Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: Y1mLVMYjWnm4J7k7ZSd8oaQXBHmuvXwfB4xBwyPKC8g=
Subject key identifier: F9:58:92:C8:F6:14:DE:C3:EB:EA:26:7B:31:16:4F:A3:A1:4F:01:36
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 0194BD85333ABD60ECBD6D2BE65C85C027BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: KDP9W_m_0hLGFtgf73aWlnZ_iQc.roa (hash: lcUH+LFQ+UVivSdKcSpqJQp9Eg8xuBIT9bPnxngbu68=)
2: KHg46KpwJnmv6hNomrXATVqpzV8.roa (hash: WJsuWbqQXojOAqeQ80N/VH6AOxmAzbUb+3keyWT7yfw=)
3: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: NStTT3fjcMI2mnfNC5yBM2YnQb9jEmPjof8zqbMzQFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:33:3a:bd:60:ec:bd:6d:2b:e6:5c:85:c0:27:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=f95892c8f614dec3ebea267b31164fa3a14f0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:cb:62:93:81:27:1f:f0:80:66:31:89:74:
46:61:80:d8:b4:7e:9b:53:02:b8:16:38:af:c5:19:
78:42:d8:fb:3f:74:95:15:02:dc:a2:f4:ac:bd:bb:
ba:29:00:c0:62:e6:d5:f0:ef:35:31:89:29:7f:4d:
11:a6:7d:fd:ba:81:09:35:1a:3d:a4:6d:e2:05:04:
f0:a9:05:b2:27:33:db:77:ca:56:a4:cf:c5:43:a2:
e7:8e:e8:8f:2f:f6:fc:db:78:a0:e3:0c:5b:a9:47:
5f:44:13:b6:41:68:97:11:2c:0c:05:33:9b:6f:f2:
f6:bb:d2:f5:db:5c:52:29:00:7d:5a:fc:02:b0:06:
3b:e0:1d:b8:67:c0:0b:3d:c5:7e:c4:61:92:f8:b5:
1e:3b:5c:68:e9:d3:d6:b1:e6:32:b6:8b:c8:cd:61:
bc:71:41:7c:f0:e1:71:7d:98:91:4e:aa:06:bc:b6:
fd:fb:a4:90:6e:39:92:1e:ba:65:70:8c:46:48:89:
46:7e:09:75:18:b2:82:fa:c1:4c:7a:4b:fc:4b:cf:
6b:67:10:bc:7c:45:5b:2c:4b:24:d2:d6:16:69:fe:
54:97:ec:cb:c0:88:76:4e:c1:36:ae:2b:21:6a:e6:
ae:42:a8:88:0e:7d:f4:32:b3:21:44:d3:c8:2a:77:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:92:C8:F6:14:DE:C3:EB:EA:26:7B:31:16:4F:A3:A1:4F:01:36
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:09:4b:79:c3:bb:a4:73:69:8f:45:28:44:7a:62:fa:74:47:
4e:92:cb:8c:3a:69:a6:db:a3:16:32:48:8b:de:dc:2c:87:73:
06:1f:11:44:e0:e3:a8:a1:f4:c5:69:62:b2:d7:15:7d:5d:8b:
95:40:94:06:e5:61:95:30:53:03:76:54:0b:de:d7:c5:3c:3f:
fd:22:02:19:3f:cf:86:d7:0e:94:43:1d:5e:67:38:c8:0c:5b:
1a:c2:bb:0e:41:21:ba:fd:63:61:20:dd:4a:4f:9e:0f:25:6c:
74:ac:5d:56:21:db:12:7c:35:1a:c2:16:57:e2:27:9f:b4:b7:
43:6c:08:82:61:05:48:b4:fb:25:02:30:60:fc:29:f9:b7:bc:
dd:61:40:bb:7d:74:b7:5e:3e:8f:fb:e0:39:64:07:b0:f8:41:
af:e5:6e:17:ef:b8:1a:fe:cd:bd:23:82:c8:ae:fc:ae:8e:8b:
16:b3:34:04:33:60:3e:ca:9d:f4:11:b4:5c:78:e0:be:51:43:
9d:bf:b1:50:de:89:3f:65:28:5e:de:e6:c3:d6:06:fc:04:78:
83:76:37:51:91:a8:11:ad:ca:01:d2:63:fa:58:02:c9:43:08:
87:61:8a:47:73:ea:82:3e:3f:42:a8:84:dc:b1:c7:c7:ec:d7:
ba:f2:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:10 2025 by rpki-client