Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: P0wBMzd/H/toA+31Zyr1gaUe5bDaUX7xoyc3TXVnmIo=
Subject key identifier: 42:23:00:44:78:B9:11:44:63:5B:E4:21:FB:15:0C:65:5D:20:A4:AC
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 0194BC3C5A5DDA3DC64C7E0ADCF4057F8B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 07CD
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: 6JS2poSpdowNiz/BPubXPIzjo9IcKJAp82y+df64VWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:5d:da:3d:c6:4c:7e:0a:dc:f4:05:7f:8b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=4223004478b91144635be421fb150c655d20a4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:5f:17:d0:55:41:14:87:2f:b5:bf:e9:ca:
c0:21:3f:ac:13:47:eb:a2:86:36:83:2d:9c:f1:17:
c0:8e:95:1a:c5:dd:d0:cd:67:4e:bc:68:5f:e6:cc:
03:2d:94:a5:cf:d8:63:fe:dc:b0:4b:08:0d:f1:e5:
1e:85:d6:b2:a2:97:0c:00:ae:4c:ac:2a:b2:a0:06:
8f:13:1b:07:4f:fe:87:21:0a:2f:e7:b3:15:02:13:
f6:93:78:f4:e6:6b:85:64:1e:12:e8:d6:f8:ca:38:
f2:53:12:21:c7:4d:d6:fd:91:33:d5:bf:34:e4:d4:
4e:05:dd:99:84:46:26:50:5f:02:ee:d1:d6:73:bf:
4b:c1:10:4b:2c:30:a5:32:59:b2:98:ee:00:3a:19:
cc:b1:ef:18:3b:25:e4:8d:49:2c:8a:0c:21:2d:70:
03:09:04:69:7d:9b:72:a1:06:d2:df:8e:be:b5:1a:
12:56:5b:af:0b:d3:44:1e:35:58:85:56:4d:40:54:
57:2e:ca:f7:6e:85:99:8c:63:30:98:cd:80:d2:e8:
4d:e5:d5:fa:e8:8c:28:6c:f9:91:9d:da:36:bc:bc:
2a:27:7c:1c:9d:49:20:c8:48:0a:3c:62:51:44:cf:
c4:4d:20:9c:36:5f:b2:63:20:7c:66:7b:c7:c4:c2:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:00:44:78:B9:11:44:63:5B:E4:21:FB:15:0C:65:5D:20:A4:AC
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:b2:03:bf:9d:05:0f:a9:8f:b1:26:82:82:ad:66:75:e1:
10:9a:ca:18:bb:1c:fb:4b:1d:67:4d:5a:f9:7d:4c:a5:83:c2:
e0:c0:9a:8a:65:17:e0:76:83:0d:c5:0e:a1:53:26:79:a3:98:
5b:47:1a:1a:87:af:c6:e6:6e:4f:20:36:39:ae:40:b3:57:ce:
ef:31:cc:1c:3a:74:a8:66:7b:8c:b7:4d:45:15:54:83:9c:d3:
43:42:91:b2:e8:2d:f1:d0:9e:b8:21:fa:14:ba:60:93:a8:9e:
39:82:d9:46:aa:f4:8a:48:92:c1:11:00:66:ab:23:62:70:20:
99:e8:46:a7:cc:ae:4d:da:8d:dd:15:c0:8e:28:ad:2c:fa:36:
c8:49:91:f7:1b:9b:e3:1b:a0:2e:5e:dd:d4:a9:ce:e0:ba:79:
f4:1c:97:91:56:1c:86:74:09:75:21:18:aa:0a:e1:19:e7:e9:
6b:9d:6a:b8:65:9f:85:be:8d:86:4b:b7:a8:1a:b5:47:90:2c:
56:cb:47:41:53:72:e8:8e:4d:85:33:e5:6b:fd:9b:5d:2f:c1:
fb:15:08:f8:7e:b9:e2:9d:80:1b:b5:c9:fd:e0:b4:07:31:0e:
0a:11:53:1c:ec:06:a6:a6:9c:b8:fb:8e:93:ac:a3:a1:c3:f0:
5f:0d:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client