Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
File: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft (raw, json)
Hash identifier: zK+1XfvepVZFaojyG0RJLeFZNPbWS/3gfQ0Z20QAjh4=
Subject key identifier: 36:46:68:66:E0:73:F0:DB:06:F9:4F:0D:DA:6A:1B:DE:AD:50:BA:2D
Authority key identifier: 55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
Certificate issuer: /CN=5517c90523f5664180f71e3060dda23172e4cf75
Certificate serial: 0194BBCE42037A5ED3A66972A9BA15E8EE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
Manifest number: 0D00
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl (hash: 2YYo9YA8XhvWmxfT4Vi+JlZtoGdrLj3GJuym8PtPbmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:03:7a:5e:d3:a6:69:72:a9:ba:15:e8:ee:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5517c90523f5664180f71e3060dda23172e4cf75
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=36466866e073f0db06f94f0dda6a1bdead50ba2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:23:4f:f3:09:cc:c8:68:85:b0:b4:c3:2f:
11:95:c4:bb:34:ec:22:2d:42:6d:40:69:93:6c:e3:
39:d5:54:20:4c:14:84:33:d7:c4:d9:26:76:4f:c5:
50:e0:61:43:36:75:bd:29:d2:e2:0f:67:75:0a:45:
25:dc:ed:0b:08:ba:c8:1e:39:49:90:3b:e9:74:dd:
59:ed:6f:c3:33:2d:59:74:97:a7:46:d3:2e:e2:0c:
2e:d4:7f:fd:93:c3:0b:d9:a4:f0:3c:bf:ba:b2:0b:
f5:93:b8:24:a0:8c:9d:17:99:c3:8d:55:30:b8:c6:
14:29:bf:0d:19:6a:84:fd:3f:1a:2d:02:67:7c:da:
1f:78:63:e0:97:39:30:14:9f:c7:ee:c5:01:1e:d1:
ee:99:05:8f:5d:24:cc:4f:11:0a:6d:7e:fd:7b:ec:
be:77:5b:d1:53:88:b9:e3:71:fe:8a:b2:a3:60:6a:
18:0f:73:27:6e:13:65:52:eb:ea:a9:81:5e:a5:43:
44:77:3c:a5:ee:5a:34:2b:01:de:98:be:bf:3b:0e:
40:d5:36:d2:9d:e8:83:cd:03:1b:b5:22:c2:db:6d:
9a:b5:62:ae:4e:52:af:16:2f:ba:52:e5:e9:5c:c5:
cd:91:05:73:e6:16:49:ed:c1:0f:ab:bf:ab:27:15:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:46:68:66:E0:73:F0:DB:06:F9:4F:0D:DA:6A:1B:DE:AD:50:BA:2D
X509v3 Authority Key Identifier:
keyid:55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c3:a5:be:54:31:4c:66:5d:75:9a:53:6d:09:b6:de:09:b3:
ab:05:39:e9:be:f1:1f:1b:f2:cd:a9:fe:91:ef:5b:ce:2c:d8:
2d:90:4a:21:a4:51:47:ef:14:ba:38:c6:20:8d:c4:02:29:23:
16:cc:3d:68:86:d7:4d:2d:b7:64:1f:91:e8:f7:dd:1d:63:9b:
a0:17:30:c2:5b:de:57:d6:d1:09:29:7d:a1:ff:1a:44:7e:9b:
ac:ed:b1:91:13:9c:6c:8b:57:94:f3:fe:14:81:2f:45:fb:00:
bc:47:9e:d8:85:a7:cf:3a:68:3f:0a:88:12:ef:c6:ae:c6:af:
c2:6e:4f:d6:ca:1e:c6:5c:78:3d:76:e3:ac:4b:21:4d:ff:1a:
a0:97:a7:84:c2:26:11:68:0a:1c:54:ea:53:ec:bd:c8:cb:d9:
5b:57:9b:39:88:1b:8c:e0:94:0a:3b:82:6c:d2:4d:d4:77:e3:
2f:b3:e2:b5:f6:37:c4:f3:56:49:46:36:f7:b3:cb:9e:a6:80:
81:bc:93:c8:a7:16:f2:1a:c4:af:ea:b8:b9:1a:7e:88:b8:41:
b5:df:bc:eb:5c:86:65:f4:9e:a9:86:f8:74:d4:25:95:2c:78:
f0:0b:81:77:f8:37:85:2c:fc:a2:f0:3e:3c:29:5b:6c:94:fe:
6d:ce:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:31 2025 by rpki-client