Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: YtgEj46La7e4h20PY7t0rRaTi/f4R3acpeuM5mnCHYQ=
Subject key identifier: FC:73:12:55:60:4F:BD:F6:4C:F2:85:7A:90:EF:76:30:00:74:99:25
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 0194BD85479DC8D7AE9E711D67BC367C0721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 1156
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: MZ2bO92bh1YSdJXKKjyWTc3/JkJxmAo+O3qYQeiQLDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:9d:c8:d7:ae:9e:71:1d:67:bc:36:7c:07:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=fc731255604fbdf64cf2857a90ef763000749925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:4f:d7:17:33:32:a0:0f:fc:c5:af:e9:29:
e5:ad:e5:b9:80:64:6e:3d:83:a2:63:20:fe:c6:48:
d0:28:29:90:d2:05:e7:6c:62:7b:c3:0b:a2:41:6f:
9d:b3:dd:3d:d0:e6:b0:0e:84:a8:f5:65:5a:75:7d:
c1:46:35:62:b4:18:a3:56:ea:fc:fd:21:5f:87:dc:
53:07:5b:af:ae:04:46:7f:4a:f0:8e:e4:96:99:63:
f2:56:ac:61:8d:34:9d:57:24:28:4d:20:62:fb:14:
55:46:01:50:26:52:e1:e0:37:92:73:1c:b6:0d:a4:
29:37:a9:2f:49:d9:7c:7f:e6:6f:78:c0:0c:1a:50:
6e:90:41:5f:10:e0:88:b4:b9:e6:81:f8:ba:ba:85:
4c:5f:fd:d1:ae:24:39:86:5b:c0:52:d6:eb:02:6b:
97:d2:74:56:d5:95:66:6a:0e:f6:9a:9d:5b:6a:f6:
04:53:c3:c4:c2:06:67:bb:1f:e5:57:98:9a:45:8b:
7f:ff:c6:5c:dd:e0:74:01:35:b9:62:b8:35:d8:f4:
95:6e:07:99:7d:92:4f:b6:ce:cb:52:e9:9e:59:97:
01:e5:23:1c:5e:b6:ca:ab:7a:f3:a5:5f:c6:9a:23:
7f:0c:6f:d3:70:88:86:e9:cb:8a:f3:75:a6:e6:26:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:73:12:55:60:4F:BD:F6:4C:F2:85:7A:90:EF:76:30:00:74:99:25
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:e1:6f:ae:bf:c1:98:da:d9:0a:f9:d9:35:e0:4b:5f:42:
c9:99:82:89:fe:e9:dd:4b:1f:5f:5b:04:69:f4:30:ac:82:b3:
63:d8:2e:38:b9:fe:c4:1b:89:6d:db:61:4d:5b:c1:1e:29:ee:
17:28:69:86:ab:bb:16:c6:45:90:d5:da:f7:83:07:84:87:ee:
c6:25:76:52:67:8b:d3:11:98:d4:81:4f:e7:04:e3:46:d1:bc:
8a:71:4b:ad:d7:62:58:9e:58:8e:1d:5c:25:3b:b9:4d:c4:a4:
1b:d9:65:eb:ef:bd:5c:9e:bc:1a:9f:1c:aa:3c:f0:07:90:5b:
b3:6a:0b:5a:55:5b:3b:d5:3b:be:c3:3a:90:ce:73:ad:f7:f1:
ee:7b:f8:6d:90:a1:bb:b2:bc:a9:c4:83:86:9c:95:0e:0e:91:
e6:7c:c6:6f:75:5a:5d:d9:0f:4e:27:76:72:47:e3:1b:84:98:
3f:41:22:d9:6a:c2:80:8a:81:48:f7:ef:c3:19:1a:7a:94:6f:
68:6e:af:90:7b:96:4a:6c:52:66:5b:20:27:63:29:0e:c7:ed:
ed:2f:f3:94:41:92:5c:53:5c:96:de:87:cc:07:31:5b:e7:e9:
75:fe:d9:1c:da:d3:3a:3c:b4:1d:9f:47:8c:9e:89:f9:23:30:
27:e4:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:03:14 2025 by rpki-client