Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: u8EIjIWOhFkfbvzFps5j/+c1VtF2tj6FxfHut1k3r+4=
Subject key identifier: 42:55:06:71:12:55:37:A9:15:92:EC:1F:32:05:3C:68:AA:8D:D7:D3
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 0194BBCE5D7C95583BC3A9F5020F9B63CE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 06C2
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: BucN38F3p1jPaaGkzQxcHFHsvbGmhKjFhDv/0XZY9aQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:7c:95:58:3b:c3:a9:f5:02:0f:9b:63:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=42550671125537a91592ec1f32053c68aa8dd7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:64:51:ae:e8:52:7f:5b:0c:5e:b1:75:0b:e6:
09:e2:a7:0f:94:e1:50:86:ae:6d:00:61:b2:7d:94:
b3:d6:b7:12:ba:ae:a8:b6:61:61:b0:c3:8f:41:02:
03:95:f5:51:3b:fa:43:10:b0:08:e2:f0:6b:ca:87:
d1:21:11:3f:c4:a3:a9:e8:b2:19:95:58:79:ba:c2:
22:25:6a:37:ac:94:10:c0:d3:be:dd:e5:10:75:7e:
43:c5:7b:a3:ab:98:01:d9:13:05:ad:a0:24:68:a3:
04:e4:3c:d7:ee:8a:21:41:f9:5d:ef:ba:ac:44:61:
16:8e:be:72:3c:b8:ef:40:7d:37:5b:0a:5f:c2:b3:
4b:6f:2c:4c:bb:8a:67:22:ea:59:5f:79:a1:33:61:
da:70:96:42:e3:a2:4e:3d:84:eb:95:b5:7b:31:57:
d4:72:0d:0a:6d:03:40:6b:dd:2e:fa:bf:b7:a0:ad:
a7:dc:1f:e3:30:81:f7:33:7b:5a:be:b1:71:7a:05:
81:8c:f5:a1:98:12:78:d4:1d:7c:dd:db:27:ba:23:
20:a6:db:21:1e:eb:6a:80:d6:de:0b:ca:2e:7a:c2:
e5:e2:b3:d6:b6:6e:48:08:45:f7:cd:c3:a2:3f:c5:
46:f3:7f:ae:97:ce:b4:d3:80:91:79:36:20:51:5c:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:06:71:12:55:37:A9:15:92:EC:1F:32:05:3C:68:AA:8D:D7:D3
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:13:21:2a:f7:3a:0c:06:e2:a8:0a:13:e6:fe:94:fe:b5:
ca:26:98:ee:a7:6a:54:04:87:89:a9:37:1b:5b:3a:8b:61:e4:
d9:6f:89:d7:54:5c:07:e0:81:cb:ee:d2:29:ad:e8:de:d6:20:
ea:1b:2c:e8:27:b7:42:0b:e4:30:5f:25:fe:21:73:19:d8:4f:
07:33:4a:0b:62:e0:da:7f:a1:63:0c:82:15:15:b7:a2:a5:00:
17:3f:bb:0e:49:71:70:34:66:67:68:d9:96:45:e0:50:47:dc:
fc:28:76:45:70:c1:bb:03:0f:c0:5e:b3:42:a5:62:be:29:5b:
52:45:20:65:36:36:49:49:4e:11:3e:17:e2:5d:77:df:17:71:
d5:ab:31:3b:2b:7d:f5:08:3f:67:9a:d7:e7:ef:14:34:3f:8e:
8f:3b:5a:cf:29:96:43:5f:1b:f9:45:cc:2d:52:f8:d7:98:61:
19:48:e7:49:64:d2:ad:8a:54:ea:79:96:2e:7a:51:eb:a2:a6:
ee:4c:7d:42:8c:cc:a0:33:9f:3a:e9:b4:4f:b3:c2:bc:7a:6e:
0f:ca:7b:8a:00:7a:a5:a6:71:4d:b5:9d:0b:df:19:3e:75:cd:
e2:4a:74:e3:17:c3:e9:80:50:06:41:9a:11:22:e9:b0:eb:4e:
62:d2:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:41:51 2025 by rpki-client