Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: 3u/OnzwCjpwPaSA55jSY4vG3geGIFRnXWVZkFxoOaO8=
Subject key identifier: CB:37:D9:92:B3:07:72:6B:42:AA:2F:DC:98:91:FF:4A:87:71:1E:36
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 0194BBCE5C4AD9B40CECA8658F410907BB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: cTJ9Jvuk7wNuKRTTkgQxunYk4fCZbu2TJorErsFNTCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5c:4a:d9:b4:0c:ec:a8:65:8f:41:09:07:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=cb37d992b307726b42aa2fdc9891ff4a87711e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:1c:45:e3:c7:c9:93:c9:09:d1:2e:9f:2d:
af:14:fa:8a:e3:c1:9d:45:35:aa:08:a0:ab:21:dc:
4b:14:e6:aa:99:4b:80:8c:0d:a0:26:8a:24:d7:f6:
43:70:b3:ff:76:85:e8:92:33:65:aa:f4:78:a0:27:
35:38:e2:45:7e:c2:4f:b9:c8:77:9c:56:02:e9:7a:
fe:76:3a:f8:68:40:0d:68:c2:4e:17:a9:bf:61:77:
ed:c8:72:7e:ea:44:4f:0d:98:95:90:d3:28:a8:c5:
be:00:b9:a1:e7:23:a3:6f:23:56:5b:5a:39:17:52:
96:97:7b:6e:6e:38:1a:b0:15:df:48:12:cd:e3:16:
c5:b5:8f:9b:c8:8c:ab:92:85:8e:5e:6e:61:99:06:
97:3c:12:ff:49:3f:62:78:2f:46:8d:93:10:b5:05:
99:83:e8:fa:f7:24:73:3c:e5:00:10:eb:ff:76:dd:
42:85:8e:cb:42:a5:5d:69:25:b9:54:d6:60:ba:f3:
ca:bc:af:ab:82:e8:21:62:2b:17:da:df:f9:8e:a1:
d7:e5:2a:33:8d:aa:f6:85:77:2a:6f:1f:3b:ee:ba:
5f:b4:ab:a4:31:ba:a0:d7:d0:8b:56:6c:c6:c2:6d:
be:a1:46:f0:6e:13:43:f8:05:d4:77:a7:2a:cf:b0:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:D9:92:B3:07:72:6B:42:AA:2F:DC:98:91:FF:4A:87:71:1E:36
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:71:96:70:d3:a5:53:df:eb:77:60:15:ca:3a:6c:ff:26:
48:bc:a1:64:15:5e:9b:5f:58:a7:2a:f2:b7:13:35:b5:14:14:
4b:3f:41:3a:86:e3:9a:9a:12:6f:cd:f5:73:0e:42:f3:11:a3:
ff:41:bb:80:12:15:08:7e:6b:87:4a:4b:9c:69:e2:91:90:d4:
6e:3e:61:17:d2:ad:71:e7:bf:9c:8c:ba:61:05:20:cb:09:9b:
7d:d8:f8:14:de:36:0f:ad:bd:7e:48:f7:48:6d:7c:0b:0f:c6:
e3:7d:c0:d1:ce:74:7d:aa:46:a2:f0:e8:d1:d5:fb:69:ac:10:
20:ff:10:52:28:f4:13:c3:6c:24:ed:2e:44:f4:8d:6a:9a:38:
63:ef:a1:09:e2:f6:19:f4:0b:02:d6:bd:2c:c4:e3:af:fb:94:
24:13:8f:6b:58:c5:68:dc:fe:77:d8:e6:85:86:6d:c8:bb:9f:
08:b9:99:00:c2:5c:b7:8d:a6:24:62:15:44:51:f7:57:14:6c:
43:c1:2d:8b:43:71:08:47:c6:61:73:ce:5b:a4:03:0b:bc:2d:
4f:eb:c9:7e:55:b6:c1:7b:da:f2:2e:24:db:25:4a:cf:da:38:
e9:0e:19:46:83:db:4d:56:fc:1e:6e:85:00:61:dc:3a:7f:42:
2e:87:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:37 2025 by rpki-client