Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
File: vNgzeodIrlhibqk9my9YmNAY3fE.mft (raw, json)
Hash identifier: poTeiXZHZcYSmfctq+ygifRLKFyiWAtQz7B1/3wcSKA=
Subject key identifier: 4C:0D:3F:BF:F7:AA:1C:78:CF:5C:86:CE:34:7E:14:8B:36:CA:06:F7
Authority key identifier: BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
Certificate issuer: /CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
Certificate serial: 0194BCAA577A00B794D7B39099263BAEF910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 14:01:07 +0000
Manifest this update: Fri 31 Jan 2025 14:01:07 +0000
Manifest next update: Sat 01 Feb 2025 14:01:07 +0000
Files and hashes: 1: vNgzeodIrlhibqk9my9YmNAY3fE.crl (hash: 8RkeEr3MGIlUMNbtfQ8PR0pjs7Ffw7QsFqH0aEADwWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:57:7a:00:b7:94:d7:b3:90:99:26:3b:ae:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
Validity
Not Before: Jan 31 14:01:07 2025 GMT
Not After : Feb 1 14:01:07 2025 GMT
Subject: CN=4c0d3fbff7aa1c78cf5c86ce347e148b36ca06f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:d5:5a:bd:93:69:b7:cd:81:12:96:96:3a:
83:ec:4c:14:fb:36:a4:45:51:f3:16:70:7a:74:de:
5b:fd:4b:15:c5:b9:e4:86:98:56:53:a2:cf:1f:fe:
64:dc:a9:a8:df:3d:72:69:44:07:bd:be:9f:e4:16:
03:40:27:6e:75:3d:b3:5f:85:85:eb:32:63:14:ee:
5f:04:8a:cd:8c:8b:02:33:1b:65:50:07:f6:ff:1f:
1c:9a:21:7b:ef:5b:b4:f8:df:9a:aa:75:0e:ce:75:
e5:32:41:75:4d:00:bd:bf:e7:ef:13:3d:3c:cd:f5:
a5:78:17:f8:eb:de:88:a0:d7:42:9d:82:28:44:9d:
c8:f9:f3:6e:b9:66:a1:3a:9c:6b:c8:76:8d:f1:0c:
79:60:b6:79:d2:6d:df:00:46:a2:c7:d3:8a:1f:50:
a4:0c:c8:32:d1:ba:68:ab:59:4f:29:6c:b0:4f:c4:
7e:90:9a:1b:fc:39:b9:59:41:ec:41:45:e1:0c:c6:
97:b1:cf:4d:b0:27:55:79:e8:a6:7c:84:cf:aa:7d:
d5:f0:d5:92:29:af:f7:76:b3:57:8e:12:3f:29:6f:
df:35:94:26:b8:5d:08:d0:5e:d8:df:7d:c4:5e:97:
8a:8f:a2:fc:cb:9d:e7:99:d6:20:dc:b6:35:4f:5f:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:3F:BF:F7:AA:1C:78:CF:5C:86:CE:34:7E:14:8B:36:CA:06:F7
X509v3 Authority Key Identifier:
keyid:BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:f7:cc:03:df:9b:8b:d1:15:6f:12:c2:e5:b1:41:7c:5f:
32:6a:a2:83:c8:7f:94:05:bf:5d:f5:2e:17:b1:94:26:37:71:
17:bb:78:63:f2:d5:af:69:a7:6b:98:df:cb:26:4e:7b:f0:f8:
8a:00:bb:aa:17:79:a4:a4:c8:44:20:f2:f9:45:32:04:b5:29:
58:74:02:f6:b0:0c:e5:16:36:fb:ea:9b:3c:73:53:c7:30:31:
a6:e0:76:6c:58:06:46:6f:a6:b8:f2:4d:83:c6:61:48:89:d1:
5c:48:fa:b4:68:b8:fa:4a:50:8d:24:b4:0f:44:5f:aa:09:79:
1e:1b:b9:ec:ad:bb:4b:fd:99:f6:de:5a:15:f2:e4:25:bd:36:
f0:71:b2:0f:86:c5:43:4d:dd:b7:18:a4:db:61:60:92:e7:53:
ca:5e:c5:4a:74:8c:88:b9:81:be:78:dd:52:0d:fe:bc:91:9a:
07:63:72:d5:47:29:9c:74:23:08:8f:a3:a0:82:55:60:08:c1:
22:6d:8d:6b:8d:d9:d3:13:36:2b:78:c1:8c:49:2f:ca:41:41:
91:ca:07:db:34:da:05:ac:33:a2:56:30:10:7d:04:46:a2:b9:
9b:cb:9d:1a:55:6a:4c:0b:aa:f9:45:fc:b1:b4:42:d8:93:7d:
6c:a6:8a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:02:51 2025 by rpki-client