Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
File: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft (raw, json)
Hash identifier: EWGrOKip6MH0LTacdN79MGLpXOarGT0RFoVprI/Kn5Y=
Subject key identifier: 88:13:AE:53:84:39:56:5F:85:83:DD:04:34:EA:8B:BC:E5:F8:FD:3B
Authority key identifier: BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
Certificate issuer: /CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Certificate serial: 0194BBCE711F9D9B0E185ADC1818BD2C2A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
Manifest number: 0904
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl (hash: je4uAbbptwz64yKHi/a/AIPHx5lN7VqNyDWjOymfpHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:1f:9d:9b:0e:18:5a:dc:18:18:bd:2c:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=8813ae538439565f8583dd0434ea8bbce5f8fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:65:79:c9:7b:e1:ea:03:b1:7a:fe:36:61:
e6:ef:ea:9a:32:1c:02:74:a4:50:ff:60:b8:cb:2e:
c1:07:3d:95:81:62:e7:5e:51:86:aa:3e:65:5f:ed:
c3:10:cb:7e:bd:f7:9a:b3:7e:7f:64:94:93:98:b0:
df:ed:fa:c2:6a:69:d0:3a:4e:95:c7:af:e7:60:de:
f8:c7:d7:1d:6a:22:3b:49:e6:c6:70:93:1d:c1:ca:
6e:08:da:5e:34:de:47:19:42:5b:e9:92:5b:06:ee:
19:43:86:26:35:26:e8:03:36:ab:6b:e8:23:25:da:
13:67:d3:e5:3a:0d:98:f8:b2:f8:8d:7e:18:b8:82:
83:39:ed:bc:3a:c7:e2:a4:bc:69:2c:97:e7:eb:7c:
0d:ba:aa:79:d5:a8:4b:37:e7:eb:db:06:03:fc:fa:
e2:ea:23:23:af:26:4d:8b:70:73:26:9e:32:c9:bb:
32:50:ee:65:59:49:82:b7:d2:cd:45:ed:eb:e1:b7:
3e:e3:18:b9:be:e1:db:1e:c3:4a:62:f6:9e:60:f2:
ab:90:c7:4e:5b:9b:5f:1c:0c:22:c7:ad:6c:f2:1c:
38:f5:32:9f:ce:e8:40:66:bb:3d:55:d1:c0:fa:b8:
d6:8e:f3:53:fb:f1:de:63:12:22:2e:d0:d4:a3:c3:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:13:AE:53:84:39:56:5F:85:83:DD:04:34:EA:8B:BC:E5:F8:FD:3B
X509v3 Authority Key Identifier:
keyid:BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:12:63:2e:8b:82:dd:59:0d:46:81:b4:68:db:10:b7:03:
5e:54:0c:34:6a:de:0f:ae:b2:38:9b:0f:28:78:d5:91:e9:49:
b0:26:73:1d:bb:75:6b:2f:2a:93:a2:f5:70:2a:c3:9a:cf:52:
a5:f2:1d:7c:5a:64:8b:4e:b2:9c:f0:ba:e7:25:b1:92:ad:3d:
8c:fb:be:f4:2b:84:65:35:9f:0d:99:f6:c7:3a:b3:f5:d4:32:
31:7a:2a:8e:55:0f:7a:9c:31:5b:54:7f:ff:48:11:e2:db:ec:
00:f5:a6:96:d3:f9:f3:05:bd:f1:d3:56:e4:a9:23:a0:57:01:
ba:34:a3:18:6f:08:98:80:35:61:16:bc:de:ae:ef:96:81:85:
fc:c5:9c:62:b5:ef:2a:f3:d0:90:bf:7a:67:ba:c1:1f:f5:a8:
51:2d:a7:71:d0:2e:4f:3f:29:be:89:10:94:7a:6a:65:5e:6a:
72:1e:5f:7b:89:42:1f:16:f6:c5:7d:53:51:e4:0b:8c:28:cd:
54:43:e1:51:7d:5d:85:60:9f:ff:e0:8e:b5:5f:b7:ba:31:b7:
04:cf:9d:f6:87:43:25:26:3c:9a:01:ae:c7:c8:7c:6f:75:87:
a8:4a:64:b6:9c:0a:38:95:b3:32:7e:b6:37:2b:f9:71:43:82:
6b:a5:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:22 2025 by rpki-client