Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: Z+HjS8QATP6KeZ2ghThHQ8nXob93xXBk63jYhbiyPP8=
Subject key identifier: FE:9F:BF:22:2C:27:8F:4E:A6:FB:1B:EE:7E:3B:8C:32:1F:02:6D:DC
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 0194BC727E279BC89365031B516E29906A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 1223
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: Jcub4YGeKgQ2hyM8t0jnNxJqk95Dt7NQuOdXbaw+BV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:27:9b:c8:93:65:03:1b:51:6e:29:90:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=fe9fbf222c278f4ea6fb1bee7e3b8c321f026ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:1a:8e:a3:c1:0e:12:3d:08:37:84:4d:60:
bd:49:01:91:44:08:aa:12:a7:95:ae:b1:a5:9d:ba:
9e:1e:17:01:2c:a5:c3:28:99:41:a2:ee:56:0c:6c:
87:89:f2:34:65:00:2a:75:94:39:3e:5d:00:f7:31:
f8:ae:08:3d:7d:a8:ef:4a:23:fa:a5:ab:72:a8:d3:
81:98:28:96:ea:88:6d:34:93:11:fe:0b:b7:e3:04:
4f:d2:f3:3d:37:49:b9:90:21:87:f5:ba:a2:65:21:
84:ce:9d:b0:f5:9c:03:71:2c:7b:1f:6a:55:29:49:
16:b5:23:50:a8:31:83:35:54:af:42:fd:69:20:f6:
ff:03:70:8b:f9:ac:a5:fc:67:43:1e:b7:3d:6c:3b:
6e:53:19:94:8a:0e:f4:36:6b:96:03:05:2a:d7:cb:
cb:07:f8:49:d1:e6:d0:9b:5f:fa:da:f6:f1:86:6f:
b2:ae:9d:14:91:51:7f:db:1b:5a:52:86:cc:18:b2:
9a:3e:39:9d:8c:0d:12:33:46:83:9f:8b:0a:f8:88:
59:24:ff:84:04:97:49:70:66:b3:05:e0:ca:a9:3b:
56:9e:80:d8:82:b3:3e:3a:25:4d:ff:0a:76:9a:fe:
c9:d0:9a:8b:87:3a:1f:0b:e0:9c:b9:46:95:99:61:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:BF:22:2C:27:8F:4E:A6:FB:1B:EE:7E:3B:8C:32:1F:02:6D:DC
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:20:26:a0:84:d3:8b:8a:48:c0:a5:8c:79:42:a6:f1:29:
1b:30:bf:6a:09:16:c7:e4:4a:ba:40:fe:ab:db:1b:d8:19:05:
c5:78:9a:39:6e:d7:d9:f2:ff:80:2f:ac:b0:a4:d6:39:84:87:
dc:8f:6d:d9:22:49:bd:a0:be:ce:93:c7:f5:fc:15:a7:f4:45:
5a:4f:2a:c4:ad:a0:4b:7d:e5:17:f2:fb:2a:8c:1a:57:7c:9a:
3f:b4:ed:bf:6c:71:5d:a9:a8:a7:17:db:d0:b8:c3:e1:df:d2:
50:bc:a8:40:2f:d2:df:91:3b:da:7c:08:80:b6:c2:4d:6a:cd:
17:b8:0c:b0:9b:d4:69:dc:28:24:42:42:98:1b:1c:6c:b1:3a:
76:a5:b7:02:f3:2d:07:4b:d5:4d:35:e6:1b:7f:d4:17:af:5b:
59:93:3e:31:49:b6:4a:60:b5:46:66:92:24:a9:96:9d:c3:5d:
95:0f:ce:3f:a1:89:0a:e2:e8:35:2a:b9:a1:de:1b:d8:3c:44:
7a:42:b4:3f:f9:4c:95:2b:0c:d9:7e:a3:c1:d8:ed:e0:4a:2a:
9e:73:fc:ce:b6:15:b2:06:a4:52:60:f7:67:41:f2:2a:79:b1:
18:1d:4e:0d:29:88:22:17:e1:98:36:7d:26:21:63:ff:1f:e8:
3f:20:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:13 2025 by rpki-client