Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: RaKuj0iK3VYykMssaN+6MtIHtuxHYEaM8Fh0h0glD4g=
Subject key identifier: F6:CD:12:E3:75:C4:92:16:CF:ED:5E:5D:28:A4:77:8E:FD:7B:01:21
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 0194BD4E60D7EAB81F613FDE58DAD618885B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 126C
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: uwuENxbiOVudQgHQ1ekzt+39HVjRdralGMVyzO+WazQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:60:d7:ea:b8:1f:61:3f:de:58:da:d6:18:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=f6cd12e375c49216cfed5e5d28a4778efd7b0121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:6d:71:0d:5a:aa:ea:d6:69:49:71:db:d4:
ef:88:5e:e5:d8:cb:75:19:9d:53:24:1f:2b:44:b2:
ac:bc:67:4e:2f:48:fc:7c:41:d3:42:12:38:1a:20:
d8:d0:22:3e:a3:97:59:fc:bc:7c:9c:61:79:99:1d:
cc:76:fc:63:ab:2a:d4:77:89:c4:58:67:bc:ce:b9:
d8:ad:71:1b:8a:fb:41:fe:3e:e3:b7:2f:f6:6f:d8:
3b:df:bf:b5:56:e4:de:de:7b:ea:78:f8:ea:6d:cb:
4f:61:d7:21:b9:a9:12:c8:dc:f7:98:aa:30:68:92:
17:90:79:19:98:e0:5d:7b:10:5d:58:e9:f3:fa:23:
f8:a4:04:10:c5:90:e6:fc:fd:26:1a:f9:0b:56:90:
7a:43:4b:01:9d:68:e2:dd:f6:06:c9:23:17:e8:94:
39:b6:9d:e5:d2:79:2b:7d:9f:d8:58:d7:48:cb:ed:
b5:34:c5:22:f6:85:98:91:6e:ab:87:6e:70:7e:e3:
ee:f1:e4:48:6c:4b:c2:1c:22:f2:62:8b:d0:84:06:
74:6e:23:3d:a9:a2:ea:d7:6e:a7:8a:1e:fc:79:d5:
5a:a5:60:8b:f1:05:09:24:bd:6b:3f:43:11:65:e6:
27:c8:f3:ee:e8:1d:8b:ec:e8:58:d2:79:46:60:67:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:12:E3:75:C4:92:16:CF:ED:5E:5D:28:A4:77:8E:FD:7B:01:21
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8b:eb:af:d3:62:8a:48:d8:02:e9:a3:8f:82:74:0a:73:ac:
06:bb:41:e2:1e:a3:4f:b4:57:ab:35:5c:d9:7f:d5:a5:3a:2e:
eb:1c:3f:96:08:b5:b4:32:83:a5:83:48:8c:0c:51:3d:81:18:
6e:5d:03:21:c0:2b:e0:6d:5f:ec:cb:d1:d4:20:48:0b:2c:f3:
b4:39:b1:47:03:49:d8:11:ca:e9:5a:11:3f:5e:4e:31:e3:7b:
f0:2e:66:20:a8:4d:a0:c2:8f:ea:e5:dc:42:95:49:c1:76:22:
88:25:5f:57:6d:41:fd:12:03:52:e5:65:f2:07:c2:e8:3d:33:
5e:c8:25:a2:c4:91:81:05:4c:22:ed:72:0a:6d:6d:d8:ce:c0:
8f:b4:c4:10:77:6d:d6:34:50:cb:fb:23:70:21:fa:71:dd:bc:
80:55:4b:25:85:cf:0f:d8:48:37:0e:ab:3b:95:a2:44:82:9d:
df:4c:10:bf:09:e1:bc:22:65:ab:8b:3d:53:3b:95:8f:9f:77:
55:2f:45:52:97:55:bf:0e:cf:70:17:aa:6f:67:cb:a8:b3:23:
87:a0:ae:d1:a1:26:62:fd:e3:a8:26:09:22:0e:7c:d4:b7:0b:
ea:fa:a4:f3:78:71:3e:4b:9c:46:a3:2a:2b:14:b7:dd:de:b4:
75:df:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:43 2025 by rpki-client