Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier: +O/dfqZuIee+WCeehVZRSzGp+HxTXlhrUHA0qdbooJQ=
Subject key identifier: 8E:EB:6F:F5:20:BF:74:52:1C:B9:50:68:3B:2F:E2:34:44:30:F2:76
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial: 0194BC3C28D94F6B4E9FD038AFD68B2DBC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number: 069A
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: wU9cGVt+XaGL63rUD4GsrRNIP++a2GxUE0i+5BIw708=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:28:d9:4f:6b:4e:9f:d0:38:af:d6:8b:2d:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=8eeb6ff520bf74521cb950683b2fe2344430f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:27:97:1f:73:e1:38:27:aa:f6:1f:29:36:
f9:41:2e:7a:74:16:8b:74:5d:07:6c:41:82:1c:dd:
e2:f0:e9:2d:81:74:cf:45:31:9a:1d:8a:eb:cc:51:
5e:f5:13:13:f1:4b:29:f0:17:bb:b8:a2:b3:64:83:
6d:fd:9a:ef:38:41:0f:51:60:dc:7b:d1:87:99:96:
09:f2:b7:bf:de:ae:67:21:c2:e2:e7:4a:bb:94:ed:
cf:1f:ee:8e:c5:e6:c2:04:90:73:cd:8e:07:71:1a:
ff:28:9b:ab:44:52:06:c9:8a:43:f4:e0:93:aa:c4:
63:74:c8:e4:78:67:29:4b:0a:31:a7:67:ea:32:5e:
4a:55:85:71:a0:b3:56:be:c6:9a:65:4f:97:75:17:
aa:d6:34:a4:8a:52:2b:c4:25:5a:ae:87:a1:a7:0f:
7b:35:08:19:58:3e:98:e5:65:88:22:2a:9c:b1:8b:
4d:7f:bc:c9:3f:ef:b3:0b:2a:65:64:36:86:98:16:
fa:30:b9:ff:d9:fb:d3:f2:97:22:10:12:29:9f:42:
30:eb:74:da:23:d1:ef:7c:8a:f7:a7:93:c3:38:ff:
fe:72:e4:d0:fa:8d:09:7f:56:03:21:4a:de:62:14:
10:ea:c6:6c:ea:a5:c8:eb:1f:42:c7:24:ba:d5:49:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:6F:F5:20:BF:74:52:1C:B9:50:68:3B:2F:E2:34:44:30:F2:76
X509v3 Authority Key Identifier:
keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:fd:ad:b1:0e:7b:10:11:3c:23:ad:76:8d:f2:11:16:9d:
e0:33:28:2c:31:f5:a8:15:dc:c0:ac:58:11:67:6b:22:6d:d0:
de:71:66:3d:76:ea:cc:18:eb:e3:ba:3c:88:7c:bc:36:4a:8b:
23:46:5d:54:e5:c2:28:e0:9d:c2:b4:e5:05:43:19:35:ff:1e:
9f:2c:d9:af:ce:c9:59:fe:13:de:fb:05:24:c2:d0:40:5c:76:
a5:bc:3d:e4:f9:ae:05:fe:e6:2f:0a:2e:b6:c6:85:e0:e7:41:
43:ef:6a:a5:85:53:b7:fc:98:46:49:c7:4f:a0:43:b5:86:d7:
cf:4d:52:ff:82:59:72:7e:70:68:a1:27:78:f7:8b:9a:4e:e9:
e6:f2:a1:74:41:26:28:4b:1f:5b:f9:54:f6:d9:1a:45:56:0c:
95:1c:53:66:ec:2a:b7:83:13:25:43:4e:0c:3b:d4:93:3a:03:
9f:05:86:1a:d5:87:c0:23:47:f3:cf:7c:2a:74:d3:37:27:21:
03:06:00:57:44:84:7e:05:18:bb:51:a2:3f:73:02:94:3c:a1:
c0:0e:e5:ef:1d:b6:29:15:e5:2b:7a:a5:d1:6a:d4:ad:3e:12:
f5:c5:aa:e1:e5:1a:21:34:7c:09:13:03:61:43:de:50:f6:3d:
f6:dc:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client