Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: Qj62IFRiWLRK6Csfbdn/SAuIOcT1VZsJcM4rbgkAtss=
Subject key identifier: BD:CD:AA:6F:F3:8F:02:A5:BB:39:DA:DF:CD:47:41:36:9C:97:DB:A8
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 0194BCA978D5E157D0659483328C1DEE533E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0D01
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: xEFIQ7K8W15yGewge8L9dtXB4VpBcljy+07iNXwV4jY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:78:d5:e1:57:d0:65:94:83:32:8c:1d:ee:53:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=bdcdaa6ff38f02a5bb39dadfcd4741369c97dba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:a7:df:ed:bf:e6:14:33:34:ac:12:68:f9:
0f:75:74:93:cb:1a:d9:b4:a3:08:36:97:16:12:0a:
34:8b:81:5a:49:3b:48:2b:32:6f:57:2f:a5:af:a0:
78:e2:de:5b:17:82:04:6d:40:8b:54:34:7b:ff:22:
12:5b:af:56:a4:f8:dd:a1:12:ac:8a:aa:d9:0c:1a:
aa:92:81:87:55:f0:fe:b4:f0:d1:8a:4c:69:06:b9:
ce:b4:d1:8f:12:77:60:59:e1:67:8e:12:88:bc:4b:
6f:c0:f8:81:43:6b:4e:dc:aa:a7:5d:05:0a:4f:7f:
ca:6c:9a:e4:31:ff:bd:2e:74:c0:f5:a6:cd:8e:83:
c8:9f:0e:d4:27:1d:67:21:a7:9f:1d:41:16:47:a4:
13:d2:ec:99:3b:ae:38:0d:8b:bd:5f:5d:74:85:d4:
bd:cb:e3:92:08:fd:f9:03:96:94:65:dc:e4:4a:a2:
df:15:9b:0e:0e:75:88:e8:6a:16:8d:42:95:2e:eb:
da:8d:e1:fe:88:af:fe:9a:7a:e0:3a:88:a4:3f:6d:
ac:7a:80:16:3d:c2:3f:5a:89:ab:17:70:7b:a1:8d:
59:66:28:d4:da:42:65:fd:b4:0a:e9:24:ee:f4:79:
a0:33:15:10:a8:df:94:1e:65:d6:ee:00:dc:60:62:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:AA:6F:F3:8F:02:A5:BB:39:DA:DF:CD:47:41:36:9C:97:DB:A8
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:09:a0:e2:3a:47:10:1c:74:e8:18:1e:52:4d:72:af:9f:1c:
38:60:36:24:8e:ea:23:77:5c:01:d8:52:7f:82:ad:81:27:33:
8e:09:f7:52:ab:7b:8e:b1:b8:11:11:94:b2:66:31:ea:b9:80:
1b:77:20:97:df:bd:93:d1:4a:ca:83:68:ca:70:84:f0:34:28:
fa:ab:63:36:88:f7:d9:6d:13:97:bf:6e:fd:73:eb:21:7d:72:
65:b0:b3:0d:be:a2:d3:92:8a:e3:a1:63:92:11:25:28:da:2a:
55:2c:8d:cd:56:e7:35:85:04:85:f4:51:f8:25:1a:11:e5:14:
d0:d2:75:7b:e0:50:ee:45:9a:ea:30:0b:6a:3b:0e:28:a8:2c:
dd:29:45:7c:70:20:6b:f6:dc:62:82:5e:2c:2b:53:c3:24:f2:
0c:43:68:20:3c:52:88:48:81:26:5c:9e:e3:cd:97:0f:e0:43:
44:fc:85:17:46:ec:c1:8a:a7:13:a7:f3:5d:e3:71:4c:e4:50:
0d:8b:2a:82:ac:52:e7:1d:cc:89:ae:a3:1a:5d:e0:1e:bc:72:
4a:49:c9:26:20:2c:03:eb:d6:84:d0:c8:22:59:1f:ff:f5:03:
7b:1d:19:10:c0:25:a1:42:4d:85:4f:c4:11:46:f4:de:56:c9:
47:fb:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:42 2025 by rpki-client