Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: PIEc7bAu04fvYXRMmjoqHIQqxa5A1SQseS2uHxcwHF0=
Subject key identifier: 72:13:23:D7:74:B1:66:49:E0:5A:32:04:82:DC:5C:72:6E:BC:D7:CF
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 0194BBCDEA4A9DBE9FF2BEE261993A980E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 0DEF
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: R7CGwq24mshhKZX2Rvg6maQgTftiRiKT5YaP6dsjIkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:4a:9d:be:9f:f2:be:e2:61:99:3a:98:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=721323d774b16649e05a320482dc5c726ebcd7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:83:e4:52:60:f8:35:c0:a2:ad:13:01:6d:
4b:2f:3e:dd:b0:a7:af:1c:6a:1d:46:47:75:e5:66:
00:8b:fb:23:9c:38:00:4a:c1:31:82:64:59:6a:61:
96:bc:a6:d8:02:0f:5d:db:77:77:a9:2d:88:6d:91:
19:c7:d9:30:2f:14:d9:91:7a:03:70:2b:7c:c0:dc:
b9:42:e1:ba:63:66:8b:cb:eb:9f:4a:69:d2:e1:82:
e9:d0:4f:46:4b:15:ee:51:06:e0:9b:60:5e:e2:79:
58:ae:ae:af:67:44:7e:33:b0:bd:28:37:f2:cc:92:
20:bd:6c:dc:7a:65:8c:b1:25:d2:78:c7:3e:e9:8f:
c9:07:e8:16:f2:d7:a8:6d:a8:a9:d2:8a:e1:68:a8:
d9:88:b9:fd:89:6c:4a:c2:6e:ed:d2:f8:20:98:96:
6d:61:14:b9:c3:8b:7e:f7:a1:6c:12:7b:61:18:d6:
4f:1b:a8:1d:14:1c:73:37:45:58:ea:dc:c4:0c:68:
5b:f0:cc:a4:52:16:9e:b8:c9:1a:90:54:8a:ec:f8:
68:cc:89:90:35:6e:f7:1a:40:50:bb:ed:e2:ee:60:
af:02:ca:a7:ff:25:88:2e:8a:27:8c:8b:94:f0:b1:
42:77:21:ae:77:4e:5b:3b:db:e9:04:bb:ed:ad:2e:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:23:D7:74:B1:66:49:E0:5A:32:04:82:DC:5C:72:6E:BC:D7:CF
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:8f:ea:0a:e8:f0:02:8d:57:ad:3f:8f:80:2f:6a:9d:6f:
2b:07:b4:d2:af:f3:04:93:de:62:88:1f:dc:d4:6a:74:a0:66:
27:4a:6e:71:e4:df:e1:a0:5a:65:97:ac:b7:51:d6:a9:7d:76:
3d:44:8b:4e:b6:27:63:49:1f:e9:10:8e:94:2b:6b:ed:82:28:
04:51:d2:4c:d1:88:20:d6:39:59:96:d5:76:56:33:7f:37:d1:
e3:f2:63:67:2c:c7:a8:e6:86:71:b6:55:c7:ab:26:94:48:35:
f8:f5:8f:97:e9:dc:e6:6c:fb:f5:63:61:7c:49:3a:e2:eb:54:
3b:bc:1e:87:1a:9e:a2:1a:41:36:ed:17:6d:28:8e:84:97:9c:
1a:76:e6:29:9d:6a:21:e9:28:dc:5e:a6:0a:b6:f8:bf:e0:2e:
02:d1:75:ed:a3:28:99:88:76:8c:8e:a8:22:c9:38:46:ac:5c:
15:94:2f:5c:23:0f:78:5e:e7:24:f0:ab:8a:67:ec:48:17:10:
a4:88:db:41:c0:ac:3a:75:d8:a2:db:e8:6c:d9:34:1e:90:aa:
5c:6c:fd:58:8e:b0:c2:aa:9a:12:4c:b2:96:f1:30:d2:dd:e2:
9c:2d:27:3d:e2:5c:29:29:b2:5a:f7:65:56:b7:7d:6f:93:5e:
ab:d8:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:26 2025 by rpki-client