
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File: vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier: ojUCDGKiWVSG0TIBYhIg25sKdPy78uOzKp+QaJYPzhY=
Subject key identifier: 01:5B:89:E5:E1:5C:7C:E3:A5:0A:42:E3:00:76:60:D2:5D:45:35:52
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer: /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial: 0194BC7289182B7F6DA90581F780D0E3620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number: 136B
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: +xgbDbit2m/FRymhCFjpZVI1TLSPCHhC5VSYaRAEJ64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:89:18:2b:7f:6d:a9:05:81:f7:80:d0:e3:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=015b89e5e15c7ce3a50a42e3007660d25d453552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:8c:8c:d7:05:a2:cf:8a:3a:9f:b3:66:c4:
7e:d8:34:90:35:94:08:15:58:2e:3a:c1:d2:b6:e9:
bb:ee:e3:7d:8f:be:c2:87:4d:f0:cc:15:02:e9:39:
b6:8f:80:1e:97:c2:f9:71:b0:84:c6:fa:04:cf:7d:
45:7a:6f:6b:c8:a9:e6:0b:a3:9e:7c:aa:62:32:f6:
4e:b3:86:7b:a9:31:7b:6c:dd:34:ee:fe:91:40:a8:
e3:38:96:6c:68:b4:38:27:4c:56:48:1b:e5:3c:f1:
0b:5c:8f:d2:a9:a2:84:bd:cc:30:fe:75:51:76:e3:
77:a9:2b:03:13:a5:95:96:ec:5c:b2:91:a1:fd:7f:
f3:f0:32:cc:fb:55:0e:b1:5e:36:2e:69:a0:07:d1:
08:52:3b:f4:7f:af:ba:80:49:a4:f3:20:9a:5b:0c:
61:f6:57:df:70:3b:23:7e:22:e6:d6:ec:ea:db:60:
80:18:de:c4:36:e7:63:1e:4a:74:bf:13:74:a6:c6:
8a:d6:95:d0:c9:75:7f:66:70:86:ae:59:9e:85:5e:
d0:0b:a4:ef:84:a4:be:b9:b6:75:ff:3f:0a:8d:21:
50:8c:92:6b:be:64:17:3c:86:c4:92:92:34:d2:3a:
8b:f9:e2:47:95:a8:16:f2:0e:c9:06:bd:15:3a:a5:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:89:E5:E1:5C:7C:E3:A5:0A:42:E3:00:76:60:D2:5D:45:35:52
X509v3 Authority Key Identifier:
keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:64:64:93:58:5b:be:97:b1:3d:4c:d1:83:10:09:5f:8c:be:
b8:92:ab:34:e1:76:4e:ef:f4:db:57:b7:8b:73:48:4b:9f:9c:
9f:ea:5d:d1:6b:58:3a:af:46:f6:ea:33:11:f8:84:e4:ca:60:
03:cc:3e:d7:5b:f5:22:50:0a:f5:3c:51:f2:8b:18:6c:c0:8b:
d1:89:19:38:51:1d:a2:e7:10:fd:a9:2f:c1:c8:82:0d:29:19:
f5:24:27:8c:28:ba:e9:60:b5:dd:e3:5a:3c:65:a2:08:84:be:
f0:95:7e:06:f0:cb:aa:05:9e:93:e7:ac:97:33:6b:37:9e:3d:
e6:ac:07:de:ce:3d:83:39:07:13:34:72:1e:8f:bb:52:1a:54:
ad:a6:33:c7:63:e5:71:96:f1:91:ed:ac:93:6b:c5:94:78:72:
03:62:cd:57:d3:20:34:6c:e3:25:49:54:68:0c:26:10:6d:7c:
be:ce:22:60:e0:a5:80:b9:98:70:51:6d:03:66:8c:b5:2f:e8:
af:94:cd:94:f1:d5:6d:66:f2:14:a9:99:54:32:eb:0c:9e:f1:
1f:ab:f7:51:6c:84:31:40:a0:27:18:d2:46:1f:07:cc:fa:7a:
0f:35:e1:79:5e:12:e3:57:5f:c0:3c:cb:69:06:76:28:ad:a8:
3c:9e:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:33 2025 by rpki-client