Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File: VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier: bbwgjF40ZOT2A5IwYqAetRVksSp98JCkvQl3khQrnwA=
Subject key identifier: 83:EA:5F:F0:E3:81:9B:55:7F:0A:57:9D:13:CD:C9:01:62:1C:C2:5C
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial: 0194BBCDB40DBC83AE7F4581EBD15734669B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: yndvwzKfIQH0gSqiE4qtrfP21HoQhXZ6NPDv9IgEY50=)
2: jQz3uQsDHb5Fk6rV8v_T6q7tcDk.roa (hash: +T32D0F+ONI1C9R1EewPiDOwSeOx2c90Jbi3GdVVmNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:0d:bc:83:ae:7f:45:81:eb:d1:57:34:66:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=83ea5ff0e3819b557f0a579d13cdc901621cc25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:4c:a1:5e:e6:b6:fd:b4:74:e3:7b:77:d7:
a1:be:dc:4f:99:49:13:64:c8:49:8f:20:4b:25:28:
18:a0:5e:65:82:4c:fc:06:57:87:d1:9f:3e:3b:45:
5d:a2:3c:52:da:11:2b:e9:cf:fe:53:10:c0:9a:ef:
8a:3e:54:b9:c2:09:05:85:e3:a3:00:15:56:28:92:
c7:53:f9:70:fc:a1:08:e2:55:21:72:56:13:23:58:
7c:4e:42:fb:d3:71:dd:9b:06:4d:c0:bb:da:c4:3a:
dc:53:14:63:44:a1:f7:4d:3e:f5:12:e5:65:65:0a:
b7:dc:e2:74:02:c6:5c:2c:3c:99:b8:14:51:5a:3f:
c0:96:96:ed:7a:ac:8d:02:1c:90:6b:16:b4:68:20:
89:2c:c0:07:01:57:3d:fa:db:63:45:d8:95:68:31:
47:b8:d0:6e:f4:a2:68:72:b0:5b:ab:d2:f3:b1:42:
3c:54:61:55:8e:ea:9b:d4:f7:10:f5:b9:e8:e6:72:
55:4d:e1:16:50:4c:21:81:cd:c6:32:3a:23:0b:4b:
23:e6:84:fd:0b:c7:c1:f0:aa:13:ed:9c:09:30:0c:
79:0d:16:b7:2a:42:ac:a8:48:96:e0:13:ee:9b:e4:
a7:01:ae:91:2c:3c:82:3c:a1:15:0c:a3:e8:64:b1:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:5F:F0:E3:81:9B:55:7F:0A:57:9D:13:CD:C9:01:62:1C:C2:5C
X509v3 Authority Key Identifier:
keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:30:a9:64:d2:a7:81:7a:34:cf:53:9f:e3:01:fe:57:c2:
93:d4:d6:0c:94:dd:e2:a6:ac:20:9c:9b:40:b0:33:eb:2b:e0:
0d:3b:1e:df:75:bb:7e:82:75:a0:9c:bd:03:c7:41:a5:b1:bd:
37:6b:6f:e6:13:21:be:20:2e:56:fe:39:aa:a9:ff:b0:79:5c:
ca:81:88:63:7d:3d:ef:1f:65:e6:1d:66:7c:f0:2b:d4:30:1c:
9d:e9:d6:75:33:86:29:e8:98:84:1b:cb:ff:31:d1:0d:ef:a7:
b4:30:78:a0:0f:c7:8e:ec:6c:fe:c3:9c:8e:c2:3c:2e:d6:ad:
54:84:46:ea:c3:a6:be:b4:91:a1:9d:29:f7:db:ea:92:8d:00:
7b:53:02:b3:38:1c:44:b8:91:73:b4:b4:5e:bd:d8:83:56:e8:
da:ca:f9:01:b0:cd:1b:2a:b6:07:59:19:76:0f:8a:2f:8a:cb:
e6:05:c8:24:46:ae:f3:1e:43:e3:e0:b8:69:0d:1b:fc:ac:84:
86:60:34:98:56:98:02:a5:3f:89:85:9b:16:23:e6:51:d3:34:
7f:f6:cc:43:35:4a:81:aa:90:ef:75:d3:8f:72:45:7f:af:1b:
99:f5:62:cb:fe:8d:cd:d6:f3:aa:4d:a0:08:eb:eb:51:23:46:
24:7e:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:13 2025 by rpki-client