Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/VB1qnnoCNt_O61UFqKlkT2JC5mc.mft
File: VB1qnnoCNt_O61UFqKlkT2JC5mc.mft (raw, json)
Hash identifier: b/rcIuIlKnPIS/wMmOwH5NWm0tSHR1A3seuIZ4gFFNw=
Subject key identifier: 5D:2F:E2:6C:07:45:D2:01:60:A2:8C:EE:DA:BF:CA:CE:BD:11:31:67
Authority key identifier: 54:1D:6A:9E:7A:02:36:DF:CE:EB:55:05:A8:A9:64:4F:62:42:E6:67
Certificate issuer: /CN=541d6a9e7a0236dfceeb5505a8a9644f6242e667
Certificate serial: 019232ED830DBDBADAE57BA8E668F844AEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB1qnnoCNt_O61UFqKlkT2JC5mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/VB1qnnoCNt_O61UFqKlkT2JC5mc.mft
Manifest number: 12D8
Signing time: Fri 27 Sep 2024 10:01:19 +0000
Manifest this update: Fri 27 Sep 2024 10:01:19 +0000
Manifest next update: Sat 28 Sep 2024 10:01:19 +0000
Files and hashes: 1: VB1qnnoCNt_O61UFqKlkT2JC5mc.crl (hash: ACVj1fFAGP3euzmbXjkuMElO2crcaN0EbELbdLQFVJU=)
2: q03aF_RWDD2v4XTvG_xm_capqE4.roa (hash: 5STOfjXMuWwHg8TNTURDl7NUFenZdjESwzoIOo8QOc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:ed:83:0d:bd:ba:da:e5:7b:a8:e6:68:f8:44:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541d6a9e7a0236dfceeb5505a8a9644f6242e667
Validity
Not Before: Sep 27 10:01:19 2024 GMT
Not After : Sep 28 10:01:19 2024 GMT
Subject: CN=5d2fe26c0745d20160a28ceedabfcacebd113167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:a2:86:a7:71:ca:29:3e:a7:a8:94:1d:2d:
94:48:86:fb:10:0b:79:ec:8e:47:6a:0c:a5:74:d2:
0c:40:2a:86:8e:2d:a0:82:ba:b6:71:e3:d1:0e:fd:
0c:d3:a0:5e:33:58:38:b9:ec:45:cd:5a:46:b1:e1:
91:45:86:17:6b:e0:3e:58:7e:e1:40:ba:4b:62:3d:
c5:1a:01:89:3d:24:b1:9b:fd:64:78:83:d9:92:af:
31:26:ce:e6:89:a9:55:17:47:d8:94:3b:be:06:5d:
0d:9a:e9:c9:ea:0c:c6:37:a4:f5:b8:86:b2:9d:9a:
35:81:80:7c:1a:6d:df:55:69:1d:c3:ee:18:e0:4d:
dd:aa:8e:3d:96:fa:8b:67:e9:b7:41:8a:5e:63:ba:
1d:21:61:55:13:63:54:80:bb:56:a3:11:b4:92:8e:
1e:be:ab:91:b3:55:4f:9f:1d:fc:57:4b:61:d7:6d:
f7:9e:2a:a3:22:0f:a2:54:f4:6d:df:be:33:f3:85:
64:15:cb:0c:85:f1:f6:87:74:65:18:4e:85:88:c8:
de:06:f1:ca:1b:3d:43:8c:c0:66:98:74:d4:a7:02:
93:f0:8e:69:a6:24:1d:7b:b1:af:a6:43:18:e5:d8:
a3:1e:be:c3:0d:7a:c1:af:3a:eb:c5:77:86:a9:58:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:E2:6C:07:45:D2:01:60:A2:8C:EE:DA:BF:CA:CE:BD:11:31:67
X509v3 Authority Key Identifier:
keyid:54:1D:6A:9E:7A:02:36:DF:CE:EB:55:05:A8:A9:64:4F:62:42:E6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB1qnnoCNt_O61UFqKlkT2JC5mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/VB1qnnoCNt_O61UFqKlkT2JC5mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/VB1qnnoCNt_O61UFqKlkT2JC5mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:75:b2:ae:c9:a5:d3:4b:79:94:4b:18:da:93:43:9e:87:15:
19:59:cd:18:1b:1a:56:81:09:25:8f:53:4e:2e:82:b4:f5:9b:
00:34:d8:f6:a1:33:38:8c:59:4b:0c:0b:8c:35:03:5c:3c:54:
8a:6a:43:71:a3:22:35:a5:7e:70:9b:74:64:6b:bd:82:f1:d5:
74:dd:93:58:8d:9f:90:1c:52:83:5f:f9:3b:62:5c:53:6b:50:
df:61:f7:f2:72:ca:b9:84:02:7b:91:dc:2c:b5:22:98:e4:0a:
4d:d5:86:9d:a8:73:e6:51:c9:87:15:5a:ff:c1:7b:d9:1f:53:
3f:9a:fe:70:b3:c6:90:ee:a2:e0:28:8a:1a:ff:ac:c3:02:59:
cc:dd:02:b2:cd:11:2e:3b:1f:2b:36:98:61:85:29:5e:68:e9:
66:31:53:7b:80:e0:d9:6e:70:3a:2e:bd:21:43:1a:25:a9:c4:
1b:78:d6:66:79:90:7a:ac:84:8f:34:9d:4b:64:ca:6b:b2:7d:
b9:ce:d3:70:18:1f:15:92:0e:74:a9:5c:ac:d3:5d:a4:b8:43:
fb:9f:24:33:a8:21:f0:97:7b:08:ac:fd:5f:76:42:ab:6a:0d:
b1:79:44:6d:c9:3c:2f:cb:e1:2f:35:18:51:7b:7c:cb:3a:aa:
f1:c0:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:10 2025 by rpki-client