Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: ilDvWHVTxje1RzgH3NVyQ3PxonnPwxN4t70lgf9zrV0=
Subject key identifier: 78:8D:AE:82:C9:97:17:D4:3B:34:6D:A7:87:2A:28:7B:08:DC:57:C4
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 0194BBCEC206721B05D71F01980BEABF13B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0A01
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: zDIky/iDK6fhrcnPEPmcwxhwmKX2h892421hg/L+8ls=)
2: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
3: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
4: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c2:06:72:1b:05:d7:1f:01:98:0b:ea:bf:13:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=788dae82c99717d43b346da7872a287b08dc57c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:85:4b:5f:bf:09:22:fb:9c:90:36:09:07:26:
35:39:69:20:08:7d:ee:a2:9f:ec:af:fa:29:e5:8c:
47:a4:0c:9d:c1:42:5a:96:2d:88:7b:ec:64:ac:a5:
24:84:fa:d1:23:62:54:67:fb:19:f0:ac:46:ce:79:
25:71:6e:d0:ff:02:a5:38:a2:f9:77:e4:43:52:8e:
53:cd:c8:9f:bd:85:1f:20:be:b0:c8:d3:28:c2:36:
73:ee:93:46:a0:71:b9:97:b1:ef:20:0c:75:69:ba:
a4:56:4b:17:7c:09:e7:e4:96:bb:dc:9d:10:1e:df:
b5:d2:9f:b9:47:73:87:06:68:6f:d3:12:6a:a1:c3:
6a:dd:10:1c:fa:c8:05:cc:1f:94:4c:08:ec:33:61:
01:ef:21:d1:2a:65:b8:f4:af:de:0d:f6:71:e1:65:
51:62:e6:83:af:05:f0:2f:7a:4f:2c:a7:9e:d8:be:
1d:27:89:b3:52:ea:e1:65:77:81:21:0d:0a:20:50:
48:8c:cf:1e:80:bd:08:8d:a7:45:42:c5:68:81:a7:
fa:2d:84:f9:ff:3c:e9:9c:69:55:a1:d7:1d:5e:58:
26:ed:59:8d:73:c0:9f:7f:71:86:68:f0:23:d1:9d:
8b:63:95:6d:43:7e:75:21:67:9c:d2:52:4b:13:d7:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:AE:82:C9:97:17:D4:3B:34:6D:A7:87:2A:28:7B:08:DC:57:C4
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d1:03:70:b3:4c:24:aa:ea:80:c7:72:e5:79:2d:67:f2:83:
f8:d6:43:11:b1:cc:57:49:c5:53:2b:22:8f:a2:ac:8c:84:b8:
11:ec:00:a3:55:a6:cb:6e:38:20:29:32:97:69:12:4e:06:38:
5c:e4:ee:8b:3d:7b:a5:5d:67:f9:16:e7:f2:34:c3:63:94:7f:
f5:f4:9f:ab:d6:67:f1:de:ae:bc:fb:3e:53:48:83:27:7e:3f:
f3:cc:f1:be:1e:57:75:b1:00:99:d3:c2:d9:26:42:62:6b:d6:
04:3c:65:17:ca:7d:41:70:71:0a:92:1a:ce:d1:42:8a:75:ac:
39:80:60:dd:8b:8c:62:22:cf:4d:58:85:a1:1e:f4:d3:df:78:
d7:1f:c7:db:5e:30:e7:2a:78:d0:6a:09:ad:5d:09:6e:5e:ba:
68:e1:c1:e7:0c:05:db:62:c8:a5:95:fc:90:b9:57:70:54:2e:
d4:08:fd:6f:3b:67:f9:a8:a7:ca:04:16:97:17:1f:ff:5e:68:
d3:0c:36:ed:50:0a:cb:b5:bf:0b:61:86:1d:5f:df:dc:63:0f:
51:a4:82:10:bb:d1:e3:97:37:bf:a0:2b:7d:9b:cb:b8:ce:e9:
db:69:1b:d6:f9:b1:71:00:2e:ae:99:5f:60:32:ce:cf:4f:7c:
dd:51:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:50 2025 by rpki-client