Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: k0L+0CFlnIrOKblP+IQ8i0CUmjx2cuPpsWRPHgBVBls=
Subject key identifier: 1C:FC:AA:8B:AB:AA:8D:E6:F3:65:19:7F:AE:50:44:65:DD:1F:2D:32
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 0194BC3BE4DF2CEFCC6D9827EC42A82FD721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: QkhqWpgS5nxiwP6a/JrFiaqGFyn8poibhFXgjPUuRS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:df:2c:ef:cc:6d:98:27:ec:42:a8:2f:d7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=1cfcaa8babaa8de6f365197fae504465dd1f2d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:95:51:6c:fe:d1:cb:68:f5:eb:cd:8e:b5:
b7:9b:6b:c0:64:4a:88:96:e0:24:c7:c6:44:3f:94:
1c:9d:8f:76:ca:71:28:56:a1:0a:d0:d1:7e:9b:d4:
66:b0:3e:d3:3b:b4:7d:6d:97:72:01:00:7f:45:c2:
9e:b3:e6:87:70:da:5e:74:9c:c1:9d:05:e3:bd:d8:
f4:09:14:36:2e:e7:a6:be:53:de:a1:73:e0:9f:0f:
20:7a:69:1d:21:0b:49:dd:97:a8:1c:bd:47:20:2b:
20:d3:e6:39:5a:de:23:06:28:75:c7:34:28:28:bf:
aa:5a:e4:88:26:8b:65:18:5a:6f:95:2f:fa:e1:22:
0d:36:88:21:5c:dd:7c:73:61:30:7c:43:6b:02:aa:
b4:1f:1d:7e:76:b1:83:93:62:66:78:ec:a3:13:d9:
f8:3a:10:30:25:00:12:8d:dd:82:bd:5a:95:95:e6:
c2:44:f6:c4:43:23:5b:1e:0f:3d:6e:e8:c8:be:5b:
47:d3:19:27:2f:d5:b0:5c:25:fe:d3:70:1b:23:7a:
6d:c9:6c:cb:21:03:df:16:ae:ec:6f:40:f3:de:71:
9c:17:64:fd:89:40:7a:10:bb:89:a6:43:16:f2:46:
49:69:2f:ed:51:70:26:20:cc:d3:50:58:ae:25:82:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:AA:8B:AB:AA:8D:E6:F3:65:19:7F:AE:50:44:65:DD:1F:2D:32
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:d3:26:0f:7a:1e:62:aa:a0:97:ea:35:a8:56:83:66:32:
d6:eb:bf:05:6c:1f:11:56:73:de:44:38:4c:2f:67:79:3a:41:
b7:43:9f:28:9b:0f:b5:7c:51:5b:7b:af:97:9f:42:38:10:12:
fc:e0:d0:49:7c:8f:1d:37:cd:76:77:df:56:1e:0a:e2:d2:10:
00:62:9c:fb:c3:08:46:5e:8a:aa:7c:a0:94:bb:ce:8f:34:af:
67:fe:8e:78:0c:7e:a2:11:f7:70:66:5e:d6:d8:4d:07:37:32:
6e:1d:88:c0:7c:a2:b8:1b:3d:f3:8a:21:85:b3:2a:7d:ba:d0:
c8:b6:49:e5:1e:b1:65:e9:46:bf:74:4e:2d:01:05:cf:7b:a4:
92:11:66:78:63:d5:e7:70:96:72:f1:3a:c5:d1:48:ce:7b:97:
4c:44:47:b6:45:b9:92:59:c7:55:9f:98:04:b0:c6:7a:a8:21:
55:bc:a0:79:67:82:49:75:ee:57:6b:09:99:54:91:72:d1:5e:
0b:07:54:63:7a:aa:b5:78:23:be:24:28:c2:50:38:47:0f:38:
aa:f9:78:9c:a8:13:66:1f:21:cd:4b:99:a9:01:32:2f:17:4b:
31:66:6a:06:6a:a2:95:a8:22:8b:af:be:5b:57:95:79:ff:af:
86:44:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:49 2025 by rpki-client