Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: 2dpox13eb6N4hypo2l4lqGqfBhkCLftqVqUZAcE1I8I=
Subject key identifier: D8:C3:72:A0:F7:88:E2:B1:F6:E1:0F:F8:A1:C5:C6:4F:1E:75:27:4B
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 0194BC04B9F79B2685FF83DC88A8F37548DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: D0
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: Be02n4Lj5RoqpMq3hPzpwNjBqT5tJuBv/TYy0IjKbP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:f7:9b:26:85:ff:83:dc:88:a8:f3:75:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=d8c372a0f788e2b1f6e10ff8a1c5c64f1e75274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:00:67:a5:25:b5:f6:77:cb:43:11:d8:09:
78:54:3b:ae:87:2c:33:a0:36:12:50:32:06:9c:eb:
13:52:bf:46:0d:8d:39:32:8f:9e:d5:5d:c2:13:eb:
d9:ee:59:b1:da:09:c0:03:b3:ce:00:e1:64:1b:5e:
1e:00:c8:38:33:c1:05:68:1b:e8:be:c8:18:ff:03:
0b:04:ab:b6:9e:eb:5a:1a:e0:3d:4c:0c:77:ed:b3:
14:d1:8e:9d:c1:e3:2b:be:9a:b2:4f:f4:da:6d:8e:
33:38:eb:a3:5f:23:95:b3:ef:90:41:a3:20:bc:c5:
ae:69:7a:4f:a5:ae:ca:a5:2a:35:9a:7e:c6:0f:4b:
fd:07:4d:01:2f:22:11:fa:48:54:88:a3:ad:6d:09:
09:34:45:06:9f:f2:2c:d8:10:4b:25:f1:be:65:92:
61:2f:e4:5e:d5:f1:57:3d:e5:05:fa:59:4f:d7:5b:
66:dc:a1:36:1f:8b:9c:2e:dd:c9:b9:50:f7:0f:b3:
a5:4f:25:9b:dd:15:65:51:e5:2a:2a:9e:50:0f:c8:
8f:1e:c0:1b:3f:39:81:8b:cf:7c:c1:d1:ed:e1:16:
66:3a:ca:96:55:b8:37:04:44:98:2e:58:2e:df:f0:
f6:b7:d3:a9:01:4e:df:22:eb:0d:e5:c1:83:65:b6:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:72:A0:F7:88:E2:B1:F6:E1:0F:F8:A1:C5:C6:4F:1E:75:27:4B
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:94:57:91:a8:65:46:6d:b5:e4:37:c5:58:3e:d5:a5:81:
94:77:95:01:53:5d:aa:8d:48:5a:c7:47:d1:24:1f:a2:5e:f4:
5a:f2:9c:20:f0:da:1b:2b:f8:ed:bc:be:19:e6:a1:d7:75:ed:
c4:e1:97:a9:96:0b:77:bb:1b:2d:99:a9:be:7a:cb:dd:b4:d1:
24:af:2c:c0:9b:66:40:e7:a3:57:9d:b4:f9:0d:70:6b:30:d7:
53:7d:89:f8:da:8d:9d:55:16:39:53:2f:5e:ca:f2:9f:b0:f0:
a3:68:4c:96:c2:51:ab:c5:10:9a:1e:ba:81:e1:9c:4b:f3:7c:
95:fe:47:d0:dc:42:5c:4d:86:b7:03:f6:19:58:7f:df:28:ca:
af:eb:90:25:16:8e:74:da:89:c1:1e:82:9f:cc:80:a0:27:05:
99:fc:7d:c2:5e:fa:16:43:ab:3f:f4:6d:c3:41:ff:bd:10:f4:
21:7b:7b:53:a9:a2:4c:25:01:f9:2a:2a:cc:11:8a:47:1e:85:
4d:7e:59:79:ea:82:5d:59:ee:c4:03:aa:0e:e4:8e:3b:9b:b9:
1d:bb:39:d2:b2:71:ff:76:71:08:90:69:91:c1:80:27:8e:a7:
36:58:14:d1:5c:08:a6:6f:83:65:92:d8:b1:79:6f:8e:f3:9c:
f6:5f:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:50 2025 by rpki-client