Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: kVb5Lt40Oe3YfezzGoVAod7EALRlZzuvPsxirMZ9mGQ=
Subject key identifier: 43:F8:DC:83:BD:0B:5C:03:92:B2:80:D0:29:01:10:BD:9E:A0:55:29
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 0194BD4EC9FCFBC40407BFA8A651F5213B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: iGx0ASbC0IY_V38PaAKzK-E2dmk.roa (hash: H2ehYzvvVTx5ItHmx2FObso7EsAZmXEeB6Z16rR/dFQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: Brj/rMXQTSrCLVyE57XhM/jC48YGTmsStPDBt4FuEV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:fc:fb:c4:04:07:bf:a8:a6:51:f5:21:3b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=43f8dc83bd0b5c0392b280d0290110bd9ea05529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:24:51:73:0e:1b:c8:89:2f:a9:5c:e0:0a:
d7:e8:d6:7e:65:5d:9f:29:bc:06:9f:c5:c1:ec:15:
bb:51:65:75:a0:4b:23:71:f0:e6:0d:8b:14:0c:f6:
b9:64:b5:6b:79:93:53:90:e1:12:51:a7:56:e2:13:
fb:14:6c:66:28:9d:fa:7f:a5:6c:2c:fc:3b:63:0d:
b5:d4:38:fb:e2:b4:ef:d9:23:90:8b:70:6a:4b:91:
98:d4:c0:78:3b:94:8c:f2:9f:e9:dd:eb:7c:90:44:
95:1c:d2:dc:01:a4:cc:f3:c3:d4:b5:d0:2f:82:59:
35:5d:78:00:69:a7:24:3e:48:63:bc:44:08:82:b1:
c3:af:39:17:a6:35:64:e2:38:61:95:da:c7:a5:ad:
a9:7d:7a:79:a7:e5:d5:fe:aa:11:80:b3:3d:b1:d8:
95:ec:11:ba:53:a0:0d:7f:53:d5:f8:be:05:51:39:
53:71:84:74:bd:58:46:e8:09:76:fa:8f:78:c6:88:
94:26:b5:33:a4:82:4f:79:9d:be:43:53:d6:e1:eb:
f6:7d:23:60:6f:f0:a7:e7:66:82:bc:f6:e7:5c:b7:
db:de:40:e8:f8:a3:2c:ec:b3:30:6c:46:38:d8:67:
8b:ca:ef:ef:42:7d:81:b3:ba:80:ac:39:54:92:9e:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F8:DC:83:BD:0B:5C:03:92:B2:80:D0:29:01:10:BD:9E:A0:55:29
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:0f:9b:5c:cd:d9:27:f1:05:52:34:94:49:ee:c3:3d:6d:
b8:6e:0b:aa:f8:02:f7:73:2e:40:dd:6d:34:ee:7a:9a:11:ad:
a2:6f:37:9e:34:50:06:a9:44:b0:f9:22:59:31:83:bd:a5:19:
a8:9d:d8:91:1b:68:20:55:d5:c8:6c:5b:3e:03:2c:04:37:a2:
0d:e2:34:2f:c0:b6:ff:d1:43:fd:e0:1f:f1:a4:93:74:38:e4:
3d:2d:20:94:82:99:a6:1c:8e:b5:9b:8f:cf:be:b8:fc:3f:35:
e4:4d:68:a8:42:c7:5e:c5:5c:20:24:06:66:29:3a:fc:36:b2:
5a:1c:e4:06:22:4c:79:10:2f:28:0f:23:c6:0f:71:6b:77:73:
48:f4:d8:7b:67:4f:c5:d9:58:79:3a:d5:7f:8c:1c:73:4f:53:
f9:26:87:19:a3:21:0a:a0:41:65:79:fb:72:7c:92:29:09:35:
0e:13:8d:cc:01:f2:1a:a1:ef:7a:63:41:e2:b2:a5:0d:b7:4d:
6a:f8:38:c3:28:83:fd:6f:52:ef:df:64:8c:19:cb:ef:8b:2c:
30:cb:65:c7:6c:17:2c:38:eb:78:17:f9:19:0d:dc:a0:1e:6f:
43:54:23:d3:f3:39:dd:49:a1:df:45:ab:82:d4:b6:55:32:9e:
bc:99:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:17:41 2025 by rpki-client