Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: wWohaIZ+5/095FnH94xJD2np/Ff0V2YadZuDnQ3dIak=
Subject key identifier: 0A:5B:33:89:6D:BB:F0:92:3C:9A:58:73:AA:F7:FE:A8:84:70:98:A7
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 0194BBCEF3DA0849A9EE250BE1A1B53D1685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: 1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa (hash: gq9DSt1z8pzfpArR6AUfhAN5L8sZbluHboX9Tdi8vnI=)
2: T0VnkttwDklW5h1CRX6T02Zv1c8.roa (hash: U8Qa1bev2h5U9dZ9wJ5v2OHmVNnMdXo3l1ETZAM9KEM=)
3: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: guIuIUMvJ+j1juL0EfD+G5JRwV2aGh2vCjL5RqO38pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f3:da:08:49:a9:ee:25:0b:e1:a1:b5:3d:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=0a5b33896dbbf0923c9a5873aaf7fea8847098a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:9d:62:36:ab:01:fd:fe:89:e4:8b:59:af:
50:f4:47:00:21:c3:da:34:2a:98:f5:60:a3:fb:4a:
95:60:7e:62:93:14:b8:a1:a3:4e:fd:7f:e5:a9:71:
ce:ac:5a:7e:a1:97:c8:43:a4:81:65:83:75:07:09:
ae:0c:d4:ea:7e:f7:e1:31:12:7c:80:20:0b:54:5a:
e8:41:f6:99:9c:d4:13:1c:91:75:40:10:14:ac:f8:
c5:eb:85:a4:ae:d3:25:8c:0e:8f:51:be:19:65:cc:
3b:83:7a:69:62:10:f6:b8:b3:90:2f:b2:e9:c2:b6:
a3:b6:36:77:24:cd:1b:49:e7:71:71:ca:f8:3f:27:
50:cf:d5:1e:4f:cc:99:0c:f4:03:63:24:b8:40:59:
75:86:2f:7d:9d:02:0e:40:08:04:26:a2:3c:a6:be:
c6:a9:d9:89:14:d7:64:a5:3f:37:b2:ab:27:af:0f:
df:ac:5f:0c:23:e6:e5:df:02:11:d6:db:f5:47:af:
63:d3:3e:2d:04:93:b6:bc:6d:e4:04:eb:f0:8d:65:
7b:bd:fb:52:c9:f3:e6:c1:af:8a:46:89:b8:af:ce:
0a:fb:e6:0b:d4:ed:53:ff:9d:4a:a0:a4:93:5b:d8:
8e:a1:68:33:3b:3c:49:b6:b4:25:c3:19:bf:1b:bc:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:33:89:6D:BB:F0:92:3C:9A:58:73:AA:F7:FE:A8:84:70:98:A7
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:41:ee:90:d1:5a:c9:5f:11:14:fd:c0:25:b4:ee:14:53:
b6:54:42:dc:0b:e7:5c:89:99:a9:c4:96:34:c0:14:cf:ee:d0:
15:ae:f0:14:d4:9d:cd:c0:b0:cc:76:1d:76:13:bf:ba:eb:3e:
06:c3:3b:b1:e4:6e:a0:56:06:13:ec:17:d2:36:b7:fc:48:87:
07:1e:6b:9c:a9:7f:2a:c7:8e:0c:63:76:fb:41:4a:2a:cf:24:
4d:e8:f7:b4:49:67:2c:76:fb:bc:b9:04:43:ea:5d:63:b2:29:
85:e0:81:90:fc:19:b4:d7:38:ca:e8:39:2b:8e:ca:5d:76:f6:
ac:d9:42:48:10:7c:f7:ca:85:4c:94:c7:34:6a:3e:24:44:bb:
5b:9a:02:f7:12:e5:7f:50:af:32:d6:5a:8c:a2:83:38:ea:48:
19:94:88:0e:b4:9f:d0:5f:af:dd:d2:92:22:0e:43:f0:ed:b4:
f5:7d:a9:ef:b3:0c:91:c7:4c:e3:9a:d8:80:a8:ba:f0:af:74:
62:d6:a1:bf:03:4f:b9:94:b9:f9:db:43:ae:40:59:0d:9d:59:
58:cd:05:a2:cb:c4:e2:24:66:1e:2b:29:44:f7:2c:c1:e4:ee:
1c:64:54:92:07:e7:9d:22:3d:ec:40:0e:8f:e1:6e:58:32:66:
7e:6f:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:13:45 2025 by rpki-client