Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: BCyC8VhscreAYzpRozi4aaLdsLlhIje1m0N+u1TiBqw=
Subject key identifier: 7B:A8:58:56:51:0C:C4:2E:50:2A:A4:65:78:DA:0E:AD:45:19:3C:20
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 0194BC72F2449959B0EF940127B2FF6020EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 1110
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: JTh4NNdiezEZUxOVWlHpydto+TgSXu8EsXx49upc128=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f2:44:99:59:b0:ef:94:01:27:b2:ff:60:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=7ba85856510cc42e502aa46578da0ead45193c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:63:94:a3:9c:1c:71:44:76:12:87:a5:e7:
d0:cb:4d:b7:f2:25:f0:4e:b1:03:ea:bb:f7:c2:4e:
2e:96:df:0e:9c:d1:98:1e:b1:32:09:b1:7f:6d:93:
b7:17:7c:b1:47:de:da:a6:2a:70:76:74:9c:ba:05:
36:2e:44:29:3d:e3:b0:0e:6a:a9:57:b5:0a:d8:da:
60:44:3d:60:17:43:ee:7c:87:c0:46:ec:5d:f8:70:
d8:47:44:0b:95:df:65:42:33:1b:03:3f:04:90:64:
c8:e7:2f:0f:92:26:30:2c:7d:61:68:53:63:fb:25:
33:57:28:f0:41:0d:fd:31:d6:f3:90:8e:bd:e9:b8:
5b:9a:2d:1f:4f:b9:90:29:ba:91:78:e5:c8:74:1d:
98:6c:3a:09:fe:f9:01:26:01:86:0a:1a:ee:94:bb:
d9:69:08:fb:7a:5a:35:5c:32:ba:f9:25:da:22:74:
45:5f:97:8c:cd:ee:ea:27:df:6d:f7:e8:9c:ca:d6:
c0:94:7a:a3:9b:6c:e2:f9:6c:79:ed:35:0c:14:54:
d5:f7:1d:88:a0:3f:05:1e:3c:3b:fe:81:3b:60:db:
8a:5e:43:33:db:66:bf:36:9c:6d:5e:ea:3a:3c:dc:
ff:de:37:10:ae:70:89:cf:8e:61:ec:dc:dd:b5:04:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:58:56:51:0C:C4:2E:50:2A:A4:65:78:DA:0E:AD:45:19:3C:20
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:7e:7d:77:cc:59:93:73:35:d6:cd:b7:aa:9e:b5:62:7d:
32:09:96:6c:f6:70:76:a0:2b:db:3f:5c:e6:39:7c:64:ab:f3:
2e:aa:34:aa:38:e7:41:f4:13:be:f8:cd:4f:aa:a7:b4:90:e4:
06:9d:0f:0c:44:12:c2:91:db:95:38:7a:6d:21:37:f0:a8:3d:
03:9c:3e:d5:6b:bc:be:15:f4:dd:9e:9b:03:28:e2:f3:e3:6a:
8a:3b:f4:ba:43:ad:31:ca:7b:11:81:00:ee:a9:11:49:66:63:
0a:19:1d:a8:a0:87:12:ba:f5:cc:9a:05:f9:8e:c4:98:f1:73:
33:4d:88:67:40:3b:5b:48:7b:84:a3:be:14:96:c5:20:f4:54:
3f:63:18:29:53:7e:10:7b:66:11:b0:47:67:0e:f2:fc:31:9c:
98:77:08:9e:46:3d:f4:c5:24:42:37:79:17:1c:39:9b:3d:41:
d4:bb:71:7c:1a:eb:88:9c:3b:3b:f6:b4:c6:65:76:23:95:43:
2f:4a:82:20:db:db:32:67:01:71:3a:d7:4e:17:40:f0:2a:ce:
73:2f:17:66:b6:b9:5e:d6:ac:ef:1a:07:f8:6e:dd:c9:0d:5e:
86:54:8a:58:ee:58:90:d3:63:0f:dd:ba:3a:ab:c5:8a:2c:ae:
95:32:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:52 2025 by rpki-client