Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: /oaQMtpB7a2Xt8NAjLgGCtBVhuroyyGQqWL6XrNQzdk=
Subject key identifier: D6:C1:45:B0:88:35:31:59:32:A3:ED:98:D8:34:46:2D:89:55:AA:09
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 0194BD852CE0770DD6AFE8058DDA0B6A471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 1059
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: gPHIqpWzdZi7C923l+PTnLTea/dexCaUYWzCD+R8wto=)
3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2c:e0:77:0d:d6:af:e8:05:8d:da:0b:6a:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=d6c145b08835315932a3ed98d834462d8955aa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:9d:58:8d:e4:f4:5f:37:cf:74:e4:fa:48:
15:54:9a:a7:ee:ef:e1:a3:16:f1:b0:7d:aa:2b:76:
1c:cb:5b:16:d0:e3:6a:a7:fa:6f:90:e7:2e:07:79:
dd:b6:28:51:69:7f:0f:0b:73:9a:1c:bb:e9:5c:eb:
a2:af:55:6d:6a:73:48:52:44:7c:1d:f5:14:5c:cb:
34:59:64:21:83:76:c2:eb:4d:a2:80:cb:3f:0d:2b:
70:5f:c1:3e:63:d9:7c:27:38:db:ee:1c:61:b8:e2:
b4:62:af:59:76:5b:dc:91:10:0e:41:57:08:ce:d2:
86:42:b7:34:47:67:25:22:17:5a:e3:8e:1b:25:6f:
90:07:44:59:bd:87:d4:77:90:7b:e5:40:ec:60:ed:
2f:f7:a2:d7:8a:78:a8:fe:be:a4:89:8b:93:21:72:
cb:70:41:d7:96:eb:75:f8:9d:ac:f4:30:11:14:57:
ea:8b:4c:dd:ce:f1:49:72:f0:57:db:d5:0d:60:a5:
3d:ec:b3:4c:3f:c4:24:8a:79:3f:cb:57:83:16:2f:
9c:11:18:c1:83:aa:57:1e:21:06:49:4c:a1:ed:db:
df:f7:2b:92:82:d9:94:7c:59:2e:0e:ec:02:fc:9a:
55:dd:68:f0:d3:a8:2a:17:42:e9:2f:1f:e9:2b:6b:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:45:B0:88:35:31:59:32:A3:ED:98:D8:34:46:2D:89:55:AA:09
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:95:77:33:4a:e4:76:62:23:7e:00:4c:0a:70:bc:3f:eb:
99:af:65:bb:c0:13:c2:e1:7d:bf:39:41:1d:a6:db:64:0f:98:
a6:9e:81:a3:2e:8a:b9:48:82:ef:b7:d1:41:d8:e0:d9:18:cc:
92:19:c1:4e:ab:38:b7:fa:b3:ef:8f:63:5d:63:2f:d2:7c:ce:
06:99:3e:af:a7:d1:81:a5:3c:13:b1:a0:5e:b7:de:04:35:d5:
70:ad:59:40:b7:aa:d7:0a:cd:f2:de:a5:81:6d:b6:99:e2:97:
87:81:a2:0d:f8:15:56:d8:7d:01:ee:38:d3:db:cc:78:e9:5c:
55:c7:42:fa:c0:af:38:0b:dc:00:9c:19:c4:9d:08:48:bd:8d:
49:05:c8:f8:35:1d:07:29:92:69:d2:b5:38:91:13:64:f8:59:
61:b7:1e:75:3b:65:23:26:a3:04:86:61:12:de:1c:84:9c:be:
cb:04:c9:6a:f1:4d:0f:54:90:bb:a7:d2:7e:33:2c:33:23:e8:
1d:ad:1a:32:7c:00:39:8d:93:f0:a2:ca:8a:8a:1d:dd:39:2d:
b8:30:f5:c8:8e:87:dd:56:03:6c:bf:99:b3:94:3c:32:ee:d0:
c0:3d:81:93:52:fb:db:ed:f1:1e:33:dd:1e:90:b7:14:7a:08:
ac:c8:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client