Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.mft
File: VQIbDZlMSzMNZrCM7waTvTI0bF4.mft (raw, json)
Hash identifier: CFCaqrM8GLaXiTYb4yGx02YfFsx2h6Ce5++QlW+V3s8=
Subject key identifier: 5D:24:69:E8:52:A0:DE:6F:FA:C6:40:F0:EE:B9:BA:F5:49:FA:FC:75
Authority key identifier: 55:02:1B:0D:99:4C:4B:33:0D:66:B0:8C:EF:06:93:BD:32:34:6C:5E
Certificate issuer: /CN=55021b0d994c4b330d66b08cef0693bd32346c5e
Certificate serial: 018B8E67B19D65BBEB25C4447511676FFE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQIbDZlMSzMNZrCM7waTvTI0bF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.mft
Manifest number: 0892
Signing time: Thu 02 Nov 2023 05:00:42 +0000
Manifest this update: Thu 02 Nov 2023 05:00:42 +0000
Manifest next update: Fri 03 Nov 2023 05:00:42 +0000
Files and hashes: 1: 5L1n4LrhpTzJmlqs34EfLmVneRc.roa (hash: yxJDmmUiIM+69yqO48s9NNMbMTp1Gpt+WR4oNp0t55E=)
2: VQIbDZlMSzMNZrCM7waTvTI0bF4.crl (hash: gMpfu7LZVTGqjZ1zVrxWj8rHSZwQclNhF4KGR9ZPSF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:67:b1:9d:65:bb:eb:25:c4:44:75:11:67:6f:fe:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55021b0d994c4b330d66b08cef0693bd32346c5e
Validity
Not Before: Nov 2 05:00:42 2023 GMT
Not After : Nov 3 05:00:42 2023 GMT
Subject: CN=5d2469e852a0de6ffac640f0eeb9baf549fafc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:d1:73:73:99:87:76:50:55:42:48:ad:c6:
13:7c:57:2e:14:86:6b:07:2c:ba:7b:02:5e:8c:16:
0d:e0:ff:6e:38:74:a8:1f:da:90:29:04:c4:46:25:
f3:81:04:da:2d:81:ca:f5:3b:fc:d8:1d:b6:4d:4f:
70:d5:e3:09:00:f4:56:b1:0f:b1:a4:2e:b1:3d:6a:
93:37:65:92:eb:13:f8:cf:33:c5:a5:76:ad:91:98:
36:d2:ef:8e:96:87:55:46:14:0a:16:c0:45:46:89:
03:35:c0:6e:2b:c4:9e:d0:3e:7b:f3:49:7e:7e:a3:
f4:c1:b0:7e:46:1e:54:33:07:1c:ae:98:b9:bc:e8:
5b:da:39:ee:16:f9:21:ee:7d:d2:33:0e:97:cc:9b:
e3:76:ac:e6:89:22:73:12:6d:1e:8b:16:b3:fd:81:
6a:4f:92:fc:70:14:67:80:a3:ac:e4:c7:9e:55:48:
e9:d2:8e:75:ab:44:b3:58:8d:0e:4e:71:84:55:1e:
21:30:27:20:81:19:41:d3:92:58:fb:2a:67:fa:ea:
86:22:8c:d2:55:ff:31:54:d8:5e:a8:97:9f:02:fd:
d3:29:9a:31:0d:2c:03:6f:d7:6b:75:51:2b:12:7a:
14:dd:33:e3:f2:e0:48:17:70:f9:9c:c2:5b:fe:f0:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:24:69:E8:52:A0:DE:6F:FA:C6:40:F0:EE:B9:BA:F5:49:FA:FC:75
X509v3 Authority Key Identifier:
keyid:55:02:1B:0D:99:4C:4B:33:0D:66:B0:8C:EF:06:93:BD:32:34:6C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQIbDZlMSzMNZrCM7waTvTI0bF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:38:a3:37:ac:2d:65:b0:47:84:5b:d3:b8:d6:49:0c:f1:f7:
35:89:c3:df:56:c8:7a:b3:6c:74:a6:c4:d8:a3:2e:15:0e:12:
34:aa:52:48:e4:70:fa:db:41:76:c6:be:f3:a9:3f:de:ac:99:
c3:41:d7:a5:bd:dd:1e:96:d4:d2:93:d0:64:7e:69:c9:4b:b3:
86:e6:a2:8f:2f:ff:f5:73:99:42:41:ef:b4:e9:d0:40:2e:0c:
1a:89:e5:bd:09:7d:b8:5b:0f:e4:09:3c:2d:b7:9f:53:a2:60:
5e:91:55:76:78:ab:cf:6e:ba:56:e9:05:9c:eb:fd:b7:33:f4:
32:05:43:a6:1e:fc:1a:ee:27:bb:c9:d1:7c:bf:2d:c8:ce:f2:
c8:40:a5:48:db:e0:13:e5:e5:c1:ea:3e:51:ca:0a:b9:ee:2b:
b3:70:ba:ba:5d:c7:40:e1:79:ec:1a:74:57:c6:c5:cf:cc:bf:
da:53:76:86:2f:53:6a:c2:00:f2:9e:db:e4:0f:0c:f3:38:b7:
7d:f6:68:61:96:e8:9e:2b:55:53:b5:61:be:3e:b4:67:08:0f:
b1:8a:b7:ce:60:a3:0b:b4:89:79:f6:24:f1:e6:e6:49:26:e9:
b8:cd:82:91:79:42:75:d3:dd:f4:a3:f8:ba:f4:0d:39:b3:34:
43:56:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:01 2025 by rpki-client