Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
File: VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json)
Hash identifier: sGwOtpa/igcvyKMONjulR5YNLzfOAFJ4c9SoetHEgNc=
Subject key identifier: 9A:AA:39:E9:36:5D:FD:A8:13:C2:B4:3F:96:88:F3:18:BA:62:3E:58
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 0194BC3BD779331D33730D554782DBA17AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: U4y4YJPd7Jikr3khPPNa+tk79Xu/a6pJlwZ8kQqfX3A=)
2: yXXR2fzrFaQnF3NWV4_d0yBPIgU.roa (hash: nTOlg6X5m06JtLL56eIgSs3eGUVRFrI3X2RQbngIypQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:79:33:1d:33:73:0d:55:47:82:db:a1:7a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=9aaa39e9365dfda813c2b43f9688f318ba623e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:1c:b8:ce:67:7f:e1:3b:e7:37:42:47:52:
8c:d8:11:a2:4e:50:fb:c8:7f:28:19:a0:d7:08:6b:
76:79:4d:b7:ea:bc:ec:6e:39:67:26:e3:6e:ec:72:
a5:92:d6:0c:04:99:6c:00:04:60:fb:79:8a:73:a8:
ec:bd:04:44:05:bb:c4:35:65:de:55:39:db:dc:f6:
36:4b:9f:75:5a:20:e9:d1:b0:7d:bc:0b:b2:9a:c4:
da:b3:af:1c:a5:25:59:47:de:3c:de:3e:91:12:a9:
c6:b1:fb:8a:0b:ad:9d:7b:4b:7e:c8:95:67:c3:e1:
af:3c:c8:bd:0a:6a:0e:aa:18:03:96:4e:8d:32:ba:
da:64:63:66:99:70:42:71:99:56:ba:ee:24:bb:05:
2b:94:ed:7a:42:4c:fa:57:e9:6c:b3:47:1b:7b:8d:
49:3b:ff:9a:bc:46:0d:33:79:9f:92:2d:cc:07:c9:
6d:a3:f6:71:4a:ba:0e:62:0d:2a:f5:e1:a6:89:62:
55:02:6e:08:05:e4:bb:a8:b9:4a:cb:c9:5d:de:5e:
c0:68:8e:43:2d:26:c2:b1:af:4d:3b:fa:44:06:f9:
b3:2c:08:d3:ed:5c:22:9e:a8:d6:94:90:11:4b:47:
10:1e:bb:82:3c:2d:e7:88:84:76:fd:e0:a3:10:48:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:39:E9:36:5D:FD:A8:13:C2:B4:3F:96:88:F3:18:BA:62:3E:58
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:eb:f6:7f:3f:26:c1:48:2c:bc:6f:17:4a:55:74:1f:6e:
ae:c3:87:5e:e4:b6:5b:c9:cd:76:c0:c7:e9:77:a4:2e:66:e5:
c6:ce:a1:e6:24:6c:d7:9c:43:9c:58:b3:18:3d:2b:76:39:ad:
8d:27:af:87:30:65:01:e4:73:05:ea:08:a8:59:7c:22:02:45:
8b:96:26:d8:c4:0e:ea:23:c6:79:c6:be:f6:8d:3e:6e:f3:90:
3d:b5:b9:c7:36:11:05:cd:d6:49:46:b8:93:94:4d:8a:df:54:
90:e5:41:4b:d8:c1:a1:94:a7:bc:92:d4:24:8e:7f:4b:34:27:
cf:8d:cc:71:91:02:da:e0:46:43:7c:d2:92:9a:bc:1f:e7:1d:
82:16:1a:59:b3:84:ce:f3:03:ef:1f:1d:92:d8:fd:da:4e:95:
7d:1a:82:ab:4c:31:9e:4a:bd:c5:3b:be:da:af:13:e1:15:44:
ee:82:b7:20:7d:ee:62:87:4a:d8:44:e5:38:c9:80:17:49:49:
d5:30:84:9c:6b:9e:a3:cf:74:b4:1a:9e:b9:42:89:6d:c4:98:
4c:25:be:69:d3:59:b7:f4:90:59:74:89:1c:27:dc:56:e4:6a:
b3:c5:34:a7:56:ef:ab:d4:80:42:a0:bc:d3:a3:62:0d:d6:6e:
05:84:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:59:38 2025 by rpki-client