Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier: 1zxf8E0xHZHj8cNMVmZtOJxsz/xvhGOTl3I9LEd+W6I=
Subject key identifier: 48:FC:49:7C:CC:4C:15:BE:DA:45:9A:EF:61:D4:4C:EE:EA:A7:82:1B
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial: 0194BCA9C7B25D828A461EAE96F636E4DA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number: 0825
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: 28Sn8o1RUgZDhfhiCde+aQLKftbtA5/sg56LuYADKP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:b2:5d:82:8a:46:1e:ae:96:f6:36:e4:da:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=48fc497ccc4c15beda459aef61d44ceeeaa7821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:85:81:bd:b5:93:69:40:31:cf:97:57:23:
bd:8d:15:ba:fe:a1:6a:75:fb:a7:d9:09:87:27:c7:
f8:3c:ba:51:3f:b7:ce:9d:c7:b5:45:3c:4c:88:80:
70:eb:13:32:7e:e8:55:c2:ee:4b:4b:7c:51:46:a5:
f9:6f:22:4f:b5:41:60:ce:e8:08:b5:5d:b3:b5:c4:
a5:de:9b:79:f6:9b:07:a0:06:14:d9:8a:47:c6:a6:
9f:b0:ee:37:00:84:d7:bd:80:81:5f:25:6b:b2:28:
ca:80:51:0b:ae:6f:b3:eb:22:c4:54:0a:6d:87:33:
f9:c1:16:96:06:60:80:7b:09:49:fa:11:c8:5e:a9:
22:95:0f:7d:97:77:c5:b6:21:26:1f:a0:3b:df:c1:
db:24:8c:e7:fd:10:8d:5d:2a:80:f9:41:c9:9e:17:
d0:46:9f:f5:ed:34:fa:a4:ed:3b:f9:06:09:6e:41:
a7:c5:f7:59:e3:3c:2f:d7:e2:90:26:8f:b2:f6:5a:
1b:85:16:e6:79:4d:1e:f8:c5:c5:9c:09:f9:cf:5f:
4a:20:55:84:84:ff:29:c3:30:55:47:fb:f3:c7:ed:
5e:6d:e4:32:f2:16:76:37:8e:1f:74:13:4c:f9:0e:
97:b3:50:8b:d5:98:bd:2b:60:6d:06:72:af:b4:8c:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:49:7C:CC:4C:15:BE:DA:45:9A:EF:61:D4:4C:EE:EA:A7:82:1B
X509v3 Authority Key Identifier:
keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:33:e7:40:7a:37:79:d2:10:76:0b:74:36:05:55:14:f1:85:
07:d5:47:4f:54:8d:6e:1e:d7:ab:0e:ec:99:55:e1:2d:41:5c:
12:1c:38:a4:96:49:2f:1f:95:e1:94:86:ba:0c:4c:20:00:85:
1c:49:6c:88:ed:9e:ae:ca:2f:67:c2:4b:67:40:b2:9f:eb:02:
f9:a4:64:78:2e:be:80:d0:48:8d:1a:78:3c:88:9e:a3:5b:6b:
35:31:c7:8a:69:e3:c4:70:1f:13:39:86:70:ca:5a:62:bd:a6:
07:28:c6:5f:f5:ff:3b:3f:e4:2a:66:79:41:67:3d:2f:ab:72:
61:b4:93:3f:32:26:d3:b1:fd:fb:46:46:70:05:55:00:87:a1:
46:1f:3d:d4:53:7b:92:52:41:dd:1c:fc:60:3e:39:0d:bc:d9:
38:d9:e4:d7:13:81:01:c4:cd:01:17:2c:f9:c9:13:5e:9b:9d:
85:aa:d4:4f:07:9e:60:25:13:15:0c:b2:a8:4c:f3:a5:cf:96:
12:42:87:77:34:70:4d:cd:bf:d5:b9:47:fe:7d:66:bb:f2:50:
1c:3e:4e:3f:d5:31:0b:24:f4:bb:cd:02:4c:e5:c6:de:73:e9:
16:b4:61:e9:d0:1c:1f:56:83:3e:25:1d:14:ee:d0:6c:5d:74:
79:cb:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:14 2025 by rpki-client