Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier: JXTTezwv8PtZ7Jm1Ag/0yR7Ii9xe7p6xKM0bEP0und4=
Subject key identifier: 0C:28:B9:EF:21:C0:0E:0D:95:9E:24:A6:63:DA:8C:D4:11:B9:13:38
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 0194BC72A6B30D8CCD38568C1C64F3B5EE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: no9tiDl3/RV3DqDQPqrq0xYLBejgsacJJ06Ougozm/Y=)
2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a6:b3:0d:8c:cd:38:56:8c:1c:64:f3:b5:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=0c28b9ef21c00e0d959e24a663da8cd411b91338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:15:e6:8c:8e:be:5e:75:b3:bb:b1:b2:4c:
93:83:87:74:49:ba:df:1b:38:14:81:b1:a3:40:04:
17:80:01:2f:84:71:d5:37:bb:41:82:16:76:e9:70:
1e:ec:41:90:81:b6:75:1e:69:63:d8:52:7b:e8:a6:
92:8a:c8:c1:13:41:06:72:3e:1c:98:b8:1d:24:be:
24:29:32:aa:8f:a6:6a:73:04:93:4b:05:f8:3a:f8:
0a:00:ec:be:f2:d8:a8:65:78:09:99:34:fd:0e:8b:
b4:89:14:27:3a:17:2c:46:60:ce:81:07:5b:d2:43:
b4:40:02:1d:2a:75:e8:b9:a8:dd:f7:f1:1e:f3:de:
67:25:24:a6:20:ca:18:dd:77:af:5a:23:74:85:9c:
6b:47:0c:af:37:ec:5f:c1:bc:24:d3:07:d2:30:7e:
f5:c9:f5:44:51:77:52:94:a2:b9:d7:ca:04:90:cd:
72:60:91:88:6c:42:2a:e5:3a:4a:15:85:50:2e:43:
bf:2c:1d:83:6a:b9:f8:21:03:75:d9:9a:a8:f2:81:
f1:89:76:a4:0c:d9:f6:05:cb:33:a8:d0:ce:e4:8d:
12:36:75:94:49:34:ef:92:5e:1c:7d:5f:ba:49:63:
10:cf:e4:c4:62:7a:d7:7e:ae:c4:71:41:24:32:16:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:B9:EF:21:C0:0E:0D:95:9E:24:A6:63:DA:8C:D4:11:B9:13:38
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:35:ef:84:46:e1:10:ae:3e:66:f3:cf:45:9c:80:b2:3d:33:
19:4c:2b:9a:01:65:b9:66:8d:f9:2d:7e:e9:8b:d7:ce:94:60:
18:a1:9e:df:ed:2e:b1:34:b3:cf:78:3c:92:a3:96:b1:11:f5:
63:2b:bc:61:43:e4:75:fd:33:9f:95:c5:b3:d7:18:a9:41:47:
24:86:b4:cc:b2:66:18:60:bb:69:b1:02:b0:6b:7d:b8:f3:46:
c6:62:85:2b:77:8e:55:ea:63:b0:9a:8a:5b:93:c4:b7:ff:86:
8a:9c:f9:4f:22:e6:6f:5d:33:8c:47:f2:c6:67:fc:c6:53:db:
5b:e0:56:19:91:6e:08:87:ad:9f:5a:c4:0c:d2:5a:78:81:1d:
a2:48:4b:04:8e:fe:76:74:69:2b:28:84:70:29:0a:17:e4:ca:
6e:62:5e:07:96:2a:cd:40:22:62:ec:ac:2d:7e:4d:04:66:ed:
13:92:d6:77:b9:4a:05:4a:26:b1:c4:da:e8:d9:35:7a:d6:bd:
13:4c:95:2c:ad:61:1d:59:be:2d:d0:15:e4:4d:86:ab:08:d1:
57:eb:43:34:5e:e2:0a:86:ae:cd:73:e6:f4:be:ef:78:ec:b3:
fc:56:22:c4:cb:f7:6e:cf:e7:85:35:2e:46:f4:08:4e:d9:55:
4e:1c:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:25 2025 by rpki-client