Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: Kz038O8v7wMYoPKBCMzBVYCsFWprMxf5/bsoaMMlInM=
Subject key identifier: C0:74:5C:32:63:6F:6F:36:4C:CA:83:31:D4:20:B1:60:0D:64:81:87
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 0194BBCE801B2DD452B54B5F0EE225DE3157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: yIJ72efmOGtF5eD04SizqUwtsY+7/blTImTJoSJZ7vU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:1b:2d:d4:52:b5:4b:5f:0e:e2:25:de:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=c0745c32636f6f364cca8331d420b1600d648187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:8e:c4:b2:8c:79:51:b6:4b:84:58:e1:ca:
fd:fd:78:26:cd:91:70:2c:88:54:b6:c6:1f:17:26:
70:73:79:0b:57:bf:be:58:03:9c:79:29:10:45:e8:
aa:e4:b5:ec:e5:e2:5c:fc:4d:0a:0a:86:2d:66:ba:
f1:00:13:b8:2f:60:93:3c:cb:3f:78:f1:b8:8c:ea:
a8:f5:07:a4:14:06:dc:ef:19:9d:1c:a1:0c:96:e8:
59:dc:65:60:8f:ab:f6:49:2a:89:a7:82:d6:49:82:
5d:96:75:0c:49:b5:86:c6:2f:9a:99:c5:ae:74:28:
64:bc:75:b6:6e:dc:f7:aa:19:a5:8c:0c:29:4c:31:
bb:70:13:c7:d5:70:6a:2f:92:53:8a:97:e2:4a:4a:
87:e7:3d:32:79:a5:1b:71:58:c6:ce:0e:d1:6a:09:
87:5f:28:cd:14:46:d5:d9:06:db:2e:89:59:e6:89:
14:e6:96:c6:ed:d4:09:5c:9a:84:36:39:26:9c:74:
8b:a7:13:54:67:9f:4f:d5:69:8a:53:b3:a5:d9:0b:
29:93:2d:6c:02:3f:33:35:74:8c:5c:c8:82:24:d0:
b3:28:f8:86:d2:c3:75:9c:2c:e2:8d:53:7a:d4:89:
d0:3d:31:94:63:79:fe:52:06:7a:fa:87:e0:8f:34:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:5C:32:63:6F:6F:36:4C:CA:83:31:D4:20:B1:60:0D:64:81:87
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2b:2c:01:50:5d:1a:1f:f4:78:02:da:24:cc:30:89:af:01:
87:3b:df:f5:49:23:48:eb:40:e1:df:06:d3:48:4c:0d:e9:0d:
ad:e2:56:f0:dd:16:f2:b8:07:17:17:1e:2a:68:70:fa:f8:3c:
f7:54:13:46:f3:13:af:bf:69:7f:58:59:55:11:8a:ff:7d:6b:
a6:56:08:92:d5:e4:ee:ca:df:7d:9e:dc:50:3a:44:03:cc:98:
df:01:15:f5:6f:43:46:f1:f6:8f:93:10:9f:ef:c4:c5:ce:b5:
f7:ad:12:41:84:2e:b1:26:d9:bd:59:0d:71:02:cd:b5:14:4c:
f6:21:74:92:19:0d:ab:37:37:11:52:76:bd:5a:d3:91:51:18:
ee:dd:32:41:b8:9a:7a:6c:c8:b8:e1:51:37:7b:02:8d:18:5f:
7e:f0:40:27:58:ba:f6:0f:d1:33:50:c7:5c:ef:b1:aa:75:67:
98:ad:6d:ed:b9:f0:22:d9:fb:af:f6:ca:fb:99:ad:72:b2:cb:
30:f7:bd:f9:e1:00:00:eb:d9:51:01:e6:56:2e:6a:95:c6:e4:
6f:1d:b9:ab:a1:44:86:af:3e:f3:c2:94:98:3a:24:5c:8e:44:
f9:1b:4b:8e:2b:26:c0:f4:59:c4:7c:d2:b9:f1:69:c1:d8:69:
5b:ac:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:45 2025 by rpki-client