Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier: iifsqrdsQX2pbzoAoPgw0QpJ8p8of3InWibzuqBNR1w=
Subject key identifier: 5C:61:34:FF:30:6C:53:4B:99:A6:77:F2:AC:10:7B:31:22:7D:26:DD
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 0194BBCDEC1C086D4C1765264CA914F14418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number: AD
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: Ii1z0lez7/epPWrjOzL6sPMEBNkYeU+LfT5RVUNvEPA=)
2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:1c:08:6d:4c:17:65:26:4c:a9:14:f1:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=5c6134ff306c534b99a677f2ac107b31227d26dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:86:de:65:f0:65:8e:fa:7a:e7:f9:ee:4f:
e4:5c:04:a4:8e:c4:1e:63:77:f1:f7:f9:50:88:e9:
98:eb:4d:ac:9f:ba:61:23:da:39:eb:3f:20:c0:dd:
41:c4:02:61:c0:0e:43:a1:5c:95:e5:4a:02:a3:eb:
e6:25:ee:82:2d:e6:84:52:94:9a:cb:0d:89:48:01:
a8:ff:56:35:2a:5c:8d:b1:d3:37:4f:a1:2f:4d:db:
d1:5f:2f:5c:ef:cf:cc:d3:bd:36:08:66:70:ff:74:
83:e9:8d:ab:e7:9d:c2:7d:c4:99:cf:1b:0b:5f:52:
2b:a1:71:b1:af:42:a7:5e:94:7f:c3:de:c2:86:2c:
5b:dc:d8:9f:02:e2:9b:a7:a5:4a:8b:f2:67:52:01:
5c:1a:2c:72:49:6e:fa:dc:ab:da:a2:53:15:30:4b:
4f:7d:b3:a8:f8:94:0b:0c:68:0a:91:2e:1e:38:64:
e6:53:43:7f:71:6b:ac:8e:38:be:d2:b8:9d:ca:ab:
4a:fc:44:f7:a9:63:0b:8e:3b:6e:43:a5:56:4e:0f:
a0:75:0c:f4:ca:86:3e:92:c5:89:ea:8b:10:59:0e:
5b:65:b6:96:4d:b9:dc:40:f8:c2:ac:05:78:f4:8a:
2d:a8:30:07:ec:ec:c7:94:ae:e5:5c:cc:b6:2a:96:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:61:34:FF:30:6C:53:4B:99:A6:77:F2:AC:10:7B:31:22:7D:26:DD
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b3:6e:a4:0a:43:48:5b:9f:fb:bb:ec:74:13:4b:f3:82:37:
47:03:c8:b8:b6:50:cb:6e:61:cb:c5:1c:8a:fd:ab:37:3d:30:
10:16:99:c6:2e:f6:cf:3e:6f:dc:53:d8:74:bb:8e:f0:c0:dd:
68:fc:3b:d1:54:86:6a:77:98:84:bd:a0:1b:e5:d6:cd:2e:28:
60:20:d6:9c:cf:a3:0c:6a:97:41:73:e7:c4:aa:4e:3d:cc:ab:
52:36:18:95:b3:79:8c:cd:2e:9f:4c:45:53:31:2b:5c:59:24:
22:6f:6c:e1:33:d1:b0:05:4e:02:00:65:9f:13:92:ad:c7:8b:
e4:e2:f6:d3:7f:cc:0b:36:68:78:95:0c:ff:58:11:85:60:a3:
92:3c:92:34:f4:81:0e:d8:d3:13:9d:4b:6d:1c:13:76:f1:ea:
aa:c7:79:a1:37:85:4a:68:5b:4e:91:ef:7c:5f:ea:f4:11:94:
38:11:5d:e0:dd:60:04:86:b1:3b:46:66:66:34:94:66:f5:d9:
2d:f4:4f:91:82:12:ad:73:ab:81:2d:9c:0b:3a:5a:8c:74:6b:
97:ac:a3:c9:87:63:25:33:ea:29:b1:dc:6f:6e:2b:1b:98:fa:
83:ed:2d:cf:cb:b6:20:2b:ee:60:53:6b:7c:69:14:ee:61:3d:
e4:2e:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:19 2025 by rpki-client