Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: fI25Y/zhpXAlk9O4YZTheyPA1B+RrhFSUjLoj+ce0WM=
Subject key identifier: E5:8B:60:89:01:40:08:C0:FF:EB:D1:69:B5:ED:FD:B4:CC:E6:A5:83
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 0194BC04B2FF033CDB08491FDF2885661388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0B23
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: X84hGdURvSN2rVbYC5uoJWOkD9qfOi5KRjigGXujd1k=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:ff:03:3c:db:08:49:1f:df:28:85:66:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=e58b6089014008c0ffebd169b5edfdb4cce6a583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:03:98:e5:c9:04:d8:ab:54:19:97:b2:9d:
fd:f2:d3:c7:6c:59:be:93:fa:e3:58:f1:6e:ae:65:
b0:74:6a:62:d1:fb:f0:41:0d:6c:00:51:05:1f:8c:
b2:ea:cc:47:85:c5:41:d0:16:e1:8e:8c:f3:16:d2:
75:ff:c8:d6:1a:2e:36:6a:11:16:4e:28:72:8e:0f:
a3:81:9f:b0:0c:37:3f:f5:20:1d:03:7e:2b:c4:e5:
7c:3f:a1:90:85:d2:36:e2:13:d4:dd:01:58:c3:a2:
09:29:d6:cc:61:a4:d8:b1:5d:46:ca:42:27:00:3b:
7a:cf:b8:db:63:44:a7:55:f1:ba:78:e9:d8:91:01:
1c:ca:0b:54:1e:31:cb:18:bf:a0:09:79:16:d9:30:
8e:92:a3:a1:dd:11:03:1c:ef:02:e8:a1:2e:3e:5f:
d4:00:00:d5:c0:ca:40:cd:d3:77:3e:10:e0:74:90:
18:00:66:ef:ff:b6:49:03:37:34:2e:5b:b4:c9:49:
c6:50:d5:93:5e:95:c5:98:2d:91:f9:1e:9e:82:d1:
29:a8:d4:dc:ee:10:06:9c:f4:91:28:06:82:d9:4a:
28:48:de:ea:db:d6:cb:e9:b6:a3:8a:20:02:23:dd:
f3:b4:62:f9:14:c7:8f:b8:fa:b8:41:7a:fe:95:a9:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:60:89:01:40:08:C0:FF:EB:D1:69:B5:ED:FD:B4:CC:E6:A5:83
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:11:e2:bc:31:4f:bd:76:63:57:04:ac:b6:ff:a4:93:1c:
ea:08:69:e0:5e:85:f2:a2:85:8e:c7:d6:9f:ad:15:e6:78:c9:
a0:36:35:4b:78:6c:28:3d:76:67:51:2e:2f:52:d1:5e:33:b3:
80:0c:8d:60:cf:d8:06:84:e2:73:e6:f1:97:10:9a:5f:21:65:
20:a6:5b:c6:a2:45:67:72:b0:d8:91:79:87:4f:c5:b3:51:65:
8c:cc:08:8f:60:30:59:27:86:37:30:89:19:3b:42:e1:a4:02:
ec:fe:db:92:ba:1f:2c:ec:9d:df:bc:ed:cc:82:d0:01:73:af:
93:df:6c:6e:73:d6:5c:8a:79:c8:57:6e:50:fb:75:18:0a:08:
bb:d3:99:43:fa:ca:ed:2d:8e:71:b8:7d:38:a1:d9:9e:41:8b:
29:96:0a:ad:3d:e8:43:c4:9c:93:c2:d5:4e:09:a7:a9:d1:1a:
68:95:22:03:b8:64:b7:db:fc:2a:92:d7:0e:2a:8b:a6:95:f9:
10:2f:c4:c4:6e:9b:67:30:56:fe:5d:41:82:e2:3f:f8:04:17:
58:ec:d8:c4:9d:46:af:14:f5:f1:73:d4:e9:e9:71:de:ed:33:
88:83:78:18:35:d1:2d:b1:e2:04:fa:c8:80:56:96:aa:76:cc:
9f:1c:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:25 2025 by rpki-client