Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: SlqV8Q66EQllJrIiMKgFwcfXi2AvP0v44JfSgvdq3vk=
Subject key identifier: 90:D5:16:17:BE:C9:F4:4A:C9:57:AD:9F:2C:5A:4B:B3:7F:5A:32:D8
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0194BC052899509108ED9C01F1CC4A0B87B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0636
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: FeklVC0qNHXfj0J3Hp8Z9ArWnx4.roa (hash: zhU/XsLgugYmejL0TFrTVwxSx58qhIKNoUYntYLxICw=)
2: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: WX0EakEE7ZJjFTZbA5xVj3HysxePCqHkJ2ZmtLuQmJw=)
3: zJtGYyZRc8W2K9T7bwhT7OCYFos.roa (hash: q42hTMIU61ggcwEvZqA7acNbu8HPV8t9vJe0vd71f0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:99:50:91:08:ed:9c:01:f1:cc:4a:0b:87:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=90d51617bec9f44ac957ad9f2c5a4bb37f5a32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:51:b7:98:38:76:ec:7f:ca:29:bf:04:3a:
42:12:be:47:d3:6f:fd:21:01:99:f5:4d:5b:ad:0b:
7b:19:70:21:1c:59:ca:20:72:36:ef:fa:19:30:1e:
23:8e:81:cb:60:b3:49:57:91:b6:ae:40:11:68:5e:
bb:e7:6b:db:69:d7:76:b6:0d:5e:28:f9:6b:49:8d:
e9:5c:53:66:97:78:02:07:f9:98:2f:0e:c2:84:50:
cb:08:a9:ea:54:90:46:f4:5a:fa:9c:75:16:31:b4:
90:42:61:8b:e3:05:0b:e9:26:77:96:da:dd:c7:b8:
05:bb:ba:52:ec:34:d0:b8:c1:a9:42:2c:34:f7:51:
6e:15:5a:cc:65:35:2e:ac:a5:5f:bd:30:ef:66:38:
48:17:c7:fb:9d:43:b0:d7:41:a7:71:44:b1:5e:6e:
81:af:b2:a4:73:0a:f9:8c:dc:54:14:08:72:18:62:
3f:08:ed:dd:e0:cd:2c:34:e4:3d:d6:59:e0:03:d0:
9a:d8:b6:1e:6f:1c:19:9d:cd:38:fb:b1:3e:92:e9:
ce:50:6b:36:7c:5d:79:68:4b:d9:be:3f:44:6f:2a:
05:68:e9:bd:36:33:d1:bf:75:67:3e:3b:bc:47:af:
87:e4:93:8e:9c:2b:d0:a1:79:16:09:90:a8:10:22:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:16:17:BE:C9:F4:4A:C9:57:AD:9F:2C:5A:4B:B3:7F:5A:32:D8
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:32:54:9d:97:9c:0d:8b:ba:a9:4d:92:e1:a9:b9:a9:21:6b:
57:2e:bf:08:a2:c1:47:48:db:34:5f:7b:58:04:f1:a0:fc:9f:
68:f8:11:4e:fe:d2:b4:16:13:ba:f1:1a:70:5b:62:14:ae:8f:
1d:01:ee:12:c6:e6:06:4d:4b:86:8b:ce:75:95:00:5e:69:2f:
c2:98:82:38:1e:ff:bb:d0:c7:43:d7:ea:26:65:c8:57:3b:9f:
bd:44:99:fa:93:b3:1f:c9:5b:4d:d8:36:ea:56:35:64:60:6b:
b5:2e:81:10:6c:2a:f9:9f:47:49:79:b9:19:26:92:5b:73:56:
4b:aa:48:61:dd:8f:8e:d5:ad:1d:e8:c5:44:2e:18:02:c7:33:
8f:16:89:7d:9f:ce:db:38:a9:c2:37:0f:4e:25:e6:37:6b:38:
24:d6:79:0a:7a:db:f9:7a:d0:77:67:be:be:05:76:26:81:a3:
22:b0:63:d6:f6:96:e7:10:f1:0f:1e:6d:a7:21:32:83:03:4c:
70:2d:53:b5:95:05:79:47:65:b2:bd:4a:1d:60:a8:58:75:36:
85:87:81:7b:45:81:a8:52:94:d2:e2:d9:96:ed:19:c4:93:f1:
59:4e:fd:86:4a:2a:49:62:c8:93:ea:e5:87:5d:95:d4:a7:c9:
63:d0:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:39 2025 by rpki-client