Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File: vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier: /PdXdZoEkO9rrNHGXk1a/c59TjoL1f+OSUBHY5x440g=
Subject key identifier: C1:82:91:2A:B7:1F:86:31:11:1F:E5:09:61:D7:20:48:CE:A8:36:94
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer: /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial: 0194BD174DFA5CD518A73D597F39413C533F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number: 0E34
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: XEB5KL672iggVdPZRKLx5+aHq4EVroAq6KYvVPhSs4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:fa:5c:d5:18:a7:3d:59:7f:39:41:3c:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=c182912ab71f8631111fe50961d72048cea83694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:ce:64:45:d7:23:22:42:10:12:fa:5c:1c:
22:a8:ee:4f:72:32:6a:ab:02:a2:6d:be:bf:2b:6a:
15:c0:80:71:1c:c7:11:b3:4a:98:e9:01:4b:8f:8f:
93:89:3c:2a:2b:1a:73:77:95:56:c0:0a:10:e1:46:
21:d7:bc:f2:c9:9c:69:89:a9:a3:a1:f5:b3:47:bc:
d7:fa:5c:fe:78:71:34:0c:fe:b7:96:97:98:fe:45:
57:c2:9e:01:4b:bf:17:cc:1c:21:05:4f:61:9c:48:
86:8e:6c:34:64:a2:e1:d7:18:97:9d:39:52:29:4f:
99:92:39:7e:ad:69:70:77:e8:b6:41:d4:f4:31:a4:
f9:b6:9e:2d:69:dc:fd:85:c2:de:98:23:da:e1:a5:
b0:82:89:b6:15:de:f5:e9:44:22:01:bf:b8:fe:38:
97:ab:e9:3d:ee:52:44:48:7e:f0:32:71:b2:4b:9b:
dc:47:3c:10:2e:0f:59:8c:db:16:9d:ab:8d:dc:2c:
0d:7d:c5:80:4f:3b:63:08:22:80:4e:45:6d:68:12:
fb:4f:a0:4b:de:d9:37:42:42:9c:72:29:d9:a3:1a:
35:d2:f1:63:44:b5:1a:e1:ff:29:c8:ba:5a:51:11:
12:43:2f:1d:16:cb:1d:56:6d:a1:b8:eb:b5:5e:08:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:91:2A:B7:1F:86:31:11:1F:E5:09:61:D7:20:48:CE:A8:36:94
X509v3 Authority Key Identifier:
keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5d:a3:40:b0:00:b9:7f:9a:8f:c7:89:d9:b9:b5:3c:0f:44:
04:db:e9:ad:36:4c:31:2a:c5:f7:e2:a7:cc:94:a6:a1:74:7e:
6c:9e:4c:48:b8:f7:3b:06:23:fb:a4:11:9e:72:68:cf:22:5a:
db:06:6d:0c:d7:1c:98:a3:f2:e5:b0:c3:e0:8c:c2:90:20:d7:
9a:6c:f3:55:10:d9:a4:f8:73:52:2c:e2:49:eb:96:61:e2:4a:
4e:74:5a:f0:78:f6:2c:4d:c4:72:6d:e3:af:58:62:e9:42:e3:
74:69:2e:14:44:03:96:89:77:60:e9:72:ca:36:1b:6c:97:7c:
17:14:97:36:f2:11:9d:ec:0c:c5:bf:44:ce:1a:aa:28:ea:23:
6b:f2:2e:8e:a8:ca:49:c1:13:29:42:a9:19:82:f8:bd:86:b2:
1f:62:d2:24:c4:c3:16:27:55:7f:ef:29:aa:19:37:a2:67:9d:
45:49:4a:45:63:cc:88:cc:9d:05:3b:c8:20:3a:1d:d5:13:5d:
8b:36:d4:01:c1:9b:04:07:bf:1d:d3:ba:5c:ec:71:aa:61:b9:
ed:8f:1a:04:1c:72:73:00:96:18:a1:7a:f8:fb:57:f3:38:67:
66:31:2f:bf:f8:3a:30:28:5a:19:7f:02:8b:89:1e:0e:7a:8b:
bf:cd:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:52 2025 by rpki-client