
3c:22:d1:27:ec:05:40:f4:fd:6f:99:28:df:59:98:4e:02:05:
d9:d6:e5:b2:79:44:34:1f:02:00:8a:8f:86:5a:8d:e8:c6:60:
e6:57:6e:49:41:cf:1a:10:4a:e7:61:e9:03:58:c1:62:f9:a5:
f3:73:4d:81:c2:04:f0:63:06:23:6d:e5:68:da:1a:25:4c:d9:
50:45:ad:c3:07:3b:d4:d9:23:55:d2:e1:d9:03:6e:76:78:36:
bd:28:2a:af:2d:58:8d:b3:55:d6:1d:4f:3c:1a:43:10:e8:25:
99:9d:4c:57:4d:12:d0:8b:a4:60:60:e4:38:f8:c9:39:b2:ad:
9e:d0:21:df:7a:96:ac:98:4a:c5:3c:e5:86:1b:dc:06:b8:90:
49:5c:34:39:cc:4e:b9:32:25:24:93:63:fc:ce:09:66:fd:de:
34:96:56:8a:2c:ba:8e:78:a4:a1:86:0b:4a:d3:c2:d9:db:30:
6d:ba:0d:ea:5d:8e:bb:39:11:d4:e5:b6:6f:ce:cb:f5:d6:db:
e9:d4:2a:55:d4:95:9b:c4:82:ab:42:06:79:bb:16:de:e3:f5:
19:27:32:db:69:00:42:6f:59:2d:da:d9:15:c9:13:23:13:1b:
a9:8a:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:04 2025 by rpki-client