Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: nRCXOeRQQIuOF9Lb4RYQQ+ulgVlVW8N38WR0+6ZKZpY=
Subject key identifier: 31:BA:1B:2F:AD:81:27:9E:BE:63:F1:07:38:45:D1:3B:5C:A2:56:6C
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 0194BCE077EC4F98F50F77BD6B26FAF9734C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 0FAA
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: OWdgTZjswlIH3v8ekYIkiNAvWUY.roa (hash: MSHfYYjKBHxQgm8RGtw1Edy9L8nTXsEr57VvXXxuBE0=)
2: QSe63n0wV0G34lbZHXnZK7pmzzE.roa (hash: 7B+EEFEFOgiMUXqvkdrddtCieIKLinndsMD4DdmL4nc=)
3: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: 7X9fKwSYyaR1vdeWAUS4eKNDr0RMILZE1pCu8BDc5T0=)
4: ugFuorQM8DhT-wz-0vA4nqmcQwE.roa (hash: b33Tld52Z6orIx0s3ge2TfpSdeJbJcXrLaJg2ZbQtPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:ec:4f:98:f5:0f:77:bd:6b:26:fa:f9:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=31ba1b2fad81279ebe63f1073845d13b5ca2566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:93:09:d2:85:1a:23:92:4f:41:a5:7f:2f:
55:1c:e9:6a:98:4a:e8:88:68:09:89:95:67:bc:d8:
b3:61:28:1a:65:cc:76:a4:34:db:65:62:21:8c:e2:
11:11:a7:5d:9a:9a:b0:74:09:2f:ad:10:3f:b3:3f:
e6:98:14:45:47:a1:be:4d:ff:6d:3d:89:42:de:9a:
f9:d0:46:26:98:7c:0d:7e:f1:ce:f7:34:f3:57:3e:
dd:1f:97:4d:20:86:be:27:55:5d:2e:da:c9:ec:b0:
f9:54:a3:99:5e:01:9f:54:cf:e2:87:84:b2:a1:03:
e5:87:0e:53:90:cf:fb:30:80:b6:82:10:d2:65:ba:
9a:46:30:08:01:f5:f0:82:9c:2e:26:6a:87:d1:fc:
5a:a5:f7:38:b9:ef:86:a0:e3:b7:7c:c8:99:cd:98:
47:e7:dc:4e:da:67:94:b3:05:da:b4:2d:4e:c1:2b:
1c:dd:2e:e3:13:c0:51:e4:70:d4:89:7f:9c:bb:3d:
a5:ee:99:56:3f:81:10:40:36:f4:b0:7b:ad:e9:27:
8d:84:fd:4b:ea:80:2e:a4:1a:2d:04:17:46:8e:d1:
90:77:86:50:91:0f:9c:02:61:b2:60:12:e1:6c:66:
5c:4f:e2:95:db:6d:58:69:dd:fa:80:73:89:41:a4:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:1B:2F:AD:81:27:9E:BE:63:F1:07:38:45:D1:3B:5C:A2:56:6C
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2c:b5:63:56:56:24:1c:ee:4d:87:21:e0:20:4b:e8:47:ae:
57:44:39:c1:6c:c6:73:32:9c:7d:fc:39:9d:e7:c5:80:ce:e4:
52:bd:fb:09:97:d6:04:b3:e9:8e:cf:39:de:d5:bb:92:48:b4:
5f:9e:10:2c:f3:70:3b:6b:eb:57:b2:ce:97:a4:9f:7c:42:31:
2d:29:c9:1c:16:86:16:62:98:1a:f3:6c:db:2b:e8:a2:df:d3:
95:dc:0d:a7:7c:37:c0:d0:1b:90:98:df:6e:aa:f6:df:f6:30:
02:e9:c8:ed:f3:d0:bb:81:35:05:26:14:45:2b:02:85:20:e9:
82:30:da:4c:2f:a0:a8:a4:fd:bf:9d:bb:b3:45:4e:2b:5a:f2:
25:c5:40:3c:63:16:23:91:d5:bc:d5:0a:59:b2:f6:96:2a:83:
76:62:6c:05:8a:2d:00:c5:90:65:81:7f:66:fe:36:1d:74:67:
05:cd:4e:8b:c2:9e:f2:4a:81:d2:da:f7:0f:a4:71:c2:a7:97:
02:45:1a:42:02:49:c2:73:5b:d2:c0:e9:d2:f3:c6:a9:8c:28:
42:b0:6a:2d:35:08:e5:73:32:66:fd:71:c1:47:56:44:e2:e9:
b9:33:10:83:69:e3:50:d5:07:65:c5:2f:76:84:e9:ea:f9:ac:
d7:0d:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client