Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: yWSTgiZZmdV+dqd+wG8gQhK4QYsFeW7YWeqmupS+Tas=
Subject key identifier: 13:A8:55:1B:99:6C:92:2C:84:79:39:BA:5B:54:94:4A:D9:1D:13:6E
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 0194BCAA0A573AC3F09A0C7FAED45F858403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: R81tLyyMH2Sdn6QcA7CKWhaE+fqPAobQtcWmtXGper8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0a:57:3a:c3:f0:9a:0c:7f:ae:d4:5f:85:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=13a8551b996c922c847939ba5b54944ad91d136e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:d9:18:dd:6a:b0:80:bd:69:51:ed:2e:91:
f0:cc:c7:de:c2:72:14:47:58:1e:53:25:db:87:67:
4c:df:80:64:ff:c9:24:bf:93:8b:cd:d4:be:40:88:
f2:2d:e1:1d:05:42:23:fe:41:23:f1:74:a0:c3:0c:
fd:c9:4e:44:df:e4:98:02:14:6d:d8:42:40:f5:1e:
52:f4:2f:6d:be:43:ee:dc:b8:c9:21:ee:1b:20:9e:
78:e0:56:12:c2:99:00:ae:2b:f7:a6:7c:76:0b:52:
91:fb:b2:3a:36:ac:c9:6b:b5:72:89:63:17:43:1f:
0e:26:8f:33:7f:1d:81:b5:0e:7a:28:90:26:7b:61:
98:82:2e:17:0c:f1:c9:65:d4:25:a9:86:7b:bc:b5:
da:4c:15:50:39:34:d0:a5:db:9a:24:f6:6c:fd:8e:
ac:92:8d:17:cf:cf:4c:b9:7c:92:fe:62:14:de:db:
6c:4c:f6:88:ac:4a:83:aa:ec:e4:43:1f:ef:80:5c:
fe:54:57:ac:9c:56:29:a3:1a:70:0b:3c:f7:7c:42:
f8:ad:b5:ce:ca:0d:0a:01:68:85:bc:0c:a5:56:b2:
52:c2:61:be:24:bb:80:38:c0:b1:6e:88:b2:85:b0:
0a:2f:3f:4e:a5:4f:2d:4d:52:8b:9e:c0:de:a2:9e:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:55:1B:99:6C:92:2C:84:79:39:BA:5B:54:94:4A:D9:1D:13:6E
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:ab:ee:7e:75:51:64:83:3e:0f:10:75:87:bb:6a:37:21:
14:39:30:61:52:b7:7d:3e:8d:eb:ed:f9:56:eb:27:17:36:d6:
a8:85:5c:b4:e9:bc:a1:12:85:aa:bd:c6:69:39:73:84:04:aa:
1b:88:ce:9c:ae:3a:91:0e:1c:4e:13:f1:1c:55:76:56:be:f8:
12:0d:04:5c:39:41:2e:87:20:b6:5c:1e:9b:b2:96:9c:a7:9d:
35:6d:3a:7c:83:06:76:5b:69:f6:ad:d0:6d:23:fa:cf:41:51:
7c:f7:e3:82:dd:a2:aa:f5:91:cc:6e:45:bb:7d:09:3e:d7:fc:
1d:58:2f:0f:a2:c2:3c:94:59:26:a4:74:f9:90:a7:e3:5e:18:
e5:c2:fe:29:37:5b:a2:eb:87:13:06:1a:c7:b2:54:25:47:78:
8e:e2:c2:21:2a:39:98:17:bd:60:e7:35:d1:fe:ab:de:8a:15:
7a:b6:15:1c:d6:f0:7b:34:6d:96:ab:a4:1e:0f:2f:c1:d6:46:
bc:49:d6:01:0e:a9:f5:c8:8d:79:76:c2:30:56:5c:73:97:d4:
d5:55:99:3f:4c:ad:f6:27:cc:6d:bf:9a:50:b1:a7:19:bc:db:
56:49:ee:41:94:fc:42:39:ba:ff:83:e9:bb:22:0f:ce:3d:bd:
57:b0:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client