Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
File: VmhcNSHqj-av5l1TOjsZno92UFs.mft (raw, json)
Hash identifier: 9NS6MWJgqSIoFCefPcvRCNB+muwV0L32ka0Y1k3nxy8=
Subject key identifier: 54:8B:53:66:42:44:A1:DB:4B:24:1B:25:72:9F:19:63:6A:8A:29:40
Authority key identifier: 56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
Certificate issuer: /CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
Certificate serial: 0194BBCDCDE818F3E6074EFCF8374AC5CFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
Manifest number: 132F
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: VmhcNSHqj-av5l1TOjsZno92UFs.crl (hash: ZYh1hootVO4+NB2trLUm4dnUxqpiKB1P+taBPiBGha8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:e8:18:f3:e6:07:4e:fc:f8:37:4a:c5:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=548b53664244a1db4b241b25729f19636a8a2940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:1c:7a:1d:28:8f:cf:0f:e9:aa:e2:02:3a:
c5:0b:99:55:6b:73:2e:11:6f:1c:f1:58:e5:0c:01:
8e:73:c6:14:0d:fa:36:a7:87:5b:b9:09:7a:a4:7a:
f6:b2:14:d0:72:8b:b4:79:3e:9f:af:1b:68:f2:25:
bb:61:b4:27:93:ae:cf:c2:6d:42:84:cc:d0:00:d9:
33:ec:d4:19:cc:95:e9:7a:e7:39:e7:1e:cd:cf:e2:
3d:32:57:a9:2a:b3:72:e0:38:21:46:78:3d:1e:ff:
64:8c:c0:dd:db:ae:f5:e8:69:ea:0a:f1:8a:a4:e3:
ac:85:0b:46:f0:ea:10:59:99:9f:66:9c:79:02:8b:
0a:c4:aa:25:e1:b8:31:eb:c0:9c:b4:56:24:be:4b:
12:56:17:43:be:29:ad:5e:f9:05:be:f0:71:65:f6:
12:51:cc:6f:54:35:92:a5:a2:63:2b:cb:ad:95:a4:
98:fc:ba:8a:8a:4f:81:8d:55:2a:3b:4c:2b:8b:4f:
ee:52:f2:d1:65:e2:11:85:fe:dc:60:0e:ea:70:6e:
da:36:cc:c9:fa:8b:5e:c7:fd:06:ee:71:ae:4c:68:
79:0b:71:6d:02:b5:e3:ae:08:b2:10:f1:5a:0c:0b:
eb:ba:56:82:cc:dc:15:05:e3:34:b7:56:14:be:ac:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:53:66:42:44:A1:DB:4B:24:1B:25:72:9F:19:63:6A:8A:29:40
X509v3 Authority Key Identifier:
keyid:56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cb:87:7d:fc:f5:ea:eb:64:28:a8:d4:2e:b4:47:1c:10:bf:
86:8c:7b:2d:96:a6:43:ff:04:ad:8c:fb:0d:fe:fe:a2:93:a2:
6d:fb:64:25:b6:24:08:df:3d:d7:73:40:d6:72:16:5c:5a:a6:
28:9e:b7:9d:c8:c5:ba:d3:8f:4d:32:b7:82:8b:20:5a:1d:ef:
d3:9c:9a:50:57:2e:85:23:67:71:d4:e0:ec:90:08:0e:fa:f0:
83:a2:f3:41:e2:3c:2a:26:35:cd:e3:02:57:d9:45:38:63:72:
fc:68:d1:a7:84:b1:00:9f:ad:f6:33:2a:2f:ae:66:f0:19:37:
b9:2b:a2:cd:b9:03:b5:f7:ca:c3:ae:dd:8c:56:f1:0f:cc:9b:
d0:df:1d:ff:bc:49:7d:53:48:18:b1:07:4c:c2:d6:97:f8:74:
14:e3:e5:54:35:44:64:45:2c:92:bb:28:12:94:e7:ab:84:3b:
8b:a9:80:ed:8a:65:46:cc:e9:00:45:f8:78:75:3d:35:c3:ba:
5e:aa:a5:af:20:a2:a5:7f:fd:20:ac:c7:ba:80:f3:dc:cf:59:
0e:15:00:76:97:2a:f8:6e:89:10:a3:70:7f:cd:50:cf:b9:c9:
be:ae:69:cc:76:45:1b:e6:8a:99:bc:ac:f2:a4:ad:c3:97:82:
66:30:ac:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:02 2025 by rpki-client