Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: 6c7Ajsu32EbLuTbsbrz6vuIkHUaJkG+0bZZhoLh3Qes=
Subject key identifier: A7:A3:3E:E2:70:1F:E9:69:90:FA:C5:9B:3C:1C:02:36:23:9E:DB:CA
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 0194BC729783DECCDB8897DC262221B9AAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 0242
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: 3sgz3rjwUDORWidwD3sFDfQTAwxVMxCUG7Ud0yviRls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:97:83:de:cc:db:88:97:dc:26:22:21:b9:aa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=a7a33ee2701fe96990fac59b3c1c0236239edbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:64:c0:99:b1:20:a0:c3:d3:b6:ea:33:0c:
56:3a:5f:09:67:06:11:0f:84:59:07:b2:f7:34:90:
2a:c1:21:31:e5:c9:dd:e3:34:d5:a5:ec:c0:6b:0d:
7d:f1:0f:5f:89:2b:cf:0b:1c:28:53:72:ae:29:22:
20:b0:7f:79:b2:af:fd:b6:13:ff:74:9c:88:31:38:
47:1d:cf:67:71:da:e1:a9:1c:aa:d2:3c:5f:61:ee:
ba:ba:a3:fb:ac:1c:25:f2:0f:a7:d9:59:41:de:4c:
1b:af:b1:46:6b:a3:a8:89:ec:8b:27:f1:4d:b9:0c:
e2:e4:77:6f:e3:90:6c:b1:dd:6f:b7:ce:a0:ca:41:
e5:f7:0a:f6:04:e6:e1:7d:40:07:d3:d3:ad:54:60:
e5:86:f1:36:9f:3d:ca:86:65:65:d8:0d:22:fa:ff:
00:9b:50:89:75:2b:17:a0:11:a1:f5:41:ca:2a:c9:
fd:66:39:50:2f:82:86:79:dd:6f:9a:f7:0e:6a:89:
50:ae:a5:51:56:a5:77:54:7b:62:cf:8e:cc:a8:03:
ff:56:40:41:80:bf:5b:c1:3d:dd:7b:e3:89:0d:c1:
aa:b4:18:ed:6b:5a:a2:04:e0:da:0c:b7:d6:93:6b:
ba:b4:47:7a:1e:d1:98:82:39:2c:1e:a4:83:93:b4:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:3E:E2:70:1F:E9:69:90:FA:C5:9B:3C:1C:02:36:23:9E:DB:CA
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:28:44:f7:8b:0d:9b:e0:e5:e1:06:af:19:f3:4a:9a:3c:
e0:0b:c7:b3:2f:a0:8f:14:0a:0b:45:1b:02:24:0a:b9:65:70:
f0:fc:f9:87:9c:87:36:de:bb:e3:ec:eb:de:ab:91:60:3a:df:
98:05:22:58:1e:f5:28:c3:87:11:21:c9:99:0d:2e:b0:44:2d:
9f:a1:ec:df:0c:b3:86:dd:6d:c0:0f:fd:11:32:ce:6a:b5:22:
2e:d8:36:19:51:91:49:ef:ab:bf:35:a5:62:fb:52:00:60:49:
c0:42:c0:8c:90:58:39:d1:14:b8:0e:91:4d:8d:cc:e7:19:b7:
ac:8b:42:77:fe:ce:05:41:cb:ce:b5:8e:52:db:b4:0b:1a:36:
88:7d:47:5e:65:3c:a7:1e:ab:92:d4:49:f6:04:e6:9a:d3:63:
85:01:82:74:c4:0a:48:a1:df:8e:77:80:c8:b4:e3:9e:1d:0b:
67:42:d8:35:2b:a5:00:24:d8:9f:9d:20:e9:2e:95:ee:a0:fe:
18:03:58:27:e9:81:ad:10:93:d4:3c:0c:88:74:1b:18:5c:ee:
73:d6:b0:bc:f9:57:27:26:be:3e:d5:24:b1:85:3e:93:30:2c:
5a:7c:40:3f:76:0d:3d:ca:6f:9f:f0:fe:29:b3:80:54:a6:88:
19:80:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:51 2025 by rpki-client