Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json)
Hash identifier: F62VgS1QNaItsJKr+xABe4RvSkJ9wFacmKpRFhWTg0o=
Subject key identifier: 1B:50:39:C4:D4:41:48:0E:B0:9A:54:82:13:27:AE:3B:6D:F7:3E:14
Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0
Certificate serial: 0194BBCEC4200783756E11196EFAF5E79CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
Manifest number: 0A82
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: nuHJEfpI6kOBwVBIBFQ/ctNvtQYN9eoFOVdvdg1fVXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c4:20:07:83:75:6e:11:19:6e:fa:f5:e7:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=1b5039c4d441480eb09a54821327ae3b6df73e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:7f:b6:25:b8:69:b5:9d:ab:e0:c7:b7:fb:
ab:3e:b8:f9:31:29:44:73:04:e0:11:e4:da:28:e6:
ef:c5:ba:b8:22:55:57:91:ec:0a:36:9a:38:51:19:
d3:58:b2:06:98:75:4b:5c:1e:35:34:0d:03:62:bd:
33:a9:1d:33:51:02:36:2a:81:7e:dc:bd:f7:86:17:
f8:c1:ed:f0:1a:8b:44:c1:a7:c7:f1:80:0f:4b:d1:
a3:23:d3:ee:59:d6:0a:1d:55:e5:1d:f6:2d:5c:4e:
ff:15:20:ff:d9:89:0b:07:fe:89:98:78:87:18:65:
df:04:77:e0:89:88:89:91:84:13:ce:67:96:76:a9:
64:a2:1c:39:52:b6:72:8a:02:68:bd:5f:5b:4d:4c:
1a:04:0b:6d:be:cc:8d:58:a7:85:8e:80:b7:af:8c:
73:1f:ee:e4:68:84:ae:ed:e3:38:a3:2e:39:da:35:
ef:61:8e:cd:ce:e0:ef:24:29:8d:59:a5:d9:5d:90:
83:4f:24:5c:ce:28:8d:03:63:f4:2d:1b:c6:48:35:
3d:d7:45:de:51:15:01:13:95:c7:1d:d6:b2:4e:c9:
76:5d:33:e8:bf:fd:c3:17:cd:93:69:7c:a8:ee:f7:
67:be:b0:7a:64:6c:1d:06:a7:94:52:11:1e:93:92:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:39:C4:D4:41:48:0E:B0:9A:54:82:13:27:AE:3B:6D:F7:3E:14
X509v3 Authority Key Identifier:
keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6c:99:bf:20:c0:a2:11:8d:b7:82:95:cb:65:6f:03:00:41:
59:a2:d6:cf:09:0d:9f:cc:1d:ac:c9:72:c7:7a:e9:f5:8c:1e:
f0:36:90:3e:9a:78:ec:88:b6:53:19:06:ee:c6:ed:eb:05:4f:
90:bb:40:07:04:96:7f:d0:9a:08:4b:ed:cd:34:ec:20:cf:39:
21:58:a0:3c:c8:27:5b:a9:02:4b:11:4a:83:69:4e:96:f3:9f:
18:5e:79:3a:ee:e1:74:7b:b5:64:dc:80:d4:b8:a0:75:03:07:
96:cd:46:64:64:fd:87:36:72:80:6b:c5:ee:87:e4:c7:b3:16:
bc:5c:e7:91:f6:82:5c:01:8b:e3:a4:5e:b8:df:3c:75:c3:c7:
9e:a6:34:62:7c:bd:01:d5:c0:cb:5e:90:00:05:80:a2:62:fa:
1f:a9:29:26:8a:23:eb:8a:fc:a7:55:c1:27:de:e6:d5:7b:0e:
1b:4f:57:98:d8:92:06:9a:eb:c1:bb:34:06:de:33:24:0c:d1:
b5:f4:07:f2:e0:40:37:db:27:f2:46:1b:ee:6d:e3:6c:54:84:
d1:2c:ad:a6:55:9c:ec:45:61:46:61:f0:cc:e5:34:df:e5:f1:
88:74:4b:af:69:6e:3c:11:10:9d:d1:ea:1d:1a:07:c3:51:6e:
e9:d1:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:22 2025 by rpki-client