Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
File: VJWo5etsnoxrNjVBB3DzG5kDSCA.mft (raw, json)
Hash identifier: DGZ7GIhRoE5JNGqeVvISMbJfjXHgzsZezkg9nOO2Wuc=
Subject key identifier: 28:C1:31:FD:E6:C5:90:9B:1A:1C:EA:BA:90:58:09:CC:19:10:25:AF
Authority key identifier: 54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20
Certificate issuer: /CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
Certificate serial: 0194BC04A481B007D8781F54EE89E33188F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
Manifest number: 02C1
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: VJWo5etsnoxrNjVBB3DzG5kDSCA.crl (hash: W0tXF4qQozIh8znRpcqf9pa+iRJHxX3ad0chZMdTmpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a4:81:b0:07:d8:78:1f:54:ee:89:e3:31:88:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=28c131fde6c5909b1a1ceaba905809cc191025af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:f9:80:52:34:b7:c9:72:7d:38:56:73:00:
cb:c7:80:7f:0e:98:4b:b0:82:a5:86:90:b7:e1:e8:
0c:79:4e:d8:52:5c:1b:d7:21:58:bd:f4:01:b8:be:
06:26:72:8c:14:ec:8c:d2:c2:87:71:c0:17:37:45:
89:f9:9d:30:85:03:6b:9e:bb:05:63:b6:c7:77:29:
2e:c1:73:51:08:fe:58:d2:1d:e8:9a:4d:dc:e8:45:
ae:ba:61:6e:f3:b5:24:d0:21:dd:cb:07:8d:28:45:
5d:47:18:52:62:99:e3:f2:12:75:5d:33:e3:d4:2a:
26:ab:aa:be:72:b9:3c:d1:0c:cc:51:a5:1c:46:01:
9a:e4:bf:b4:49:89:0b:6b:ed:53:e8:36:eb:18:28:
ee:71:f9:37:4d:06:41:da:c5:13:c4:6f:9a:d6:49:
04:f1:d6:5c:ec:b9:6b:ac:56:25:06:c5:93:57:16:
99:06:eb:c9:ff:e7:09:6c:2c:c1:cf:c5:df:6d:bd:
64:43:10:45:33:a0:bd:ff:14:3e:ca:05:f4:42:4e:
4c:48:81:dc:db:3e:a0:88:ff:65:74:10:fb:46:d3:
03:99:84:4a:02:de:ed:b3:dc:a1:42:a0:8a:af:6f:
af:0e:f6:28:23:d2:c3:28:a3:8e:6f:6d:5d:0b:15:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:31:FD:E6:C5:90:9B:1A:1C:EA:BA:90:58:09:CC:19:10:25:AF
X509v3 Authority Key Identifier:
keyid:54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:58:05:c4:29:87:1a:91:9b:dc:4b:12:ef:df:8f:42:c9:
d9:e7:f4:77:39:11:08:cf:5e:15:b2:f3:4d:bd:ea:2f:c3:44:
6d:dc:1e:86:61:a3:1f:e6:b0:ec:88:08:5c:18:35:10:b9:69:
70:7d:99:52:0c:a9:75:42:c9:48:9f:fa:51:3a:5e:7e:f1:6e:
69:17:33:59:d6:53:5b:4a:25:5e:34:ff:9e:e9:fa:ec:9a:a5:
45:45:b4:84:ca:e2:24:83:07:de:67:51:92:1e:eb:0c:0f:ac:
d6:8f:73:d2:14:58:66:19:3c:b5:49:4a:b9:56:65:c0:41:02:
b2:00:63:ab:85:6e:c1:a2:1f:6d:48:1e:be:d9:01:24:71:ec:
24:1d:05:d1:c9:18:b3:6e:b2:88:0d:17:9e:64:cd:07:3e:50:
d1:ae:5e:59:e9:5f:9a:f0:b5:23:45:b6:e6:ee:ce:33:78:e3:
62:23:60:7a:04:29:bb:94:0c:94:3c:5b:c5:7c:30:2e:f2:46:
6f:f5:f5:e4:dc:c9:f2:52:00:b1:c2:3b:d0:a5:4a:0a:b3:04:
71:65:c5:a6:70:01:60:c4:46:45:9f:96:6a:0d:70:c7:07:9d:
5d:34:07:a0:7e:3e:d7:a5:d9:2c:4a:ef:42:6d:7d:63:6e:da:
03:7a:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:49 2025 by rpki-client