Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier: JUTgdb+XX57seElM8zKMBrzgcHFd7nw025i4aQy+LyM=
Subject key identifier: 24:3D:0B:D4:CD:D2:EB:86:8C:4B:A1:68:AC:27:D1:4A:F3:61:CB:3F
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0194BC05043FAAF8CB43C0E4046AC07D1F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number: 1443
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 7Vkvdbayc332rXjpZRZWSGICr9o.roa (hash: c2d+Gemnxb33gPT3zp010Rv8xRrTu4fPuzgqiaR1Sy0=)
2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=)
3: KfRiG75Zh2R61TN_EiWqTHilwGw.roa (hash: gxYuIp9SWq+RPkQf6rEJ0hDaifl2E9IqGvk00j77Wec=)
4: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=)
5: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=)
6: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=)
7: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=)
8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=)
9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=)
10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=)
11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=)
12: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=)
13: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=)
14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: +xF8HHtX50bkkrHpXXrZ640t6h0N30QKxlgxy00j1lQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:3f:aa:f8:cb:43:c0:e4:04:6a:c0:7d:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=243d0bd4cdd2eb868c4ba168ac27d14af361cb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:0c:0b:50:e6:9a:c1:af:a6:b2:44:2f:07:
8c:ae:16:15:0b:14:d3:43:f5:a7:e9:8e:34:c7:22:
6b:fc:69:10:c8:d4:a5:d1:b4:79:d3:42:93:f3:71:
14:00:48:c4:7e:76:03:2f:b6:b2:3c:31:d3:70:f0:
67:3e:29:42:c4:c5:b7:49:a9:f3:ab:18:90:09:4b:
32:36:df:b1:17:d1:b6:66:e9:55:50:d5:da:86:93:
f8:52:54:a7:5e:bd:dd:a1:5b:11:ad:53:0e:ff:06:
7c:64:59:8c:2a:7b:97:df:ac:54:f4:61:c0:3e:2c:
6d:d2:10:ca:2e:0d:62:cb:5b:57:c6:ef:59:16:99:
2d:10:db:cc:3b:31:43:f2:89:27:37:36:4d:1e:14:
bd:8c:8b:50:b5:28:18:f9:c4:4e:eb:cf:f6:9e:2a:
dc:b1:7a:f5:54:8f:0d:91:3a:34:fd:60:a0:4e:0b:
45:76:00:5b:c8:cf:1a:0c:c9:d4:cc:f6:03:16:ca:
b0:de:d3:61:98:15:c4:54:01:2e:63:d5:83:93:0d:
01:d5:ce:98:67:b9:cb:db:e0:a4:45:19:40:eb:38:
31:f3:08:7b:2f:20:d8:f9:56:0b:5a:ba:4c:38:92:
9f:d3:2a:a2:5b:3e:80:6a:05:d5:68:31:b2:10:1d:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:0B:D4:CD:D2:EB:86:8C:4B:A1:68:AC:27:D1:4A:F3:61:CB:3F
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:73:a9:d0:35:f7:a4:d9:99:6a:16:a8:9f:fc:bd:f0:3a:
72:a5:65:31:4e:95:0d:00:4f:eb:51:33:fa:36:d3:68:af:a9:
8d:78:20:4e:e1:79:fe:59:f0:2d:f5:0e:ec:78:63:4c:8f:85:
58:b0:1b:a5:48:48:71:3c:54:2c:21:65:c3:e8:98:69:81:2a:
9d:1c:64:5e:56:39:ca:21:99:5b:20:64:ea:48:4f:da:f8:2c:
ac:0c:43:50:ca:96:9a:4d:ae:47:24:46:73:5a:41:d3:06:59:
f8:ff:9b:7c:59:43:28:62:4a:60:a3:84:ef:0a:7a:77:bb:71:
62:e7:5a:f3:a8:e5:86:28:28:3f:69:ee:3a:ac:82:69:c7:67:
92:e5:6b:90:cf:24:d0:98:d3:47:be:6c:dc:e5:05:e7:4b:b9:
95:8c:dc:79:9d:60:43:ef:95:78:68:30:7f:b1:e1:66:1a:21:
db:b8:06:2d:93:c2:92:a5:fd:10:dd:48:04:0b:90:ba:3a:77:
1f:0e:0f:c0:2f:e2:7c:7b:4b:b2:b9:13:73:28:2a:54:71:9c:
e5:79:a1:e0:05:6f:f4:37:2b:06:c1:00:08:51:a6:d7:4e:10:
45:d9:12:75:cf:81:98:25:52:43:ab:82:9c:c1:79:72:b8:5b:
98:68:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:04 2025 by rpki-client