Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: Siy8BfpjnmCFfuXiwDF/WQ1rzUivO9Ws6T8BboZtJvQ=
Subject key identifier: 6C:05:B1:BE:FF:92:30:6D:A2:17:6B:A4:4E:6D:4A:63:95:C8:0A:7E
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 0194BC72DA0104E03497BE6DA0B519ABA676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 074F
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: xsKvskHr27XhWy/AuFuwKtw3qU7sTKIx+8v2Qg/tOYY=)
2: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
3: nlnL1KrlFfXQEwGDosct7b61rpQ.roa (hash: qhnchUWmXUGxeLQaDoPZCE17/L9LF/P0wpk8nhaLzWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:da:01:04:e0:34:97:be:6d:a0:b5:19:ab:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=6c05b1beff92306da2176ba44e6d4a6395c80a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:d4:fd:63:67:8c:75:09:e4:5d:bc:53:02:
6d:a5:38:ce:5c:85:18:a2:1b:41:3e:26:0e:86:d5:
56:0e:8b:6d:0e:a8:86:a9:a6:1e:89:52:86:2d:03:
18:01:ed:0e:dd:0a:8b:af:94:d4:a1:7c:36:10:c9:
e4:cc:2c:52:e8:e0:ed:de:40:16:cb:0d:55:7e:fa:
22:97:ac:b3:8b:50:10:10:cc:2a:97:e8:eb:48:ce:
1f:bd:7c:3d:4a:2b:b2:0d:8a:38:a9:99:8d:e7:0c:
df:a9:f4:6b:fb:6b:04:db:2b:f6:2b:52:9b:f8:9b:
1b:54:64:60:ec:e8:3a:e3:f6:2e:f7:d8:93:a1:b2:
d3:dc:81:53:6c:97:0e:25:09:0e:7e:2e:5a:4d:ab:
47:c0:f4:7b:d7:2b:49:73:55:01:4b:18:b2:20:63:
d5:e7:02:12:5e:e6:99:fb:64:c8:b4:3c:12:78:b3:
58:1c:a1:2d:9e:05:bf:2e:d1:ed:a5:7a:3b:04:cf:
22:ff:d5:e9:db:f9:b1:0a:27:83:37:ed:fd:53:03:
71:c0:05:1d:e4:6e:c1:b6:f7:e5:ba:a4:47:08:e4:
aa:a7:85:bb:99:01:0e:0b:3c:fe:bf:7c:1d:e0:ee:
c8:31:69:6b:8a:98:64:6f:f7:eb:33:33:e4:a0:94:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:05:B1:BE:FF:92:30:6D:A2:17:6B:A4:4E:6D:4A:63:95:C8:0A:7E
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:11:46:83:6d:23:55:93:99:10:dc:93:f7:4c:08:7b:26:08:
0a:e2:d2:3b:19:a1:7f:c6:c6:23:b7:5b:09:e1:e3:47:7d:13:
9d:b9:9c:7a:a1:8d:e7:c0:67:cf:2c:f5:8c:0d:41:62:eb:27:
a1:fa:69:3b:e2:f8:b0:c6:7f:2c:ea:4c:06:2d:74:91:ed:85:
62:53:00:41:db:42:c7:01:8c:b0:2c:37:f4:95:12:ed:cc:1a:
31:15:ac:6c:f4:74:df:4d:b8:82:c7:5c:5a:87:51:46:9b:93:
fa:f3:2a:1e:3d:67:68:7b:9b:f9:f4:e9:49:2e:c3:6a:81:d2:
86:aa:6c:07:ad:a5:39:67:df:ad:1b:2b:31:17:4e:e5:6b:25:
2c:ca:4e:52:56:13:b6:b2:fa:e4:05:a9:ad:f4:b9:1e:61:6a:
f7:ac:04:8c:c0:31:04:d9:0a:13:08:00:7f:57:fe:9d:e6:3c:
ac:78:ed:1e:1a:85:a4:88:aa:d7:11:8e:68:01:5c:81:a1:7b:
a8:4a:ec:f9:14:93:ae:fe:87:de:d0:ac:67:e3:d8:43:f6:43:
aa:d7:64:57:f3:bc:fb:bb:2a:4d:eb:19:2c:f6:d5:01:1e:a7:
5e:92:f1:6c:27:bb:11:6c:aa:af:f3:9d:b3:3f:21:8a:3e:bf:
5e:18:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:40 2025 by rpki-client