Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: G7KfWgKnWUl3/B7tjqjM6MBQdortFn8uTrtZFCvv0xc=
Subject key identifier: 2E:8E:30:32:EA:F0:14:BD:81:6C:E5:A3:80:86:38:27:BE:00:1A:DB
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 0194BC3C3076DDC271C7631A3123E472C9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0926
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: ZIXPTZcO8AUOwbsV04EndDU6yox1qYgKBa1oWAdW+mA=)
3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:76:dd:c2:71:c7:63:1a:31:23:e4:72:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=2e8e3032eaf014bd816ce5a380863827be001adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:d9:48:e8:48:99:44:9e:72:21:a7:88:87:
85:65:c6:8f:64:9b:f2:ce:37:66:c6:2d:de:09:35:
a5:79:46:09:9c:72:57:51:46:4e:cf:e2:ad:52:47:
89:8d:0c:dd:2f:71:66:71:0b:f8:af:7c:3e:3b:e1:
6e:c7:b0:95:07:2b:4b:2b:16:b3:50:6e:c7:5f:82:
d8:91:00:68:37:8c:b8:46:3b:0d:76:f9:30:d0:5b:
2e:3c:2f:df:bc:72:bc:b9:a5:fb:5c:ea:26:12:80:
13:7d:b6:34:f0:e5:37:ac:f0:cd:4e:28:da:c5:1d:
f2:61:6f:89:cf:1a:f2:5c:e7:64:e3:6b:ff:d2:f8:
1e:64:c8:95:d2:1b:25:11:a4:5e:d4:cc:0f:99:bb:
d6:db:6f:51:68:3c:41:8e:57:0b:09:a2:e3:8b:2b:
25:36:2c:7e:30:b8:61:61:c5:08:69:d7:72:19:e3:
e2:b4:29:56:53:cc:0b:e9:29:12:bd:75:91:91:f8:
a7:9f:8f:75:ec:d0:9b:9d:f7:6b:6c:9b:b0:f3:f6:
de:06:ff:41:4d:db:8c:24:f5:13:4f:1b:07:29:2b:
1f:fa:fc:9b:4f:0f:5c:b5:5f:f8:ba:4a:60:68:5c:
26:b2:e7:52:c6:a5:4c:7b:7c:1e:c5:07:1e:88:78:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:30:32:EA:F0:14:BD:81:6C:E5:A3:80:86:38:27:BE:00:1A:DB
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:47:20:e1:2f:5b:97:ab:b6:c0:b1:57:18:19:d9:4a:12:
4f:10:9f:77:59:00:09:b7:79:a0:ad:ab:9c:be:9a:8a:03:7a:
46:35:d8:8b:9b:4a:4e:f4:c5:38:b8:b9:b3:25:70:be:19:5a:
10:5a:4f:e9:91:54:ef:d7:a8:bb:79:64:c9:bf:5f:48:2e:fd:
be:2f:49:80:a9:8d:12:5a:df:ff:95:d3:a9:e7:d6:4e:92:97:
01:e5:db:e6:61:0a:31:bf:cd:ab:a4:50:76:55:bc:a3:24:70:
ad:fe:b2:9c:3c:16:fc:cf:c9:46:b7:ad:5d:ed:e8:9c:38:33:
1b:ec:e7:3b:a8:bd:f1:2a:64:49:fb:5d:d5:e6:d7:94:b7:ee:
d7:74:ee:ac:13:de:1e:cc:f7:19:d6:b5:53:47:f6:b9:11:b0:
0e:08:59:b8:87:20:d5:a7:be:6e:39:84:4f:ed:de:20:a4:cf:
71:fa:d8:dd:14:63:9d:2e:ba:a1:39:5b:2e:cc:7a:fe:28:15:
ce:96:0a:e1:ec:98:c2:50:0b:d0:b4:e5:4c:a6:c8:ed:6b:1b:
25:17:f9:07:2e:f4:d3:77:69:87:fb:af:f3:b2:dd:63:a0:22:
17:4c:4a:c2:1c:33:28:ee:a3:ab:ff:5e:21:0b:39:2e:c8:29:
b0:0d:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:31 2025 by rpki-client