Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9faa83-fa3f-4c16-9cf9-1782f47bf653/1/vQqK6D9JBAUYteIYvk71awZu20E.mft
File: vQqK6D9JBAUYteIYvk71awZu20E.mft (raw, json)
Hash identifier: xYJGOdF4pjDtC/2TB7wOf7wB4qN4yII7ezs0r9lYvaE=
Subject key identifier: A8:EF:48:BE:0C:55:75:68:3C:4F:23:57:DC:45:AE:26:9D:8B:A3:1A
Authority key identifier: BD:0A:8A:E8:3F:49:04:05:18:B5:E2:18:BE:4E:F5:6B:06:6E:DB:41
Certificate issuer: /CN=bd0a8ae83f49040518b5e218be4ef56b066edb41
Certificate serial: 0194BBCDB6E6BC0C14F2FBE78769B14B42E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQqK6D9JBAUYteIYvk71awZu20E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9faa83-fa3f-4c16-9cf9-1782f47bf653/1/vQqK6D9JBAUYteIYvk71awZu20E.mft
Manifest number: 071B
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: vQqK6D9JBAUYteIYvk71awZu20E.crl (hash: Yu/uOG34fC+eJVmeHuhIhkksXCl00C4xTNSwNFJ8gKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:e6:bc:0c:14:f2:fb:e7:87:69:b1:4b:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0a8ae83f49040518b5e218be4ef56b066edb41
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=a8ef48be0c5575683c4f2357dc45ae269d8ba31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:d1:56:3d:fa:a3:bf:3f:f3:bd:ed:b0:92:
82:37:f1:8a:5e:c2:e8:e6:47:96:9c:e3:c9:79:52:
94:14:ed:0f:bb:2e:ee:79:20:9f:01:75:b7:bb:f2:
18:3b:91:69:36:fc:61:5b:9f:0e:2c:61:66:f0:a3:
8c:1a:8b:76:8d:76:24:d9:da:b0:aa:b9:cf:5c:07:
80:d6:a7:7f:9c:ae:61:37:83:4b:8c:cf:5d:2d:1b:
dd:d6:73:1b:5c:a6:fe:1f:7c:e1:6c:36:26:14:a6:
06:0c:bc:88:39:be:d9:05:92:8a:f2:ad:ab:56:9b:
02:ce:ae:1c:ec:5f:09:b3:9b:13:4f:39:93:20:ae:
67:bc:af:95:4f:21:56:bc:bf:57:1b:26:60:19:d6:
6f:07:b2:36:8f:a8:5b:ef:8f:6c:44:68:8d:fc:d1:
c1:73:ed:aa:a2:10:bc:36:b7:78:3d:94:60:4a:c7:
f0:f9:e9:56:9e:fd:42:98:fa:4f:aa:19:90:cd:f9:
61:1c:7b:7d:26:93:27:ac:ce:7b:c4:84:e9:de:24:
ae:db:f9:9f:46:9e:57:6f:d1:b6:76:c7:79:ca:04:
92:fc:66:21:0a:d4:44:dd:38:0a:42:3f:14:d9:79:
9b:54:0c:3e:ba:b5:7c:5b:41:5e:6d:1d:88:3d:0c:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:48:BE:0C:55:75:68:3C:4F:23:57:DC:45:AE:26:9D:8B:A3:1A
X509v3 Authority Key Identifier:
keyid:BD:0A:8A:E8:3F:49:04:05:18:B5:E2:18:BE:4E:F5:6B:06:6E:DB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQqK6D9JBAUYteIYvk71awZu20E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9faa83-fa3f-4c16-9cf9-1782f47bf653/1/vQqK6D9JBAUYteIYvk71awZu20E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9faa83-fa3f-4c16-9cf9-1782f47bf653/1/vQqK6D9JBAUYteIYvk71awZu20E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:1e:6d:44:9c:0f:15:8c:4f:99:bb:7d:da:dd:26:17:83:
82:73:c1:3e:6c:82:95:89:40:8a:a3:b5:5a:99:e3:98:d8:ec:
a0:75:a4:6d:d9:37:00:6a:c5:1f:cd:6a:53:54:cc:88:07:1f:
2a:63:75:57:ba:75:d8:75:82:07:d7:54:12:75:af:75:d3:68:
4a:1a:70:9a:0f:ad:c3:ed:34:05:92:1e:4d:c9:d2:e6:21:41:
7b:88:77:69:2e:5c:44:b7:a2:75:2b:26:9b:3c:0b:a6:1d:3f:
ca:34:af:9d:2f:9f:94:db:e0:04:d3:34:89:2e:77:08:59:f7:
fc:51:34:a4:6a:14:41:e6:64:7e:fe:b7:15:d4:d7:ab:30:02:
6a:74:e7:ea:c9:6c:46:b8:8b:dd:f8:70:87:4b:f3:ff:ff:8c:
8c:fd:bd:86:08:95:72:a1:85:73:76:b0:d0:2b:a8:08:d5:d3:
fe:04:78:80:8a:91:90:cc:6e:fa:ef:8b:67:ed:ef:05:0b:86:
57:2e:42:a4:9b:ee:49:11:4c:2b:c1:97:a8:98:3c:cf:e2:34:
37:66:4f:45:84:eb:5b:3e:3a:25:02:0d:96:04:33:8f:11:fc:
f2:bc:ba:5a:e7:84:b4:94:79:03:b1:24:cb:48:8c:6d:ff:89:
cd:09:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:14 2025 by rpki-client