Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File: VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier: u8fDIBA1LJA58Snn3DB2jP9qZgOyqv7XAEm58ZD0MKA=
Subject key identifier: 89:57:8C:28:DA:5F:5B:E9:5D:4B:A7:CE:CA:16:AC:3C:03:66:9A:04
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 0195E07D94F252A6C1B99A323C16A017CA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number: 0470
Signing time: Sat 29 Mar 2025 06:01:21 +0000
Manifest this update: Sat 29 Mar 2025 06:01:21 +0000
Manifest next update: Sun 30 Mar 2025 06:01:21 +0000
Files and hashes: 1: MeVZOtqNt3JW5yw4ZXWY1mEC3c4.roa (hash: aT7Qdf0+N9/MSDlSTyJ9aA4YP0o287rEoQwXL6tiMCM=)
2: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: 5He+PMyZKU71BHmgjs5iUKzmALQd3qYU2OjY79GCJ0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:94:f2:52:a6:c1:b9:9a:32:3c:16:a0:17:ca:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Mar 29 06:01:21 2025 GMT
Not After : Mar 30 06:01:21 2025 GMT
Subject: CN=89578c28da5f5be95d4ba7ceca16ac3c03669a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:93:05:c1:83:ea:1d:04:16:09:c8:ec:8b:
7b:d3:d1:37:e9:1c:1c:0e:fa:54:30:b2:fe:14:0e:
2e:e1:76:73:cf:d9:2c:fe:26:c2:93:8c:8f:ed:3d:
dd:5a:d0:4b:7a:ee:32:5a:fa:45:25:b3:6b:3e:13:
ed:79:f2:42:ef:e3:08:23:e5:18:97:23:99:f7:83:
60:de:6f:35:48:22:40:b1:f3:02:14:b3:22:53:30:
44:ed:8b:55:d0:77:a3:ae:38:f0:72:ad:7d:77:f1:
b9:f4:1e:a6:e9:ca:f6:2e:36:40:47:4b:56:68:dc:
0f:9d:c3:d7:c0:1a:70:f3:ba:75:7d:39:ef:6d:93:
ad:ab:c6:d1:f3:1a:67:5b:92:af:ad:2a:d0:0e:95:
22:b8:00:3d:50:de:9c:bb:41:cb:ff:1b:57:c5:60:
62:6d:39:54:c2:ac:6e:8e:89:0f:80:4d:0b:51:0a:
c2:a7:18:8f:4a:9d:99:b4:ed:42:84:a2:07:62:b2:
a0:cb:80:45:95:b5:eb:42:bb:38:62:4e:ec:09:61:
b0:f1:8e:58:c9:5f:c7:98:3d:7f:77:12:e2:5f:04:
81:70:af:a8:7c:12:75:3a:21:50:fb:4f:94:e4:51:
78:ee:b4:e3:6a:ad:c6:a8:48:9f:2c:f5:5a:10:05:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:8C:28:DA:5F:5B:E9:5D:4B:A7:CE:CA:16:AC:3C:03:66:9A:04
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:42:bf:82:d3:2f:9f:f9:af:c2:cd:b2:4c:62:3a:b8:a3:08:
4a:61:0e:47:e2:54:67:5b:fe:40:fd:66:16:c4:74:23:14:a0:
f5:ce:70:7a:84:14:77:7e:52:ff:a1:d6:49:bc:c8:f6:8d:8d:
f8:ee:89:35:4a:3a:59:18:7d:25:cd:4d:89:c5:1d:b1:85:ea:
d2:65:bf:8c:53:cb:2a:e9:29:ed:0b:a9:d7:cc:c2:0e:2f:e1:
a8:bc:4d:26:d9:9c:33:1d:f2:e7:37:e9:19:8e:be:f2:89:d1:
8e:96:f3:2f:a2:8d:39:54:2a:d5:1d:1a:00:b2:fa:8e:4c:ad:
b0:55:e4:39:b8:3c:ca:0a:a6:ab:f8:02:f1:af:ef:91:1e:55:
55:82:dc:d7:88:33:a7:78:e9:7c:5e:51:da:0e:c9:03:3a:3a:
33:9b:a7:4c:66:08:36:55:6d:e4:fb:77:17:5e:92:d9:46:5d:
0f:5a:41:60:fc:e2:18:82:90:b9:27:a1:b4:ac:1f:c6:46:4a:
da:04:dd:21:15:fa:f4:68:45:f5:08:60:1c:95:6d:21:54:d7:
29:82:21:8d:e8:60:30:7e:a5:5b:23:86:05:d2:0b:ec:1b:db:
39:2a:68:ae:95:67:0f:7d:e9:09:0c:f9:52:bf:53:ab:4b:a4:
0d:15:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:13 2025 by rpki-client