Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
File: vFxHuPnkKkkot2dDFqcap21AHjw.mft (raw, json)
Hash identifier: t9Npn2auDrpj3PKAcn9h5iQCRO1QrmX21UOrbIBOIrI=
Subject key identifier: 67:B9:78:E7:95:EE:41:99:49:35:4F:38:A4:37:CC:F7:97:00:A6:AD
Authority key identifier: BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
Certificate issuer: /CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Certificate serial: 0194BBCF056DF19AD166A8EE77AD4A4F62C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
Manifest number: 09BB
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: vFxHuPnkKkkot2dDFqcap21AHjw.crl (hash: FpSnxcYiCOXqUfDTFAHr63gQjshURnWTR2NsXq40J8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:05:6d:f1:9a:d1:66:a8:ee:77:ad:4a:4f:62:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=67b978e795ee419949354f38a437ccf79700a6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:d8:c2:73:72:33:a8:6e:c6:be:aa:c8:ed:
a1:88:f3:8e:7c:ef:d2:b7:8a:d7:62:ca:59:d1:ef:
98:09:4a:d3:30:18:a7:b6:18:dd:dd:ca:37:c5:10:
75:9e:bf:b3:0c:16:74:63:3e:d0:53:42:84:f7:e5:
9b:cb:57:b9:32:99:b6:cb:56:63:56:aa:5c:7c:a3:
31:3a:7b:ae:8d:b4:ec:56:e1:7f:e1:db:df:18:47:
9e:6f:93:f8:4b:05:76:55:5a:6d:b8:8d:4a:39:a4:
24:75:6d:14:33:62:f2:a2:c6:e8:3c:a2:68:ac:a1:
3a:29:0b:f2:8a:a5:74:10:40:d9:39:41:f9:9a:32:
c4:7e:70:26:aa:a0:4b:7a:44:6b:98:60:7f:b0:2b:
be:93:bc:3a:42:66:1c:04:6b:79:d1:6d:fd:2b:f4:
47:88:39:85:62:d2:66:cb:5f:dd:83:fc:3c:e8:48:
71:33:05:3d:07:07:40:ee:69:57:a7:b7:ad:f2:fe:
24:90:2f:e8:89:55:f4:04:74:8d:a9:11:1d:c9:c5:
51:7d:5d:20:6c:2a:f3:4f:8f:61:92:ed:2e:90:d5:
4e:74:6a:59:2f:0d:ca:04:b4:06:8d:74:fa:cd:6a:
79:6e:6c:3a:bd:86:d1:42:91:61:ae:d5:2e:e4:0b:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:78:E7:95:EE:41:99:49:35:4F:38:A4:37:CC:F7:97:00:A6:AD
X509v3 Authority Key Identifier:
keyid:BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:14:f2:91:7d:19:18:19:d5:e4:34:1b:c6:20:bc:01:e8:eb:
c3:62:c3:b3:02:1d:63:29:0c:65:77:4a:e3:5b:8a:ca:ec:c7:
76:c3:d7:27:2e:46:25:d8:76:b6:9a:44:e4:26:5b:c3:d2:83:
ee:a5:d0:87:55:5f:8a:00:60:d1:00:cf:e9:9d:29:4c:00:ec:
68:ee:91:c4:2d:41:c2:70:4a:94:af:9c:89:5a:fc:5b:50:3e:
34:49:7d:86:7d:9d:66:4c:be:c6:ec:9d:2f:e2:54:ef:30:27:
77:ae:2c:a8:91:bd:92:06:99:f9:61:e4:e0:73:4f:b0:88:85:
95:21:5f:2d:cd:70:6c:ab:3a:7a:3e:25:b8:fc:49:b5:23:c9:
87:ee:82:18:6d:78:4c:6d:e6:99:90:2a:97:33:88:b6:30:84:
6f:5c:b1:54:05:fa:d9:54:f2:e7:f2:f0:d3:c4:16:df:d4:73:
45:92:82:65:4f:25:33:61:11:c4:09:6e:eb:7a:7b:d9:21:1c:
a9:d8:20:9d:7a:b5:57:d9:f7:bb:49:10:25:47:65:f1:03:80:
ed:9d:27:f9:a9:eb:5b:4e:17:85:d3:c9:d9:97:cb:53:39:36:
38:55:0e:85:79:04:1a:4b:01:a9:6a:8b:d8:17:8b:ae:f2:3b:
b8:fc:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client