Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
File: VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft (raw, json)
Hash identifier: s5SdvqTDXLzYCB0I05XYz6zytwWkMM7Bhe7ROY+lEIk=
Subject key identifier: DC:94:66:EE:75:70:18:8E:73:A1:F0:8B:C4:43:39:A6:13:B8:07:24
Authority key identifier: 54:76:E0:90:01:C3:18:65:26:19:0D:1F:35:D2:A5:B9:9F:CA:A2:70
Certificate issuer: /CN=5476e09001c3186526190d1f35d2a5b99fcaa270
Certificate serial: 0194BBCDD9EA1DA4DC8EF395EBF809DE10BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: VHbgkAHDGGUmGQ0fNdKluZ_KonA.crl (hash: 9hbVz9jId1/I23li2JC4GQZ1HUCd8dh64lJwhxeSbkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:ea:1d:a4:dc:8e:f3:95:eb:f8:09:de:10:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476e09001c3186526190d1f35d2a5b99fcaa270
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=dc9466ee7570188e73a1f08bc44339a613b80724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:cc:b4:40:b1:05:30:53:74:65:cd:63:9e:
bc:2b:fc:c7:c7:47:4d:b4:52:53:97:58:86:90:93:
13:ee:92:83:fd:3c:92:cb:f4:32:08:6b:24:90:e1:
3d:21:8e:2b:c9:2d:7b:32:e2:9d:d7:3f:01:69:47:
a9:7d:9c:2a:5e:d4:a6:5d:e1:12:07:aa:4b:ea:86:
a8:5b:d0:3c:5c:81:c8:40:8e:cc:25:cd:df:9c:d8:
a7:bf:f0:0f:d9:23:a2:08:ce:3a:16:e4:70:bb:c6:
da:cb:1b:c9:27:49:29:ab:61:25:1f:d5:c3:35:e0:
4b:4d:3c:1a:61:2a:46:6f:93:60:c0:59:90:b6:f0:
f0:ea:52:09:0c:c8:0b:c5:cc:19:58:e1:4c:4d:d9:
15:3a:d3:7d:9e:f9:d2:62:15:ee:42:e3:87:d8:5c:
ca:6c:fa:ef:e8:02:aa:28:47:c5:bb:ae:9e:67:46:
2f:19:31:7a:e1:f0:4a:bc:21:7e:ba:4b:02:c5:a5:
70:41:98:a8:12:4f:0e:18:f5:20:92:7b:e0:b2:fb:
72:b0:b9:9e:a6:64:d9:e5:e5:66:51:26:2c:02:1e:
46:e8:ed:d6:89:01:52:ca:6c:be:6b:2c:c8:72:8a:
44:47:11:c2:48:ad:e6:4a:0b:2f:89:75:1e:80:99:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:66:EE:75:70:18:8E:73:A1:F0:8B:C4:43:39:A6:13:B8:07:24
X509v3 Authority Key Identifier:
keyid:54:76:E0:90:01:C3:18:65:26:19:0D:1F:35:D2:A5:B9:9F:CA:A2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:de:3c:ed:98:d9:ef:0c:e3:fa:1b:02:c8:f9:b9:82:17:d4:
03:72:1d:ba:52:b1:27:a7:d0:17:b6:d0:d9:d0:52:97:66:c2:
f9:46:70:5b:2d:19:2f:fd:58:c0:bd:54:be:46:03:5d:58:78:
a8:0c:19:4d:c4:97:79:85:67:61:48:28:01:00:be:d2:b3:fa:
b8:85:3f:16:19:5f:1b:20:cf:f8:6c:81:14:f1:e7:dc:0d:97:
38:14:24:85:b9:77:89:69:95:3b:dc:e7:ea:c2:b1:b0:b5:84:
88:ee:2b:26:8b:99:4d:39:64:62:eb:4f:d1:c8:b1:64:72:f3:
3d:f5:f6:49:f3:4a:6e:97:03:63:72:ab:96:ae:e5:2b:e9:fa:
e1:c6:d7:4a:a2:19:3e:bd:c0:41:87:1d:34:31:de:6d:62:82:
39:cf:9b:bd:97:f6:27:57:74:a7:7c:6c:b6:82:7e:46:95:1f:
20:05:84:65:72:5c:a8:a8:0b:c2:d0:f9:c9:15:00:5a:a7:22:
33:1c:73:b7:18:3d:58:0b:12:05:e5:da:21:31:29:63:f6:de:
9b:ba:45:8e:23:17:3d:0f:a3:6f:0a:72:95:5a:de:ec:48:7e:
23:61:62:b4:29:33:db:45:8e:de:4a:7f:de:cf:c8:e7:55:8f:
ac:a3:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:28 2025 by rpki-client