Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/vjfM4Uy1a2ZJeBDnO6oO32cAekg.mft
File: vjfM4Uy1a2ZJeBDnO6oO32cAekg.mft (raw, json)
Hash identifier: dIvnJ/6W7BqrPfC6MMSQg4pTjaFGwTgS4ksqmT4BRK4=
Subject key identifier: CA:E9:71:A0:3A:1C:67:44:14:39:64:39:35:9B:42:A9:96:93:69:38
Authority key identifier: BE:37:CC:E1:4C:B5:6B:66:49:78:10:E7:3B:AA:0E:DF:67:00:7A:48
Certificate issuer: /CN=be37cce14cb56b66497810e73baa0edf67007a48
Certificate serial: 0192C27A093B2C884DD3CA526C8EC4737D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfM4Uy1a2ZJeBDnO6oO32cAekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/vjfM4Uy1a2ZJeBDnO6oO32cAekg.mft
Manifest number: 1322
Signing time: Fri 25 Oct 2024 07:00:30 +0000
Manifest this update: Fri 25 Oct 2024 07:00:30 +0000
Manifest next update: Sat 26 Oct 2024 07:00:30 +0000
Files and hashes: 1: MsrMHIUjlN9Pawl8RaDZtTeYDP0.roa (hash: UFRcCqlW6dAtEPWfNlfY/xm5Y+ehmGScl8yOxZsnSXg=)
2: vjfM4Uy1a2ZJeBDnO6oO32cAekg.crl (hash: 6twKRbskVyaquNnv6KSv/eSP6G7r7RzuLZcPYTzHfsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:7a:09:3b:2c:88:4d:d3:ca:52:6c:8e:c4:73:7d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37cce14cb56b66497810e73baa0edf67007a48
Validity
Not Before: Oct 25 07:00:30 2024 GMT
Not After : Oct 26 07:00:30 2024 GMT
Subject: CN=cae971a03a1c674414396439359b42a996936938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:44:6e:b3:0d:59:64:33:32:0b:f3:88:62:
f3:10:f0:43:cf:6f:fd:ee:24:ab:7e:e7:01:75:06:
ad:d6:da:32:68:02:b5:c6:6f:99:3b:8a:04:17:4e:
e6:cb:dc:a6:30:d9:6d:31:c6:64:ef:5c:e9:f7:11:
d0:5b:4d:32:59:a2:61:13:b2:be:4f:9e:4e:ad:7c:
16:1c:39:f9:db:3e:82:8e:b5:9a:f2:a2:8e:60:e0:
3e:e6:9e:98:41:f8:1f:6b:10:f4:80:12:e5:3e:46:
19:04:e5:e2:21:d2:5e:f8:af:66:f7:db:e5:57:19:
89:e8:2e:e1:6d:3b:88:03:07:56:07:db:14:e0:39:
7f:2d:e8:f0:5a:14:78:4c:48:0d:1a:58:82:96:c9:
14:7a:70:52:ea:e2:46:70:b4:b8:45:62:4a:59:d0:
0c:f5:05:ae:1e:60:03:c2:2b:7e:59:1e:01:17:94:
9e:cc:74:ff:58:49:ea:96:55:be:4e:bb:91:35:a8:
35:cb:1e:9d:5c:c6:36:1e:0e:db:86:67:c9:1a:eb:
fc:af:1d:f8:a3:6e:34:71:1d:ac:ff:68:a9:3b:e9:
21:0e:4d:5f:9d:af:10:ec:07:64:de:49:50:f5:23:
ae:a3:18:87:fc:24:90:16:86:f7:37:a0:bb:8d:a8:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:71:A0:3A:1C:67:44:14:39:64:39:35:9B:42:A9:96:93:69:38
X509v3 Authority Key Identifier:
keyid:BE:37:CC:E1:4C:B5:6B:66:49:78:10:E7:3B:AA:0E:DF:67:00:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfM4Uy1a2ZJeBDnO6oO32cAekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/vjfM4Uy1a2ZJeBDnO6oO32cAekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/vjfM4Uy1a2ZJeBDnO6oO32cAekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:77:0b:fa:cb:06:cb:53:77:3b:44:db:48:06:9a:46:b3:
0f:a8:ff:a4:cd:75:57:02:38:68:1a:5d:51:f1:de:b3:2e:29:
81:19:fc:60:e4:4e:e0:a3:60:0c:7d:ae:cd:50:da:1b:a2:21:
0b:18:f4:5f:e1:38:2f:ca:da:6b:04:8e:d8:19:d0:c4:56:d0:
10:8b:14:08:33:b1:9f:8c:53:ed:42:96:8a:9e:67:f3:aa:a1:
e6:44:aa:b3:69:d3:a4:ab:fe:23:f4:78:00:43:78:80:dc:48:
c9:e6:f4:96:bd:7f:26:f0:50:36:29:7d:48:94:00:9b:54:e1:
c1:2a:49:67:f8:d6:c9:bc:d6:bb:92:7d:d8:98:74:cc:13:96:
01:08:c7:fb:60:28:34:10:74:82:f0:01:a0:d4:97:21:cb:17:
d9:3f:7a:5f:03:19:2f:07:b8:de:8f:a5:03:0f:1a:66:d4:2c:
78:5c:44:65:16:66:ae:9c:26:66:06:f8:52:fb:d8:c7:59:65:
74:ae:3c:9d:19:07:31:54:ba:dd:00:ce:46:a5:3e:80:57:ac:
b6:93:55:e3:39:e2:c8:66:52:2a:98:4c:37:44:3b:1e:59:ba:
07:39:25:15:ff:90:53:4e:7c:f0:1d:25:a6:9a:9b:50:91:fb:
b7:d6:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:08:42 2025 by rpki-client