Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: QC8UJWfjqNvTANLL+8D/YDd7qb0JtRECOwbbfMem+Lk=
Subject key identifier: 22:43:53:EB:11:0D:C1:EF:C3:FD:9B:6F:6E:0B:BE:C2:E6:34:78:9C
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 0194BBCE3E583F1D4CCC90161698E64532E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 0F11
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: ImC5PqDRrEq+gSPdx6VBWAO3DKc9k3LlvSZCbEbbfUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3e:58:3f:1d:4c:cc:90:16:16:98:e6:45:32:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=224353eb110dc1efc3fd9b6f6e0bbec2e634789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:76:83:d1:20:3c:9f:89:1c:7b:48:3c:9a:
e5:e2:6c:e2:a2:4b:71:ae:1a:b4:4e:61:a3:5f:b4:
95:fc:da:9a:70:46:5d:5b:94:f7:d7:7c:35:ff:3d:
c5:b4:29:9b:f1:29:bd:b5:17:34:58:2c:8a:b6:22:
03:3a:11:37:10:46:6e:e0:fd:3a:31:e4:00:c7:3e:
31:08:cd:b3:0c:7a:03:45:87:a1:6a:1d:ca:df:f4:
4d:d1:fd:69:57:50:bd:08:a1:b1:b1:a3:30:06:da:
96:b0:d6:87:23:19:39:d3:a4:6c:5c:39:41:89:b6:
a6:12:2c:2f:45:78:0f:82:4e:03:84:df:4c:a3:12:
60:a9:84:ef:18:9e:2c:14:53:af:97:b0:22:a4:c1:
a6:0d:4a:e6:5c:3d:88:fb:a8:52:60:52:bb:81:fe:
ef:0e:37:18:fe:40:b0:6a:8c:96:e0:07:f7:36:24:
56:ad:9b:62:cc:95:d3:15:e0:5f:94:15:51:c5:e5:
f9:10:17:f7:fe:0e:24:e5:ea:b2:3f:d3:9e:bc:2a:
79:92:bb:89:dc:ea:1d:5f:d6:4a:41:7f:23:bf:8d:
22:94:f1:e7:a8:24:32:6a:1c:4b:07:3a:d5:ac:6f:
45:e3:50:d7:67:f1:16:92:99:56:a0:a8:7c:81:be:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:53:EB:11:0D:C1:EF:C3:FD:9B:6F:6E:0B:BE:C2:E6:34:78:9C
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d9:31:00:34:c4:fd:56:71:9b:86:e4:53:a3:9b:74:51:47:
5d:db:bd:98:93:62:26:1d:ee:02:e2:9a:1c:f5:d9:f7:b1:00:
2d:5e:b5:bd:7a:5f:10:23:17:3b:1c:2c:c1:55:dc:31:81:f8:
a1:6d:35:9b:50:2b:b8:28:ec:70:9c:12:c1:8b:72:32:df:12:
4e:1a:3e:17:99:da:ed:b9:8e:62:de:ed:5a:f1:cc:e1:ed:c8:
b5:f2:61:cd:be:40:c5:5d:c6:21:df:b3:8b:dd:02:05:d0:ec:
e3:70:36:a2:df:8d:ec:8b:29:69:bc:73:ca:b9:06:13:67:80:
e8:e5:5a:bc:d8:a4:ad:36:62:71:6c:62:0f:98:20:9d:e4:ae:
0b:d1:85:03:21:cf:91:91:4b:8c:ba:64:bd:aa:f0:6e:25:8c:
b7:ae:46:b8:8a:20:d8:b4:4d:29:e5:66:ff:ce:27:84:9f:6f:
ac:35:54:0c:d5:e9:11:5a:ce:6c:2b:9c:45:0e:26:d4:6a:1d:
39:44:a5:3b:85:b7:94:d8:9c:e1:a5:88:dc:9d:f6:15:1f:0f:
7d:b5:68:fe:96:32:91:5c:c1:31:fa:0b:b0:17:9d:60:f8:ff:
31:38:b2:dc:55:dd:94:50:78:84:47:e9:f8:9b:d4:cc:78:d2:
92:b1:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:29 2025 by rpki-client