Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File: VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier: Duqp+pe8KQUmhCHeVgTyDSX1akwPGlAEET3hOQ8h+uI=
Subject key identifier: 44:CC:42:36:04:4B:52:F6:6E:D9:7E:F2:79:76:72:03:6E:41:21:06
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer: /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial: 0194BBCEEC4A6B5F8F097B269CA0EA542229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: r4r41W7mlZ+DR528cctZ4/gXbadg8dGfX+7veokIwEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ec:4a:6b:5f:8f:09:7b:26:9c:a0:ea:54:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=44cc4236044b52f66ed97ef2797672036e412106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:cb:66:b6:7f:e3:1c:d1:db:15:8c:92:3e:
d9:bc:58:50:9f:98:e5:86:f3:1d:52:05:33:52:6d:
2d:ec:be:1b:42:8f:0e:ea:21:6b:33:69:44:f5:a2:
c0:35:53:92:5a:84:61:7d:55:1c:b9:14:93:5f:14:
6a:9d:cb:a9:c3:8d:bb:73:86:fa:b9:df:40:4b:42:
cc:f0:76:4e:82:71:5d:1e:57:3c:ec:fd:72:2a:19:
90:87:68:17:3d:85:57:7b:1b:d1:cd:13:fd:e8:48:
8d:f7:6c:49:74:cb:42:9c:b7:32:48:f0:bd:4c:1e:
47:ec:1e:de:aa:38:ff:fb:9a:a0:6f:7c:b3:00:7b:
e6:d8:dc:b2:88:15:cf:b7:e1:e8:46:d8:0a:f2:2f:
2c:39:ca:90:0a:66:c7:4c:3d:1b:78:4b:89:8d:e5:
a0:a7:71:17:df:91:9c:d9:9f:83:e1:82:e9:d6:1a:
60:9d:ee:e4:a9:88:fa:9b:dd:55:76:f1:f3:d8:eb:
3c:4b:ad:94:32:27:d0:1e:4a:c8:aa:0e:f4:81:c6:
f6:b9:c1:8d:1d:a9:3f:66:11:df:aa:c3:89:17:66:
6e:dd:2c:f7:7a:04:1e:89:f1:af:2f:1a:49:00:f6:
9c:7a:b3:c1:d3:28:13:2a:5d:a6:ed:50:63:f2:8f:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:42:36:04:4B:52:F6:6E:D9:7E:F2:79:76:72:03:6E:41:21:06
X509v3 Authority Key Identifier:
keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9f:27:9b:32:31:1e:c2:36:ec:23:76:25:3f:ac:4c:6e:59:
06:7a:b2:12:59:67:a0:1a:32:99:30:97:01:2f:78:cb:42:b1:
b8:e8:e9:65:0f:0d:d4:9f:52:38:d2:4c:70:58:86:6d:3b:cb:
f0:be:80:37:5c:eb:67:b4:5e:32:a6:ae:fa:53:39:e8:18:5e:
7d:fc:1d:8c:6b:91:bc:54:c7:5c:d8:da:ab:72:c3:fa:c2:86:
54:30:28:03:19:2c:ac:b1:e5:91:dc:10:e3:d2:c6:d4:c4:d9:
4e:a1:7e:b5:e5:b8:fb:82:79:59:6e:fe:31:96:5a:3b:aa:17:
98:ac:66:1f:43:c5:bc:34:fa:e3:8f:ed:0b:56:c5:df:d2:fd:
7b:b9:ea:29:4f:ee:72:19:40:75:d0:6a:a0:36:e3:e4:92:12:
f0:13:6c:72:7b:69:62:b6:19:cd:12:fe:58:fc:8c:8f:e2:f1:
f2:1b:49:e3:ea:b4:5a:04:b3:72:4b:89:da:f1:fd:bc:8e:34:
f7:5b:f0:de:83:0a:7a:43:7d:b5:17:a4:e1:86:aa:7f:47:a4:
cc:fc:03:22:10:1a:8b:b3:1c:be:e3:73:9a:e6:1c:b0:13:09:
59:1b:a6:3d:dd:0b:cf:50:dc:f5:97:f5:c6:fb:8a:7f:be:b1:
56:5e:f0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:49 2025 by rpki-client