Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: xzVlmG0Nr09sNANczs+1dtQRbj1J5YoU16lnCNH3OUQ=
Subject key identifier: 30:2D:B6:CA:DC:C4:63:77:E0:28:DA:D6:EE:59:B5:16:BE:31:A9:B6
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0194BC04FF0C9BE1A34327866A9530CCEC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 1E
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: bmi0frAUrxCRZ2cobxyRVd2GTmhaYlwHdr3Mak8yMJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:0c:9b:e1:a3:43:27:86:6a:95:30:cc:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=302db6cadcc46377e028dad6ee59b516be31a9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:47:0a:e8:62:39:ce:8e:d0:f9:60:fc:ff:
43:3d:46:1e:29:b8:21:37:a4:90:be:24:5e:77:2e:
87:d6:a9:a1:80:2f:1d:c7:03:c4:ff:2a:96:eb:f1:
5e:e0:0d:6d:ff:9c:ce:cf:15:8f:53:da:00:68:07:
28:80:e0:30:c8:63:43:5a:89:d8:d9:e6:52:5d:57:
b5:4b:ee:89:33:b9:f1:6e:64:1c:04:91:8f:2f:b9:
39:83:2c:7a:da:57:f1:bc:07:6a:bd:0b:45:29:0b:
13:d7:2d:0f:6f:51:24:78:92:1e:c6:d9:e8:16:88:
99:d0:23:23:2b:36:97:7a:f9:2b:ad:04:90:9c:a9:
2c:28:1e:38:e0:6d:21:e0:82:96:39:1b:6e:37:f3:
c9:83:fe:27:14:2d:05:49:6e:bb:be:1c:c6:eb:f2:
79:4e:9f:28:c3:43:bb:bb:5e:a8:c2:28:ae:8a:46:
c1:82:9d:de:b3:cc:c1:ad:19:60:bc:ad:e2:7a:0f:
2c:ee:6e:74:6a:d3:1e:38:6a:01:05:5f:0b:58:a5:
6a:c7:8e:d2:e3:f1:bb:cc:96:6b:0b:89:c8:05:a1:
49:05:78:99:4a:7a:f4:8e:ab:a9:f1:cb:f6:87:e3:
b2:8a:4c:ba:b7:61:65:7f:80:02:43:70:00:39:5d:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:B6:CA:DC:C4:63:77:E0:28:DA:D6:EE:59:B5:16:BE:31:A9:B6
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8f:f3:67:f2:d6:f8:13:96:5d:b1:9f:ba:ec:70:48:6e:b9:
0f:04:39:77:9d:b7:57:4c:53:89:17:33:8d:18:a4:48:84:b9:
f5:b2:8b:4b:1b:05:bd:29:1a:23:f8:f5:a5:36:89:da:ed:c3:
e1:93:1b:e9:aa:77:d6:71:db:4a:96:ea:76:71:e8:ba:6a:e8:
7f:8c:bd:50:3f:34:61:4c:a5:93:d1:89:41:01:8e:e1:c4:98:
5d:19:a0:d2:0b:3f:92:ce:91:b2:46:73:ac:b7:f5:78:33:f3:
e0:9d:f4:95:34:f5:af:8b:18:39:6c:bd:73:e9:78:35:86:73:
4c:2a:b0:10:52:6f:5f:92:e8:49:3a:82:0e:91:c6:2f:2a:91:
4a:09:a9:6a:ab:db:74:b4:2c:65:f3:c7:62:ee:2d:0e:a6:fa:
da:6b:12:4a:6c:ab:6e:a5:16:01:b3:76:d2:96:65:6f:dd:80:
6b:2f:f4:1e:15:6e:6e:ce:08:1a:ac:bf:80:85:ed:53:2e:5c:
6a:58:64:32:23:cf:49:d8:b5:f7:b3:e5:eb:05:1b:69:c2:1d:
26:9b:76:e5:e7:37:af:00:82:1a:e3:4b:ce:27:e5:43:55:fd:
32:85:c1:41:4b:26:b5:1d:8b:4e:5f:9c:9c:5a:25:77:4f:20:
44:31:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:49 2025 by rpki-client