Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: D2inGHbHgdbftlXehq9ocUx4bW0/AkGCMaHBwAVXQfg=
Subject key identifier: F6:AC:5B:B7:E3:8D:E0:41:51:17:5D:3B:3E:84:CB:C3:13:0E:33:1C
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 0194BBCE3304D86C798322E1F194F45E656E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 0DD7
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: 963HZxg5oABdk94gX+1vS9HVePaGkd40rx6fjzfVf2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:04:d8:6c:79:83:22:e1:f1:94:f4:5e:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=f6ac5bb7e38de04151175d3b3e84cbc3130e331c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:51:56:35:2c:df:ba:f8:e3:67:e0:ff:63:
9c:a1:e2:50:57:71:20:b2:11:b1:11:3f:48:d0:7a:
fb:95:3e:2d:2f:a5:07:39:95:df:0d:8e:bb:14:d0:
b4:8f:8d:70:35:08:22:bb:f3:0e:93:ea:78:7a:2e:
bd:dc:04:ea:53:11:ae:3b:26:51:76:2f:7d:7d:b6:
7d:13:6b:35:74:04:b4:19:95:21:09:d5:a7:64:37:
90:41:59:46:3d:5b:ec:75:9b:ae:3b:8d:a2:e9:2d:
10:00:6d:a4:b7:55:38:ab:f4:ad:3e:f7:cf:f6:2d:
9b:5e:ef:16:3d:59:a5:d2:af:e0:58:3e:ad:38:d9:
78:00:e7:07:29:1c:af:46:f4:ce:af:37:e5:ec:e3:
77:fc:11:38:56:61:26:0e:29:5b:fb:3d:3a:02:73:
43:bf:42:f0:dd:cc:46:25:91:a0:0e:9c:ad:07:4f:
8b:ed:f0:7f:41:f7:40:a1:7f:c2:00:b6:75:1a:36:
11:55:0d:52:e6:5c:69:b3:a1:8c:7f:be:2f:1a:6e:
34:ba:c5:d8:0c:b8:99:dd:22:ed:5d:16:53:d5:15:
3e:d8:06:74:ef:4d:a6:38:cc:23:35:e0:12:d1:3c:
4d:2f:8d:a1:40:c6:3c:9b:fd:fc:79:5d:da:ac:43:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:5B:B7:E3:8D:E0:41:51:17:5D:3B:3E:84:CB:C3:13:0E:33:1C
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:11:dd:70:5d:bc:63:0b:9f:fd:05:f5:cf:ca:7b:fa:2e:34:
7c:e7:d5:9d:8f:c8:b3:b7:27:df:ef:6d:e3:3b:12:63:42:0e:
d8:c4:b8:1b:11:5f:e8:d6:d1:91:40:31:bf:04:10:72:df:3a:
c3:30:08:a7:9f:e9:ae:a7:10:98:2e:92:b1:ce:62:ae:6b:ce:
53:1f:03:63:e2:a4:44:b6:36:19:76:94:24:45:2e:3a:cc:b9:
04:ea:24:ca:c2:d6:09:87:39:f3:6d:e6:fb:fe:f8:e0:17:a1:
69:9d:fd:99:9b:b1:0b:e0:3b:b5:6a:9c:b0:9e:76:1a:35:a2:
e0:45:6e:2d:79:6d:12:62:fd:e4:a3:94:44:be:15:ab:23:ab:
dc:de:fa:46:8b:b1:62:01:89:f4:d6:6f:f5:d0:f7:21:0e:0b:
b6:1c:81:b0:81:63:c6:1e:45:90:7a:e4:f8:6b:27:2f:89:ca:
ae:41:20:f0:07:64:03:65:16:b8:e8:e0:ce:94:32:87:d7:29:
d2:50:c9:c2:f3:c4:b1:66:4f:1b:f2:3e:1f:b1:f7:b5:7e:3f:
15:5b:a6:08:2c:c6:37:42:9c:c8:a4:54:c1:18:1a:38:de:17:
f3:03:54:bf:f7:e5:49:23:cd:33:5a:c7:72:02:e4:b8:6e:a7:
23:b6:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:06 2025 by rpki-client