Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: 80rZsRQYVHs+rDqIF95qKviAmxasKRglPRwubLlmQPU=
Subject key identifier: 45:46:46:9D:49:8D:31:C3:AC:ED:16:0F:72:93:6E:F4:B3:F5:9C:FD
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 0194BC73232A0F0C18DCE830F5FBBAC6EBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 0EBC
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: 0GMEDKP6dwhGPMqpTGIYdUO0KWu4k1jbBOmkx+iJ+AQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:23:2a:0f:0c:18:dc:e8:30:f5:fb:ba:c6:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=4546469d498d31c3aced160f72936ef4b3f59cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:74:ad:25:37:63:aa:32:c0:3e:cd:d0:e9:
c8:0f:92:c4:4b:a9:ee:4d:fe:06:72:88:d0:b2:2d:
0a:e5:ba:46:3c:86:3d:b6:19:bf:5d:27:8d:7f:9b:
9d:0e:84:5b:99:d5:34:c8:59:08:b1:61:4e:d0:52:
b1:65:20:82:7f:63:cd:93:57:ba:02:bd:b6:13:de:
37:e9:b0:99:b0:5c:d6:d0:c4:e0:0f:f9:4a:9f:2e:
5e:17:d8:d0:16:37:07:1c:37:bb:2d:70:07:9b:c8:
ac:33:44:8a:3c:26:56:51:ea:5b:db:64:2d:e6:8e:
74:bc:d6:b7:d6:50:13:22:27:bd:66:4d:a1:1e:fd:
e5:cc:83:fc:8a:63:7a:39:72:e6:4c:8f:7a:25:67:
29:0d:46:cc:44:d3:16:c2:7f:1e:d5:40:67:df:2d:
57:7f:93:12:e7:19:e3:a5:c8:87:3d:55:d7:7a:57:
2c:11:f9:18:a9:d5:ea:e0:16:b7:ad:38:2d:a2:f8:
2c:f2:0b:5b:1d:1a:69:0b:f3:b2:be:48:fc:60:9a:
21:90:d1:f4:1b:23:e5:d1:c8:44:e6:72:d1:e5:99:
d2:72:66:48:3a:20:a1:5f:52:f0:2e:d9:a9:93:61:
9c:1b:7a:0c:cc:c2:64:7b:dc:28:fd:72:65:cc:50:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:46:46:9D:49:8D:31:C3:AC:ED:16:0F:72:93:6E:F4:B3:F5:9C:FD
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:58:18:c5:16:24:4a:7a:1f:df:7e:0f:88:b1:2a:79:d1:f0:
3b:ee:19:3b:d1:02:e1:ae:ad:14:68:3c:d0:10:81:53:03:3c:
6f:d8:15:ea:4a:e5:cc:f2:f9:6e:92:2b:82:0f:87:14:db:39:
1b:51:e9:b2:53:9b:f0:37:9a:12:63:0e:3d:17:33:5e:a4:fd:
f4:23:3a:da:b8:db:6e:0e:bb:a2:d7:5f:53:cd:e0:17:08:60:
35:bf:6e:ec:8a:19:ad:be:87:a7:4a:79:52:80:a5:e9:0b:ce:
38:cb:80:98:e4:1f:e3:26:6c:69:6a:b9:e6:cc:72:1a:e0:b1:
79:ac:d5:4e:52:46:0d:c5:63:fa:de:84:ba:3a:77:d5:39:fa:
63:77:c6:79:2e:38:0d:0c:b1:78:68:7a:5c:61:8a:83:ad:66:
0d:8b:87:aa:0b:54:68:59:0d:55:a4:58:fc:be:cc:03:52:fc:
81:34:e7:48:4c:d3:9c:b3:8a:a8:91:fa:7d:25:6d:07:81:48:
b9:b0:57:7c:b8:20:4e:45:9f:34:75:30:da:9c:77:12:16:f3:
aa:da:57:47:a8:ab:af:7c:95:fa:4b:13:2c:2e:2a:4c:00:2a:
b5:1b:a6:a7:62:b3:7f:00:ca:03:ea:4a:a3:9d:46:82:04:d3:
67:00:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:14 2025 by rpki-client