Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/vhMndLv49KofLC_DF4chmYYayQQ.mft
File: vhMndLv49KofLC_DF4chmYYayQQ.mft (raw, json)
Hash identifier: sOvazzrCB/LH/CztEDvcbQEVyzySrBbrwVO3aP0TuRQ=
Subject key identifier: 81:00:95:BE:31:C2:C7:BA:30:94:DB:E0:57:C4:92:FF:DD:40:54:D8
Authority key identifier: BE:13:27:74:BB:F8:F4:AA:1F:2C:2F:C3:17:87:21:99:86:1A:C9:04
Certificate issuer: /CN=be132774bbf8f4aa1f2c2fc317872199861ac904
Certificate serial: 018BEA07BC3886AB6F073A8585E241D9E3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhMndLv49KofLC_DF4chmYYayQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/vhMndLv49KofLC_DF4chmYYayQQ.mft
Manifest number: 085E
Signing time: Mon 20 Nov 2023 00:00:57 +0000
Manifest this update: Mon 20 Nov 2023 00:00:57 +0000
Manifest next update: Tue 21 Nov 2023 00:00:57 +0000
Files and hashes: 1: 4grrgtzcORYn9NWXH9Aisw7I2us.roa (hash: DBXxlQ/Wm8XCbLLoZaEGihFDCM8ZknKpustTt7COu2A=)
2: vhMndLv49KofLC_DF4chmYYayQQ.crl (hash: eUjDwly38JYN2v646RyAIkqhbc4lj7Jg2lDnkCurz+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:07:bc:38:86:ab:6f:07:3a:85:85:e2:41:d9:e3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be132774bbf8f4aa1f2c2fc317872199861ac904
Validity
Not Before: Nov 20 00:00:57 2023 GMT
Not After : Nov 21 00:00:57 2023 GMT
Subject: CN=810095be31c2c7ba3094dbe057c492ffdd4054d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:8b:08:bc:a3:dc:24:59:a7:ce:6d:e1:5e:
2a:05:01:bf:2e:a7:aa:df:74:37:c6:26:6b:3b:81:
a5:8d:68:4a:1f:78:2f:eb:f2:da:c1:03:92:f4:87:
55:11:06:29:9e:13:82:7e:13:de:df:56:00:d1:8f:
7c:5c:8d:fc:2f:fb:e3:db:1c:42:18:10:e2:ca:2a:
c3:ca:8c:a1:0d:77:e9:a4:39:f9:cf:5f:ab:06:ea:
80:f9:4c:58:ee:e4:72:19:c2:a0:26:62:27:e8:ef:
e5:0d:5c:15:7c:8a:83:7b:bc:1b:0d:55:ef:3f:ec:
ea:f3:1b:f7:30:f7:ea:da:51:8a:44:3a:c5:db:e2:
bc:d1:5c:50:fe:04:13:50:c8:8d:32:40:0e:5a:72:
2a:ba:a9:37:47:1d:43:51:74:7f:3c:99:96:c3:30:
22:93:b1:4d:bd:fc:63:58:ce:70:5c:ff:aa:a5:ca:
7a:2f:6c:ef:39:ab:82:78:8b:90:b2:de:cd:f8:c3:
14:ae:8b:12:5f:3e:38:70:67:0a:9e:e9:4c:72:c9:
b3:4f:57:e6:62:c9:a0:ee:e4:2d:3a:97:67:80:0e:
11:12:2d:a9:87:62:d7:26:4c:90:9c:77:3f:7f:fc:
9c:e6:b9:aa:8e:1b:df:50:68:ab:27:fe:ba:41:d4:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:95:BE:31:C2:C7:BA:30:94:DB:E0:57:C4:92:FF:DD:40:54:D8
X509v3 Authority Key Identifier:
keyid:BE:13:27:74:BB:F8:F4:AA:1F:2C:2F:C3:17:87:21:99:86:1A:C9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhMndLv49KofLC_DF4chmYYayQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/vhMndLv49KofLC_DF4chmYYayQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/vhMndLv49KofLC_DF4chmYYayQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9b:cd:ee:f1:8f:03:db:54:6e:e5:54:85:2e:e6:2c:cb:7b:
11:80:79:51:30:9d:8c:f8:33:d7:71:60:b2:5e:1e:af:a0:4a:
54:0f:f1:de:6c:4d:bd:78:5c:97:f5:60:73:07:45:2a:2f:c0:
22:4d:07:b4:3d:5e:dd:b6:2d:67:f9:92:7f:4f:9d:97:87:97:
3d:32:f2:a3:61:d8:76:39:8c:3d:d4:23:17:28:26:97:7d:81:
32:05:f9:e1:fa:b8:4a:38:ce:bd:a1:1a:a4:fe:db:eb:d5:c2:
6f:e2:6e:44:ff:36:38:1e:f3:4a:3d:32:b5:64:bb:ab:74:eb:
ee:ad:ca:d1:da:88:e4:ce:1a:2b:bf:ee:5b:40:90:5c:b9:62:
30:a7:5c:6e:cc:d2:a4:a9:28:78:7c:b5:1a:5e:be:d5:ed:6d:
2c:1f:a9:47:9a:40:e6:ac:53:c5:56:e3:79:82:ff:8d:97:e7:
f1:ef:e9:fa:34:2f:f6:56:24:f7:b3:b5:90:bd:ba:4c:27:2e:
ee:3c:40:c8:a2:33:8e:69:6e:cd:09:e6:df:d0:1e:22:06:29:
b3:1e:73:a7:32:f9:b9:58:7d:f5:1a:14:9d:e0:1c:9f:44:21:
1b:20:f5:ff:6e:d4:81:4d:55:6b:ea:34:38:7c:eb:34:45:47:
1c:fe:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:38:19 2025 by rpki-client