Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: 2BwqQwelmjH2eGcbZZAdVAB++PDgtu1EoORnFYivbsU=
Subject key identifier: 74:BB:53:FD:CF:87:1C:BF:D6:92:D1:2D:E7:39:65:CD:BB:6C:14:8D
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 0194BBCEB16815A809883C9460E6A8F271EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: sP9VUn0BLBjMTsSanadaXCLPwee9OBCv5nGD6L+UgIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:68:15:a8:09:88:3c:94:60:e6:a8:f2:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=74bb53fdcf871cbfd692d12de73965cdbb6c148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:97:3f:a2:ea:13:d4:1e:d2:09:7e:60:d4:
62:ed:86:fa:07:85:b3:e3:48:8a:91:17:89:2f:1a:
2b:b0:e7:c3:01:05:11:a8:0e:f7:ac:f0:48:95:57:
ae:bf:78:9c:b1:54:4f:22:fa:07:b8:79:d5:38:42:
3c:42:f0:c3:f3:7a:c9:1d:80:5d:62:1f:fb:3b:f0:
1b:4c:b6:98:32:18:41:f5:37:2e:5a:36:4e:d2:55:
c7:c7:79:b1:ce:39:27:aa:47:99:e9:a1:4b:f6:d4:
58:51:d7:84:73:60:8c:bf:07:83:30:cb:6a:7e:0e:
e0:6e:84:57:0c:db:19:6b:93:5e:76:c3:0f:b9:fb:
0c:5a:f9:54:f6:e3:29:d9:9f:8b:1b:07:b1:14:59:
61:36:cd:6a:3c:39:f4:80:6c:dc:e0:67:ad:8a:90:
83:33:4c:b1:70:07:66:63:34:f1:a6:83:ec:a9:9c:
82:51:fa:e7:2b:f3:b6:44:47:b8:4b:f6:03:3b:1d:
c5:9c:68:2b:71:86:c7:5c:89:05:8d:04:9d:e5:08:
f8:7c:3f:38:13:72:26:bf:5c:a5:5a:ee:05:78:c4:
a5:a4:8b:49:0a:08:19:5a:22:11:2a:15:a5:78:11:
da:62:43:4b:d4:3f:6c:75:25:55:63:e2:a4:17:3c:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BB:53:FD:CF:87:1C:BF:D6:92:D1:2D:E7:39:65:CD:BB:6C:14:8D
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:99:25:50:14:82:4d:d8:42:9e:2a:71:9d:6d:41:ff:f1:d0:
54:75:c3:b1:3a:5a:04:a5:74:6a:01:01:fe:45:7f:62:fe:81:
89:53:fa:05:2c:f5:c5:8c:0c:41:ad:cd:cb:63:8a:9e:8e:fc:
60:87:48:b2:b4:c0:6a:2b:6b:74:48:29:fa:96:64:a6:73:dc:
ec:5e:53:5e:ef:36:6f:c7:46:ff:22:6a:07:f2:54:e3:a8:c4:
41:43:be:4c:bb:6c:29:b7:8b:58:f3:68:d5:82:7b:cb:da:78:
eb:6d:42:52:92:33:f3:81:55:41:bc:f4:3c:1a:6b:df:b2:ba:
50:5a:41:7b:7a:d9:b6:22:b9:a1:03:d7:98:e8:95:02:58:12:
57:87:c6:63:78:28:f3:fb:5b:dc:7e:03:9b:9f:19:e1:9e:bc:
cc:78:e4:38:66:26:3d:9a:46:04:70:7f:90:b1:ce:6e:8a:8d:
dd:c1:cf:f9:e0:e1:2a:cd:da:ee:b4:c8:80:84:f3:13:d3:dd:
d6:d2:f0:1c:6a:7a:67:ce:19:ea:c6:29:bd:43:e1:69:3b:74:
3d:74:72:e6:0a:4c:b7:34:a9:7a:71:0d:de:45:ba:ae:54:4a:
2b:46:20:5b:e7:5c:a5:00:49:41:79:46:af:5c:fb:51:88:12:
bc:3b:fc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:46 2025 by rpki-client