Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: iALCa6dHemFczTdrF8b3sa/kpxVWHNlbUMiurAa/7j8=
Subject key identifier: 93:F3:91:06:C8:11:3E:3B:74:E6:5E:13:E6:3A:6D:59:DF:C6:AF:44
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 0194BCA9A777064EDF7F170910F18A633B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0A2B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: tq2y/ZDpTqSvzfpYjsu4WJ88q3E1jIT4REUjwMT8s5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:77:06:4e:df:7f:17:09:10:f1:8a:63:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=93f39106c8113e3b74e65e13e63a6d59dfc6af44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:4b:4c:0e:9c:57:01:a5:7f:c4:64:d1:03:
9d:b2:59:8d:ec:ca:6d:4a:8f:d8:99:19:01:58:ad:
ad:07:4b:4c:c4:97:0c:6f:ed:99:76:f6:cf:90:6d:
f3:7f:fd:61:f0:e7:0e:1f:8b:5f:75:4f:69:52:cd:
59:1a:96:93:71:35:06:f0:cb:cd:48:8e:10:bc:9a:
b1:14:b1:3e:15:21:f0:f5:45:ac:05:0d:ad:e1:39:
00:52:06:75:c3:9c:d3:30:37:41:83:7a:5f:ef:a7:
a9:f3:ab:2c:99:1e:de:42:e5:b7:15:c8:df:7f:44:
ca:26:0e:b1:e1:ae:1f:bc:83:bb:d0:61:4e:f4:1b:
a6:b2:d1:05:fa:91:47:ce:b0:f3:b5:bb:c0:78:4c:
e4:e3:57:7a:fa:ca:03:c0:8f:eb:b4:e3:16:09:02:
e0:3f:78:8a:9f:18:87:b9:ad:e9:ba:aa:9e:82:18:
05:d6:0b:84:69:cf:ea:de:14:59:20:cf:26:54:9b:
51:4e:82:ad:c3:19:28:0f:f8:19:67:62:72:de:80:
38:ac:01:e7:99:d5:25:56:49:0c:b8:01:3a:d7:0b:
84:f5:ce:d8:12:d4:8c:d9:f8:9e:09:82:11:5b:46:
fb:cf:d8:6f:99:bb:ba:2a:66:1e:1b:98:31:ef:56:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:91:06:C8:11:3E:3B:74:E6:5E:13:E6:3A:6D:59:DF:C6:AF:44
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:27:ac:fa:a1:f0:97:86:47:24:2c:bf:11:78:2d:6c:1f:
74:51:42:7b:28:e8:f5:5d:25:8e:d7:3b:55:8b:68:0f:ed:91:
46:cb:1e:43:7b:20:86:75:ed:84:32:1d:5b:a2:b6:7e:d6:b4:
44:f5:89:bd:19:f5:d5:38:c0:3c:3f:b1:e9:a7:25:55:8a:21:
68:2e:27:75:4d:c8:c3:5d:05:c2:ee:86:a0:0d:40:35:2b:db:
d2:6e:ae:4b:1b:50:3f:94:e7:59:a0:f6:e7:fe:ce:5f:f1:31:
e7:82:b3:37:b1:10:aa:6a:4b:30:95:2f:30:6e:1e:63:09:93:
11:69:ec:8a:cd:5b:9d:0f:14:ae:79:53:6c:7e:e4:af:97:2b:
17:50:dd:96:87:01:99:b4:e0:d2:64:d3:57:6f:4d:08:23:9e:
4d:79:f5:47:14:10:f8:9f:70:70:d8:db:81:87:fc:fa:9b:26:
93:69:91:38:c1:7c:f3:d4:ca:c1:a1:65:37:56:38:00:64:29:
21:0c:fd:38:8b:ad:79:53:4c:9d:36:5b:67:a5:3e:94:6a:5f:
0a:71:4b:c4:5b:cb:d6:41:eb:52:d8:5f:86:2f:0e:2f:69:a4:
35:56:27:35:3a:6a:f3:af:d2:6e:0d:39:4c:c8:20:90:fa:f8:
fc:b4:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:56 2025 by rpki-client