Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: +xrDS4OoCpLVB0vPYr4Aj2eRehJNEIT2talgDkxJ1as=
Subject key identifier: A7:7B:F3:E9:C0:0C:4D:E0:11:2A:77:30:F0:31:F5:AA:10:BE:D5:A0
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 0194BBCE89ABBEFC1134FE2EE3EBFF70CFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0AFE
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: btf/ZpfXE7w6+Pw2m04oR+JtKvjq/K4phmkoPbxNHx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:ab:be:fc:11:34:fe:2e:e3:eb:ff:70:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=a77bf3e9c00c4de0112a7730f031f5aa10bed5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:ab:b3:33:a3:ee:83:cd:ab:45:84:4f:46:
4d:e8:43:6b:08:d8:ee:93:97:a9:f0:11:dc:a1:59:
a9:cc:62:1a:15:5e:ed:bd:a9:6d:b6:f6:cc:96:07:
26:24:14:85:de:13:c1:5e:5c:24:8a:fb:41:ab:92:
1b:7e:1d:a0:2d:88:54:df:c6:41:71:49:40:42:de:
1a:be:5b:45:70:20:a3:f7:c5:62:a7:92:51:7a:05:
c8:53:b6:8a:e5:d4:d0:e5:48:74:e3:27:5f:87:17:
55:f0:39:51:82:83:0a:e7:6f:5c:5f:76:1b:1c:ee:
d8:d1:83:36:2b:f2:7e:76:04:42:22:46:b9:f6:02:
a5:73:cd:b5:4d:1f:f0:59:b2:84:00:be:0c:e5:a9:
2f:c8:f4:fe:20:9a:58:fd:f8:bf:e3:2e:43:a7:b4:
39:7a:6f:ce:12:77:f4:b8:dc:c4:55:a1:15:89:ff:
fd:de:05:87:78:a6:09:96:5a:a0:b3:98:20:2e:16:
24:69:0b:26:a8:ce:56:81:53:96:39:0c:87:e6:f8:
21:ad:dc:36:97:2f:eb:a6:04:c1:af:75:02:b5:31:
a6:29:f8:cc:3d:ee:78:73:6a:c5:c0:3f:62:67:68:
ee:2d:62:5f:b8:6b:c1:55:79:ea:d0:5b:a9:30:f6:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:F3:E9:C0:0C:4D:E0:11:2A:77:30:F0:31:F5:AA:10:BE:D5:A0
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6e:93:63:dc:9f:f9:3a:62:c8:35:12:79:68:eb:7c:68:43:
16:ee:77:73:2b:df:2e:a5:fb:6e:02:7d:f8:1d:a8:45:51:17:
11:c0:7b:58:2e:3c:c4:af:67:de:27:fe:34:24:df:b6:c2:cc:
13:b8:6e:c5:c9:d1:4f:6c:64:9e:64:8a:27:c5:5a:13:35:8c:
45:6c:7b:2c:53:53:38:78:33:e9:1b:9a:d8:a9:58:0f:00:36:
47:f2:48:e8:5e:3e:7a:f4:e7:90:0f:bd:49:2b:0e:ea:28:1a:
29:4e:88:42:23:6d:c1:91:3e:11:5f:19:6f:c6:0c:21:b8:d5:
b5:4e:13:f8:f4:90:5e:fd:23:78:19:12:35:f6:b4:c6:c7:f8:
16:54:1a:71:a4:09:34:20:cf:bf:ba:9b:81:6a:83:68:17:14:
2c:5c:e2:cb:da:78:25:20:21:06:44:42:34:13:cb:c6:90:41:
73:5b:07:85:48:b1:35:d4:ee:c4:ff:fb:6a:09:be:5b:91:49:
fb:3d:55:5d:48:d7:1c:be:4b:0a:db:b9:dc:39:c5:a3:2f:04:
f1:1e:d9:04:2b:65:b2:bf:3c:60:e0:26:af:0d:c9:09:19:a3:
1c:3e:bd:2f:40:27:a2:38:2b:a4:42:34:5c:ce:00:ac:e6:57:
2d:31:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:29 2025 by rpki-client