Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: nB0rlYRbHvTt2A/AuCdkghLKj4dtrYNQor8HEjdxmlA=
Subject key identifier: 8A:9B:46:69:A6:EA:62:D1:8B:12:56:A3:4E:36:65:80:2F:11:16:2F
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 0194BC72CD84B3DB41405D001B5E82276F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: i6cINOhMPhE1dA+7gJr9JmfTwAN0JduNblIA5aymukw=)
2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:84:b3:db:41:40:5d:00:1b:5e:82:27:6f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=8a9b4669a6ea62d18b1256a34e3665802f11162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:cf:f6:cf:06:83:5d:80:56:75:5d:45:2b:
ce:70:57:8f:b2:79:80:6f:ea:62:e9:c3:4b:0d:53:
9d:c1:07:d3:42:28:dc:66:6e:48:69:26:a0:fb:02:
42:0d:2f:15:b9:30:2f:6c:b5:92:7d:a2:9c:27:27:
e7:a9:30:8f:03:6f:03:93:94:52:f2:39:52:a1:16:
b0:3b:79:23:a1:90:13:42:a6:c3:d4:a6:0a:09:f1:
bf:cf:23:7f:78:5b:dd:23:81:3c:58:58:5f:6c:4e:
da:42:c0:48:19:45:66:e8:45:89:72:2f:77:93:02:
c6:ab:fe:3c:46:a3:88:fc:be:bc:88:81:7f:ba:31:
40:0b:23:91:e7:4e:1f:3a:f1:d9:ab:54:dc:b9:26:
73:44:a7:46:ae:c7:b0:10:df:8f:c0:1a:85:63:3c:
7c:0c:12:8c:4b:64:50:d6:19:5f:f2:71:77:cb:b6:
95:e9:d3:93:a0:04:d5:7d:4d:84:a5:95:33:08:b2:
ef:7f:a6:69:ef:1f:e5:45:74:85:3e:71:50:11:4d:
fd:8d:8c:25:da:fe:9e:e6:09:28:9b:75:f6:62:f6:
ca:9d:ff:2d:c4:40:f7:ff:c9:ca:e0:60:78:87:34:
bd:cb:56:6d:17:8b:ff:ca:14:cd:e1:ed:4d:d2:85:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:46:69:A6:EA:62:D1:8B:12:56:A3:4E:36:65:80:2F:11:16:2F
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:11:52:6e:3e:1a:69:2f:fb:e8:e8:fe:7e:25:df:3e:ef:ba:
fb:59:da:5d:26:2b:58:5b:d2:f9:66:9e:bd:1a:da:28:28:60:
b3:4b:e3:b4:4b:c0:69:43:c1:ae:c4:a7:2a:9b:db:45:03:5f:
e9:c9:6b:3f:ba:aa:f6:f5:ab:ba:0d:8a:45:b9:7d:15:bd:15:
8e:cb:c3:4a:a3:e9:5d:d6:6a:14:55:9c:c2:55:c4:00:46:42:
9a:0c:0d:d3:b0:49:c6:8d:de:8a:40:8e:60:6e:25:59:fd:df:
78:9c:2c:c6:8a:68:e9:da:05:d6:94:b1:05:64:dc:cd:9b:e0:
b2:b9:ba:cf:de:51:f9:ac:09:fe:71:be:0b:ad:13:3e:67:03:
8b:33:b6:dd:f2:7b:1c:f8:2a:c0:3d:38:ce:dd:f3:ff:fe:9a:
6e:30:f9:9d:99:d5:f1:3c:82:d1:a3:68:d0:06:cb:0f:ae:a8:
db:e2:ca:21:cf:be:3a:60:6a:36:71:e0:a1:fc:eb:1e:9d:86:
5a:3a:69:1b:7f:65:1d:3b:60:f6:97:e3:ee:e3:65:a1:1e:47:
d6:37:1c:d6:d9:d7:25:0c:93:86:1f:cd:25:e9:c2:c4:b7:4a:
15:06:04:4f:47:fa:67:6f:26:c5:49:07:95:9f:d2:2d:69:63:
1a:c4:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:10 2025 by rpki-client