Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
File: VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft (raw, json)
Hash identifier: EpgENOnG8nqqW3wP5EyW0gJzTFWUk2YfYXZeA4zxis4=
Subject key identifier: FC:4E:A4:50:3D:BC:BC:61:68:D0:DE:70:07:9D:DF:CB:5C:52:46:5A
Authority key identifier: 55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
Certificate issuer: /CN=55c3f37c666ce845a2a0782c1c873046efb0e596
Certificate serial: 0194BC3BEE63803ECFD1E4AE0C747785218E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
Manifest number: 0F1A
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl (hash: 9wWwxn7KQn6UsBG4UqQrvUexVjIFd9G4HJQ/3QqdVKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:63:80:3e:cf:d1:e4:ae:0c:74:77:85:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c3f37c666ce845a2a0782c1c873046efb0e596
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=fc4ea4503dbcbc6168d0de70079ddfcb5c52465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:81:0f:56:28:c9:ca:c1:4a:d9:58:8c:aa:
89:34:eb:59:4e:89:24:87:8e:51:79:35:5e:ca:4e:
3f:eb:ba:d6:aa:8e:f9:28:8f:5a:4d:d1:04:f2:37:
e0:ec:73:d0:24:88:8c:84:3b:b1:e3:5c:07:f8:b5:
9f:24:35:f8:69:3b:1a:df:84:0a:76:39:de:01:de:
c6:e5:60:66:1d:bc:e4:3e:60:a3:5a:53:ff:e4:5c:
70:91:64:36:63:11:0d:11:43:9e:91:f0:e0:fc:a0:
e4:3c:f3:bb:38:2d:10:cc:b2:68:ca:46:54:07:8e:
03:e2:4b:a0:30:1a:71:6e:18:2b:1c:05:99:0e:24:
27:c3:b7:f3:2a:71:f6:95:e3:b6:f2:a5:03:77:a1:
15:7a:0c:b4:94:47:6a:4d:f0:12:3d:3f:58:e5:ba:
7c:07:1a:57:af:7f:17:18:3a:b8:95:96:9d:b6:63:
ad:40:75:a2:d3:7c:63:58:65:94:4b:d1:e0:9f:46:
e3:15:0c:65:41:3e:b2:a7:9c:ed:91:0e:20:4a:2f:
1e:88:58:0a:28:37:4e:2a:d8:d3:94:82:2b:33:e0:
36:cb:d0:77:2f:95:72:a0:b7:10:ab:a6:69:f7:2d:
0b:64:2f:90:bc:92:43:03:84:aa:84:4e:2b:a9:aa:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:A4:50:3D:BC:BC:61:68:D0:DE:70:07:9D:DF:CB:5C:52:46:5A
X509v3 Authority Key Identifier:
keyid:55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:65:aa:2a:f1:35:ab:f7:77:7c:6e:7f:9d:91:93:64:04:b1:
b6:0a:88:cb:d3:b6:15:f8:ce:82:3a:26:24:47:25:4c:a8:78:
40:2f:6e:2c:93:7c:20:27:f9:15:e7:96:85:9a:6d:0c:eb:8f:
70:c6:ec:e2:10:27:ca:91:ad:ef:7c:15:ef:43:02:58:7d:37:
c5:93:13:6b:7c:bd:21:83:b9:35:f8:76:a2:7f:0e:bf:6e:94:
82:73:2f:ba:af:4d:63:f0:24:89:2d:53:e9:6a:3e:9d:22:1e:
94:ed:37:47:99:3b:cb:79:a9:84:25:eb:ab:bb:6e:c8:f0:53:
b2:2f:e3:56:23:4b:61:85:09:67:99:16:fa:38:f7:af:6d:fe:
b6:9e:68:64:aa:78:38:1c:09:3e:93:c9:45:bc:6d:6c:bb:9b:
8e:2a:f1:9d:5a:7f:9c:d7:07:53:27:8e:b9:9d:94:61:b8:67:
01:34:01:8f:37:c5:10:69:64:e1:12:83:c4:ec:4e:28:47:75:
af:75:1a:44:79:15:45:56:1b:14:7e:b7:7c:51:5c:3a:3b:60:
6e:47:4d:a5:8b:b6:c5:fa:df:aa:ec:37:3d:3a:50:14:b0:1b:
0a:8e:02:3f:08:13:25:24:96:24:5c:65:c4:82:51:e3:6c:45:
6d:a7:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:02 2025 by rpki-client