Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: lY85fonX6dL6EFW5GL9NG1Vq612zVZedTDNnao1NyXw=
Subject key identifier: BC:01:AA:CA:7C:2C:24:B0:B0:22:57:A2:A4:19:6E:A1:3A:1E:40:F3
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 0194BD17B8B4F2344B0F19682E81B2CA2B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0A7F
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: N3//B6VLjhbZSiEnjJs8zP0cugVFo1ao9swis1PdLYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:b4:f2:34:4b:0f:19:68:2e:81:b2:ca:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=bc01aaca7c2c24b0b02257a2a4196ea13a1e40f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:38:b3:d4:50:3f:18:53:4e:f5:d2:05:b0:
15:90:c3:8d:1f:14:d0:13:7e:f2:0b:cd:a9:2e:fe:
43:d0:01:78:86:9a:0e:50:7a:bb:2b:8b:13:83:9f:
dd:bf:1e:e7:10:e7:ee:2b:7b:e7:0f:50:64:4b:e2:
68:28:78:4e:51:1b:9e:db:b6:6e:d9:20:66:6d:5d:
f3:36:e9:80:1f:8b:db:9d:fa:40:d9:c5:ca:1d:30:
02:8b:cd:14:85:ae:07:0d:09:3e:c7:3f:18:f5:cf:
ab:f2:3b:be:60:fd:7f:45:fa:74:19:ce:11:dd:f1:
22:fd:78:f1:03:9e:9a:5b:f7:4d:40:aa:61:aa:38:
51:35:b5:13:b8:1f:fc:c1:8b:e5:12:56:75:92:cb:
df:49:90:59:72:ed:63:02:b0:ab:ba:f0:07:c9:33:
e9:a2:25:c9:e0:a1:9c:78:6e:0c:e9:9f:d2:5a:d9:
8f:e5:fb:81:0c:40:72:b8:c2:d0:d2:9d:38:d1:89:
e0:41:a2:8b:2b:65:6d:8a:0d:20:a1:15:d5:5d:46:
b7:ce:f2:42:96:9d:03:3c:90:74:18:55:51:27:8a:
4e:64:4c:90:52:fc:24:81:18:11:1a:17:aa:b5:61:
c8:6c:2b:49:c7:72:6c:03:ec:17:d3:e3:7b:e3:d7:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:01:AA:CA:7C:2C:24:B0:B0:22:57:A2:A4:19:6E:A1:3A:1E:40:F3
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:18:ea:34:03:6d:59:33:d0:9c:47:13:cc:e0:69:2c:c4:6d:
ea:5f:3a:7d:43:e0:6a:2a:b8:2b:76:d5:cc:b6:e9:cc:bb:15:
24:79:0b:27:6e:44:9d:58:4a:71:9f:fd:98:52:7e:f9:bb:87:
ca:6b:e9:da:0b:ab:1b:93:02:d1:da:aa:ee:56:7b:09:bb:d3:
55:7b:18:e4:f1:d5:46:e3:88:5e:f6:79:3e:50:95:ce:1b:48:
4e:9a:c4:28:61:d8:fd:8f:dc:71:1b:b4:f1:02:45:08:e0:a1:
15:7f:13:4a:b5:6f:90:77:d4:d7:3c:f2:29:32:35:3e:92:0e:
f1:a8:6e:cc:2b:0f:ed:4b:f5:aa:c5:ef:13:3e:dc:47:e2:54:
4a:1e:f2:a8:33:bf:db:47:83:2b:58:d2:d8:78:14:9a:e3:cb:
3b:c9:11:5d:f9:46:d8:c6:e8:94:42:4a:0b:25:6f:f0:ae:ee:
02:75:3e:07:2a:08:ce:06:83:a1:b2:ac:1c:a0:29:de:cf:ac:
d9:dc:b2:bc:11:65:9a:09:ed:b9:88:94:c4:10:f7:9d:e0:82:
a2:ec:3c:c9:dd:50:1d:9a:b4:d8:31:cf:ce:89:64:ba:cf:a9:
0f:4b:2c:f7:db:7c:58:71:77:7e:19:c0:f2:97:bb:65:8c:bb:
de:9f:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:21 2025 by rpki-client