Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: LQyIVvbFgHo9oERGkEDcvIELX+rFIATFioZsHe8ukhQ=
Subject key identifier: 25:54:9B:E9:B4:86:57:B3:C6:AC:4F:54:95:C1:9C:FC:E0:39:D8:72
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 0194BD17952A60F3D0387C132484291FA1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: vvMGU3NNJ6FIWTYxCRCcBzU7wR333xClgYOrEhw2tBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:2a:60:f3:d0:38:7c:13:24:84:29:1f:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=25549be9b48657b3c6ac4f5495c19cfce039d872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:fc:51:f6:5e:38:c7:26:0b:3e:44:1d:3f:
42:31:26:d1:1b:7c:3f:3b:08:62:8a:9a:3c:9b:3d:
91:d4:d9:5d:c8:50:93:ce:81:62:83:99:a3:d9:57:
8e:be:db:d0:06:76:85:19:13:9f:51:78:6e:ef:32:
88:3c:a9:51:8f:14:f3:e4:f2:e6:f2:11:5c:5e:b8:
1a:7c:a0:2a:32:f4:cc:03:ad:bb:bc:f1:cc:68:e6:
f5:dd:db:a9:85:ca:62:6d:59:88:74:65:62:2a:4f:
69:24:a3:61:f2:32:7d:f0:0c:4f:11:15:dc:6e:13:
a5:e2:99:12:47:e4:1a:1e:ef:65:8b:ec:6e:67:15:
47:49:47:de:55:cd:66:a1:39:f0:c1:3b:4b:e9:5e:
1c:ce:9f:56:ee:ed:a7:cd:d7:02:65:4e:ad:c3:c1:
20:df:4a:f6:8f:3a:cb:3b:37:7a:68:59:13:ba:94:
7b:f4:58:d1:6b:a2:e2:01:68:0f:28:3f:66:25:4e:
37:69:44:cd:d2:fc:0f:14:d4:c7:6a:0d:dc:c6:b0:
b7:e4:3b:b0:d8:16:71:87:ac:a2:b9:53:6e:53:5a:
8d:e1:55:2b:52:55:2c:03:d7:5e:de:94:f5:ec:57:
e7:e5:7a:6f:2c:ca:93:ab:67:42:ee:7c:ee:85:e4:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:9B:E9:B4:86:57:B3:C6:AC:4F:54:95:C1:9C:FC:E0:39:D8:72
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:72:e6:23:dc:57:2c:7f:cc:09:e3:17:e1:2b:ed:6a:8e:
52:e4:81:27:6a:51:01:1c:01:94:51:a5:5c:c9:e6:06:9a:49:
cb:10:bc:51:34:08:1d:c8:5f:66:31:12:55:18:5a:ad:c0:aa:
6b:ee:fa:d6:3d:e1:b9:45:d1:d5:18:47:51:eb:d9:1c:0f:c2:
27:31:be:61:f0:28:24:f4:f1:dc:16:bf:b8:cd:82:c2:4e:21:
b7:d0:f8:46:a0:b2:a6:30:db:f4:88:84:a0:49:c9:33:9d:8a:
f2:c4:de:67:80:ec:61:f8:27:48:02:f0:5d:fb:e4:7d:33:f7:
3d:53:6a:02:e5:c2:41:a7:b2:1d:e7:e3:f3:6a:bb:d1:d9:b6:
e9:3a:35:6d:d2:fa:71:24:47:a8:e7:15:ff:19:ca:71:36:e2:
81:63:1b:cc:3c:43:d0:24:24:db:f5:94:65:65:2b:f9:4a:d1:
b0:23:3b:2b:8c:ba:37:b6:4d:16:35:c4:1d:29:97:85:91:89:
6a:e8:e4:88:47:69:f5:8d:d3:17:47:26:1b:1f:7e:21:1c:cc:
75:f8:bc:04:37:56:88:13:51:ee:de:a9:c0:94:60:61:2d:3e:
86:69:a4:a7:05:f9:b6:5b:09:e4:44:3e:61:ba:09:71:b3:87:
9f:c5:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:59 2025 by rpki-client