Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
File: Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft (raw, json)
Hash identifier: Z8Ks7ck/tYOseqZQVFIiW6w1pGJqEydOuYUPGgS1kpk=
Subject key identifier: E8:65:32:D6:67:07:1A:5F:38:C3:46:4E:E9:9F:B7:DA:D4:5B:4A:79
Authority key identifier: 56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC
Certificate issuer: /CN=56af20a60aefacf39fd56a743d1a99534c4850bc
Certificate serial: 0193DCA5729CADFFE54E9434DA0EECF31BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
Manifest number: 11EA
Signing time: Thu 19 Dec 2024 02:00:50 +0000
Manifest this update: Thu 19 Dec 2024 02:00:50 +0000
Manifest next update: Fri 20 Dec 2024 02:00:50 +0000
Files and hashes: 1: 50mgL_DE2avMT4OACaL8yK-M0DI.roa (hash: dNvZf7DhG9XzQ5f79bRAkZ0AANoA3CAg/4TdgXMcjh8=)
2: Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl (hash: 1lzQqm8j9T/ubIiAW7QbfIWOmGPcDOvltU9h46XXsRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dc:a5:72:9c:ad:ff:e5:4e:94:34:da:0e:ec:f3:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af20a60aefacf39fd56a743d1a99534c4850bc
Validity
Not Before: Dec 19 02:00:50 2024 GMT
Not After : Dec 20 02:00:50 2024 GMT
Subject: CN=e86532d667071a5f38c3464ee99fb7dad45b4a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:92:36:a9:74:5b:45:c0:e0:9e:e9:45:3a:
ca:2c:d6:82:3c:b3:e5:10:8b:88:2b:6a:79:ed:6b:
92:83:fc:21:ce:33:c3:19:f7:10:2b:42:7b:68:65:
d2:12:58:d8:de:11:86:b8:00:7b:77:a0:29:9c:33:
15:57:8e:c8:a5:ee:2d:2b:8c:0b:2e:b7:0b:96:ce:
ba:82:e8:21:1a:b3:de:33:1f:a5:60:e5:95:5f:10:
26:d2:d8:3d:96:de:07:42:a4:40:4a:5c:15:3b:1f:
f2:f6:02:cf:5f:4d:55:77:7b:97:3f:fe:62:02:26:
ab:fc:49:17:87:44:d7:9e:b4:93:24:e1:f4:84:c3:
5c:b7:77:3f:2d:85:c6:80:41:46:1d:24:75:94:6b:
08:e1:b5:94:12:b3:bd:ac:09:81:50:1e:85:ef:15:
af:70:2d:cd:7a:93:81:50:87:0e:c6:cd:6a:76:5a:
6b:98:3e:f2:88:a8:90:65:5f:39:d8:27:4f:21:68:
b3:79:13:e6:b2:e9:dc:b5:fc:61:f0:f6:8a:be:b9:
da:a2:1d:e9:e1:a1:9a:53:88:08:8d:f7:58:99:06:
8a:56:02:89:d2:b5:9c:fb:71:23:51:de:da:68:84:
3e:62:2d:8b:7a:0c:f4:bd:be:f9:2b:34:68:9e:bc:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:32:D6:67:07:1A:5F:38:C3:46:4E:E9:9F:B7:DA:D4:5B:4A:79
X509v3 Authority Key Identifier:
keyid:56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cd:e5:db:16:f7:63:15:b7:f7:be:aa:9f:9e:b7:b1:ce:a9:
7e:37:ce:7c:5d:7f:22:58:9a:28:5e:ea:57:09:7b:5e:f7:ae:
44:cc:9e:da:94:ef:81:a7:5e:97:69:81:1e:f3:66:e2:ff:4e:
96:c0:a0:97:39:0d:f2:3f:bd:3e:3e:37:df:46:6d:ff:3d:77:
f9:7a:c8:41:fb:ce:61:d4:f6:c1:80:69:4f:0e:a4:6a:70:33:
44:38:91:6d:14:fe:b4:7c:aa:37:54:d0:66:0d:f0:18:8e:f0:
8c:14:73:24:f4:8a:67:41:b5:11:77:17:cc:66:78:5e:96:a4:
30:5e:e3:29:0d:11:56:6f:1e:ce:61:d7:c2:af:09:63:01:69:
c4:73:3d:2f:2d:a1:0b:9b:79:81:81:56:94:d9:c5:0b:0b:88:
c2:c2:07:e3:24:84:84:d3:cb:2f:ae:32:f2:1b:84:14:d8:57:
36:17:26:48:42:28:f2:e3:54:89:79:58:53:63:a8:f5:0f:97:
34:47:40:c4:fc:9e:9c:16:57:a8:52:f3:b4:5e:77:77:46:3d:
ce:25:30:03:50:5f:a0:ca:fd:5d:44:fd:5c:6d:47:1a:9e:1c:
9c:a0:06:b5:5e:75:76:92:cf:99:69:5a:02:1d:a1:2e:7d:5b:
81:5b:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:08 2025 by rpki-client