Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: FlR5GtIVfX4Mq6SPoYGfZKMxrw4hyoDcTHJP8Z+Jt0E=
Subject key identifier: 75:D3:BA:85:0E:BF:26:F6:45:AF:2B:B0:17:E5:67:7C:7E:3C:39:66
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 0194BBCEE99ECFEDFBB4F0EC2CD30F78644B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0BBD
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: Isl5EVupWUe0QSEM4lc1YSIBVNgqq/E7OEAYTNX9P6k=)
2: qCD8L1dMgJ9yzf77qP7Yswj5ta4.roa (hash: oyvr0Mb88tpow7HpmKv7H5W0zqdzX3mbbm1lwxbPABw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:9e:cf:ed:fb:b4:f0:ec:2c:d3:0f:78:64:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=75d3ba850ebf26f645af2bb017e5677c7e3c3966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:b9:1e:11:ef:89:66:05:97:a5:3a:d1:83:
95:1b:63:51:42:e6:1d:ec:cd:51:cd:77:c9:96:23:
05:3d:c8:e3:b6:1a:0e:12:08:5f:0b:83:11:cb:cf:
f7:09:62:72:bb:c7:0a:98:60:25:57:2c:13:b7:33:
47:49:d8:3a:fe:dd:e1:29:24:2b:5a:9a:7d:fd:36:
85:d4:6f:fe:76:73:09:b0:69:5b:0d:12:f1:4d:90:
01:35:b0:31:b1:28:38:86:09:6f:0b:4e:67:4b:f0:
08:4d:2d:e7:2b:63:9a:cd:6b:33:7a:2c:b5:92:04:
b2:c1:44:3e:54:b3:82:a5:64:27:f3:67:ab:f9:ec:
ee:d8:2f:20:f2:bd:61:5e:1d:4f:70:48:e5:0e:88:
8e:38:7e:4b:b4:f2:a4:d5:41:e4:8f:4b:3a:71:e6:
f1:c2:87:08:66:2e:2c:58:fc:3b:01:86:6a:0d:61:
9a:32:92:26:4d:db:b1:cb:4a:70:34:4e:1c:d2:35:
9a:13:62:1b:4d:bb:d3:b9:e3:90:4d:88:20:ed:f1:
7e:54:4e:e1:5d:f9:dd:f8:6d:9b:a6:59:86:a0:6b:
30:3e:81:93:ba:f9:dd:1e:c9:4d:10:99:5e:c1:7d:
3d:af:ba:35:39:27:09:97:2f:31:07:7e:d2:2a:da:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:BA:85:0E:BF:26:F6:45:AF:2B:B0:17:E5:67:7C:7E:3C:39:66
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:60:9a:f3:c6:db:26:88:cd:6d:ac:df:73:7c:21:b2:b1:
6f:e0:2b:26:20:1e:fe:94:94:7a:43:0e:da:b3:02:28:af:43:
87:5c:d6:20:83:cb:9f:50:03:dc:40:ec:1d:18:21:bd:4b:ee:
5a:96:18:64:b5:bb:3b:f2:c8:03:3f:52:5d:fb:8f:1a:94:0d:
6c:36:8d:5e:9f:76:ec:3b:61:00:37:76:a2:f3:4b:5d:2b:c3:
f4:72:a3:6f:e1:0e:c0:86:2a:ab:06:32:9e:ab:19:f9:6c:43:
fe:94:3f:f3:9d:3c:96:ed:7a:33:6c:1b:ce:dd:f5:eb:cb:b1:
0c:69:60:cd:ac:74:8d:c8:43:f4:99:e8:fc:cd:19:26:6f:62:
b9:10:58:57:83:7f:cc:97:20:f8:46:ae:30:76:f0:32:fe:a2:
cf:d7:61:7f:cc:e4:2e:29:ab:05:77:ad:23:df:5a:43:e4:14:
0e:77:ab:a4:14:70:11:27:78:97:21:59:76:c5:14:51:13:96:
bd:d7:ec:e6:5f:45:b5:d5:98:00:3b:a9:10:c3:4f:f0:c9:47:
51:46:02:db:ae:2d:e8:fd:35:f9:18:e7:b7:f7:e7:5f:5c:93:
16:b4:9b:01:61:b6:24:38:78:0e:99:43:8d:04:b3:a0:2c:bd:
86:48:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:08 2025 by rpki-client