Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: RkzPARKlCvgI71gTlpJacmGbfTF7I52tzH1us/7p/BA=
Subject key identifier: 3E:50:1B:1A:D8:DC:78:8E:60:DD:A5:B2:02:57:27:F4:F4:0D:C0:EA
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 0194BCE0C01182ACE61BEDDEFB1313519AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: J7GmijHrLxjybFW65p98R23+iYdZDQwQcQEpO1oYXPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:11:82:ac:e6:1b:ed:de:fb:13:13:51:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=3e501b1ad8dc788e60dda5b2025727f4f40dc0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:78:64:2a:a6:e9:0f:44:cd:46:4f:0a:b4:
d8:c9:ad:75:f4:89:8e:a1:2b:b9:1e:5d:ef:5a:23:
96:1f:1f:84:b6:3d:80:04:82:18:64:de:38:f9:ae:
31:de:46:87:bc:53:5c:4d:1d:73:38:3c:3d:3b:06:
99:3f:fa:41:34:31:ae:bc:13:71:84:4c:72:d8:be:
7a:ed:3a:08:af:1d:cf:76:1c:01:80:75:ea:68:8a:
db:6c:d6:0b:c4:99:13:d6:dd:13:d2:28:a7:cb:9c:
c5:4d:84:81:14:05:66:1c:97:57:dc:9a:b9:10:00:
42:a8:ad:7a:40:67:e5:37:3e:ac:97:b9:ae:4d:3d:
0e:c8:f9:46:a4:c2:e7:0c:22:93:71:40:e0:74:69:
6f:ac:21:10:fd:d6:9d:91:be:dd:e3:0e:e5:b7:39:
de:85:e2:6c:ff:00:ae:4c:4e:39:c1:57:9e:3d:7e:
05:63:08:02:58:00:7c:4d:36:f2:0c:52:9b:c7:c2:
28:d7:2e:9b:49:1c:0c:ec:e8:e6:7b:d7:51:90:68:
49:26:71:88:07:28:c0:79:16:18:d9:dd:ca:48:cc:
67:ce:2f:95:dc:d0:1d:f0:b2:0f:9d:da:7f:8f:51:
d7:06:d7:1a:ba:a9:c0:24:74:1f:dd:f7:a3:ec:2d:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:1B:1A:D8:DC:78:8E:60:DD:A5:B2:02:57:27:F4:F4:0D:C0:EA
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:eb:ad:9d:7c:ee:80:8e:46:81:e8:f4:06:83:41:8e:03:
8a:12:db:9c:d6:4c:9c:85:1b:35:f6:18:c3:66:a6:0b:cd:f3:
6d:a4:81:50:fe:e8:72:1c:84:e8:74:4a:6d:5d:f5:85:13:83:
b3:45:53:26:df:f6:98:47:84:fd:62:97:cb:cf:2e:3c:01:97:
e5:c8:2d:78:51:dc:e8:e7:26:45:96:9f:53:41:63:cc:30:15:
88:0a:98:a5:8d:bf:33:e6:0d:b2:15:72:81:92:07:f4:77:25:
15:f0:30:f0:c8:5e:43:64:a0:65:05:19:6e:96:25:3e:2d:15:
d1:09:32:40:1a:9e:c8:3b:81:a1:63:12:c0:47:f4:68:3e:0c:
88:a5:58:1c:3a:ab:57:0c:3d:14:46:1b:76:e6:56:2f:c4:bf:
9d:be:c3:50:f4:d9:55:41:dc:07:62:6c:83:65:e3:c2:94:b3:
ff:c6:a1:7a:c4:9d:fe:93:0c:98:a9:c4:49:77:2b:c6:4d:27:
a3:b3:cf:39:b9:45:ea:54:3f:a9:d3:42:46:bd:e4:11:26:fb:
06:6c:bf:a7:04:09:f3:70:38:6d:d3:88:3c:8a:ce:45:72:44:
a9:0e:6d:57:3a:55:06:4e:f3:d8:c8:00:41:6d:c7:df:d7:c8:
f8:63:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:36 2025 by rpki-client