Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: yfovfmsF6Zhd/Q30Q8Vua8axrK45UVWuuY0UCcIa53Y=
Subject key identifier: 17:39:10:71:80:2C:32:34:BB:F7:E2:63:AF:8F:7F:66:7B:D0:C6:5C
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 0194BBCEBCDA644C8C6AC79F38B7041523BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: hvKyYEXOxBp/EprkrmGEaMjGnyTC0j0Clb8KIWbeRVg=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bc:da:64:4c:8c:6a:c7:9f:38:b7:04:15:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=17391071802c3234bbf7e263af8f7f667bd0c65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:62:f6:35:47:cf:4c:20:35:a2:07:d0:f0:
48:4a:d7:f0:6e:31:db:e6:ed:c9:df:ce:cb:ca:97:
54:48:40:e2:b2:4d:14:b2:98:75:99:a9:7a:51:80:
d0:98:53:56:a9:86:6e:00:7f:70:d0:b5:51:5c:08:
1f:d2:c8:51:f5:cf:20:76:38:af:ed:80:7a:f3:9d:
4f:fb:72:ad:33:1d:e5:46:b2:c6:9d:08:82:1f:f6:
bd:4c:be:dc:39:af:bf:78:38:fd:21:70:e7:78:43:
30:87:65:07:21:ef:e9:31:c9:04:71:5d:9b:ed:e8:
06:1b:cf:ab:e6:73:b9:98:6c:ce:12:fc:f9:8c:4c:
5e:98:9b:1e:cd:e7:20:dc:9f:a5:0b:d7:c2:a8:c9:
e3:92:93:41:f2:5e:e1:f8:3c:9c:36:88:2a:a7:2e:
6a:9d:0e:0e:b4:f0:92:8c:53:9f:ee:58:02:6b:31:
fd:3b:9c:12:fe:0c:f5:61:b4:ff:c6:a1:6a:77:01:
7e:1c:ed:ee:d2:91:ec:8d:30:93:fe:cf:62:73:7f:
75:83:d4:5d:ec:87:78:11:04:bb:bd:07:dd:23:17:
d2:cc:87:f3:7a:39:fd:da:ae:23:38:65:a9:a8:58:
30:49:e8:2d:18:aa:1e:dc:3c:d4:6f:33:a0:47:40:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:10:71:80:2C:32:34:BB:F7:E2:63:AF:8F:7F:66:7B:D0:C6:5C
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:e6:3e:57:97:98:f9:dd:84:2f:29:5d:9f:b2:3a:dd:69:
19:4a:36:49:4d:e8:94:23:83:fe:5c:d0:63:b8:3a:1f:4e:26:
e5:73:18:87:0f:d8:95:0a:15:1d:2f:57:8e:e4:6e:0b:04:00:
90:2e:49:f6:3d:98:85:d0:9e:c0:7d:31:97:77:55:16:7b:a9:
10:8d:7e:8c:c8:2d:db:ef:29:6f:c6:2b:44:2f:aa:90:d6:7d:
10:95:4d:a1:0f:64:6b:74:6b:00:01:42:71:3d:22:c6:11:ab:
79:b1:6d:c5:31:d3:b4:d5:6b:76:c6:30:f3:ef:cb:43:2b:0d:
0a:ec:4f:54:66:e3:34:4b:68:1f:3a:ac:19:64:77:46:99:39:
d3:d5:0b:86:dc:b4:c3:91:2a:17:5a:ec:cd:34:7c:80:be:8e:
6a:28:3d:b7:cf:18:04:03:ad:38:e6:44:2c:23:b2:3f:92:fe:
69:d2:90:8b:87:00:0d:17:c6:25:78:3c:8e:3d:54:70:a0:40:
fc:33:c5:d0:84:03:25:b9:16:02:cd:1c:12:2d:48:27:0e:d2:
be:b8:ed:be:61:79:79:1e:98:fb:3f:fe:5c:8b:f1:a4:76:1f:
d8:e3:24:5b:dc:0f:d0:4c:bc:bb:2e:b8:89:ee:d4:ad:bf:3a:
be:2c:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:03 2025 by rpki-client