Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: PcfYia8FMiPDeeWvlIiKtTbNBignAphE3iBBEayZBD4=
Subject key identifier: 3B:22:04:7B:B1:C4:B0:34:FF:5A:69:C8:7E:E1:8A:AE:5F:CD:2B:CB
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 0194BBCEE19E2A337647A18D62B3CA1C8287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 088A
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: DxoRjvJYqJV1u8XpYo4t3mtJVROQ/JUmMMA4x+0UBqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:9e:2a:33:76:47:a1:8d:62:b3:ca:1c:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=3b22047bb1c4b034ff5a69c87ee18aae5fcd2bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:cc:96:03:52:28:67:57:9b:4b:7c:c9:d0:
0a:9d:66:c1:eb:87:4d:d9:13:ad:d9:b5:b8:a6:4c:
05:84:84:44:66:06:d1:9d:1b:f0:f3:69:e7:1e:7f:
ba:75:ec:c2:04:df:a1:2b:f3:cd:e8:dc:82:67:11:
52:16:95:c7:59:bb:90:a8:f1:2e:20:ae:b6:87:b8:
de:5f:9e:f3:7a:33:ca:82:37:aa:8f:2d:05:85:37:
ec:b7:09:aa:e9:d5:6b:09:bb:de:b3:d6:aa:df:3d:
b6:f3:71:d6:ec:46:16:f1:db:24:e1:5a:ad:84:a7:
9a:17:79:a8:57:32:1f:c2:52:f9:7e:c3:7f:8e:be:
8a:6f:53:32:5e:fa:ca:05:e7:45:74:87:44:ba:ae:
69:0f:08:2b:56:99:80:81:4f:f8:fc:e2:de:29:79:
a2:d6:83:13:93:0f:e8:5c:5d:75:c3:b7:36:d3:5d:
da:54:4b:16:43:ba:cb:04:5d:6d:51:af:fb:36:fc:
9c:f9:1c:c1:19:34:f8:55:d3:aa:be:5e:ad:ec:44:
8d:cc:48:ce:a9:ac:23:6a:1d:a8:58:59:d9:c6:07:
5a:92:f4:88:5a:45:c2:02:1d:0c:79:36:76:a0:82:
0a:fe:45:bf:bb:5e:57:38:20:1f:7f:09:3f:27:24:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:04:7B:B1:C4:B0:34:FF:5A:69:C8:7E:E1:8A:AE:5F:CD:2B:CB
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:48:88:89:f4:55:eb:b1:6c:55:c5:06:96:02:4d:c3:a0:3a:
3f:68:fa:20:a5:a4:0c:84:80:22:46:0c:3e:f2:d1:6e:5e:c3:
bd:05:92:ab:4d:ba:e3:91:63:1e:58:4a:86:88:1b:26:c5:55:
f1:b3:e9:42:98:08:c9:6c:08:79:d2:c4:2c:43:49:56:74:ea:
66:8c:9a:48:00:5e:ad:4d:55:c5:78:6b:b8:b3:cf:62:99:af:
ce:5a:98:07:32:5a:b9:d5:59:0e:d4:58:e1:7c:7e:b3:fc:4e:
83:30:01:6a:76:e7:8c:39:d8:a6:36:f9:f1:0a:1a:36:74:38:
94:7b:27:be:a6:bd:38:78:82:99:d2:2e:56:7d:99:e9:27:98:
91:bc:30:e6:04:d5:b7:82:90:4a:07:be:29:46:06:df:dd:ca:
d6:92:94:97:f5:7b:52:c5:96:e8:d7:8f:d6:ca:cd:fc:07:ec:
a9:b8:79:af:67:b1:4b:89:30:07:37:49:d4:0b:fe:8f:7b:22:
9f:61:21:a9:dc:4d:ef:f8:ce:e0:f6:7c:9b:94:e6:1e:4a:62:
02:12:2a:79:41:57:32:18:38:23:46:8e:d9:37:99:38:e2:ca:
47:42:b4:ab:b9:3d:c5:ef:3c:32:f9:90:94:0f:48:30:cd:0b:
a1:32:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:16 2025 by rpki-client