Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: /nBL1jcLXdabW+/KhnPRSK7t4evl6Tx52bwv668Kwxs=
Subject key identifier: 8D:33:0D:17:D6:98:38:35:0F:89:1A:8F:33:24:CC:3C:48:ED:87:37
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 0194BBCDB95D53315019133DDDA43797ACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 048D
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: SS363adQ8fUEJj8HXU3llmwyEQ4KzU1XZAoztstuotA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b9:5d:53:31:50:19:13:3d:dd:a4:37:97:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=8d330d17d69838350f891a8f3324cc3c48ed8737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:3e:a5:0a:a4:e4:b6:b0:c3:f1:fc:a1:b6:
ac:cc:18:e9:6b:06:1e:e8:98:c3:50:c4:7b:fb:57:
06:d7:f3:ae:65:33:27:bd:89:a3:98:99:65:06:d8:
48:e2:12:81:e4:27:a9:92:d2:3b:ae:d0:1c:27:56:
43:7d:b8:29:06:26:be:a9:53:d5:ab:bb:64:ea:88:
ca:49:b5:88:16:7b:96:6c:09:2e:16:54:c3:9c:e2:
5e:8f:78:cf:9e:30:8c:06:63:d8:d9:3a:40:cf:4f:
81:f0:ae:b0:77:65:a6:23:06:67:9d:66:90:7b:9e:
81:ae:8b:3a:48:32:5e:ea:00:76:72:13:46:19:ee:
d2:9d:9d:55:66:f1:e1:bd:05:8d:ba:38:36:e8:d7:
f0:2d:cd:c0:34:7e:cd:55:87:0e:77:f0:58:09:c3:
35:ac:e3:71:15:8b:56:b5:c0:79:d7:85:26:96:71:
54:7a:15:60:1e:45:1a:19:28:70:04:79:9d:86:98:
4b:55:84:41:21:ed:10:92:96:d7:2f:12:7a:a0:f2:
bb:fd:a9:2c:04:e1:06:f8:bb:af:97:3d:84:bd:52:
61:6e:15:df:6e:d9:c8:97:0e:14:ac:60:18:a7:13:
f5:bd:ba:5a:f5:e9:2a:1b:07:ca:6c:91:ce:e9:84:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:0D:17:D6:98:38:35:0F:89:1A:8F:33:24:CC:3C:48:ED:87:37
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:90:c9:60:2a:ef:29:04:6a:8e:e6:5d:c8:42:7e:72:66:3b:
f8:41:bd:b4:4a:db:2b:91:be:4c:74:67:33:24:7a:8b:b1:7c:
64:22:55:71:ec:08:31:ea:48:b3:66:9c:ba:c8:3b:88:7d:fe:
95:af:f5:ca:98:b1:fd:90:75:61:79:2a:e9:59:94:73:69:c3:
73:62:d9:96:2a:1b:6c:d2:48:09:5b:e7:0c:00:db:63:87:e1:
6d:69:66:11:38:d9:16:0b:54:b2:40:8c:c7:75:30:fb:e8:37:
3c:53:1a:0a:9f:f1:57:07:ae:53:09:ab:cf:3e:76:7c:4a:2f:
e2:da:e7:8b:38:1f:c1:72:c4:6f:95:2c:72:0c:43:ad:f0:1a:
1d:11:21:2c:cd:4b:79:ce:ba:fb:28:60:08:a3:fc:20:34:7e:
c6:97:79:b6:42:fe:03:74:8e:d8:1e:43:5e:39:90:17:b8:5c:
af:b3:c4:57:16:5c:46:b0:89:4a:c8:97:ee:18:f0:f4:64:94:
55:9c:62:d4:ec:ad:d1:76:43:9c:e2:a8:b7:55:97:81:da:b2:
17:1d:51:f7:82:ab:f3:f1:2d:d0:14:16:db:73:a3:38:d6:74:
1d:b0:56:22:70:8c:7b:2e:18:1e:d1:06:06:e1:c6:b6:c1:af:
3b:33:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:14 2025 by rpki-client