Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File: vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier: qNlVebrlPY98hu25lsFKlCSfXnoA+KjJEgY2BfAel2k=
Subject key identifier: C4:D5:D1:DD:75:D0:E6:35:E3:2A:A6:9F:B5:F1:60:C3:78:25:4E:2F
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer: /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial: 0194BCAA136E8D1D585439DE8836EEB7E64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number: 0456
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: ujZoNDcFgFcNmxoTr8FrTHzfp4iX0LpI97cZhLWu3ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:13:6e:8d:1d:58:54:39:de:88:36:ee:b7:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=c4d5d1dd75d0e635e32aa69fb5f160c378254e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:c1:f2:b1:c8:91:38:2c:c6:4b:9c:cd:7c:
fe:8a:81:1d:d4:3d:d2:cc:1f:e1:05:3c:b9:16:1a:
1a:f5:18:e6:fc:6e:d3:64:12:6a:32:ff:d7:c6:7a:
ea:75:00:65:80:04:94:fe:fa:ac:cf:2a:02:7f:f9:
bc:b5:2a:fa:4d:71:33:6b:0c:1a:04:51:98:38:81:
8c:6b:5f:36:cb:e1:4e:41:ae:17:c6:17:95:db:b4:
5b:f7:bf:74:14:84:2f:95:e0:63:5c:ea:e4:f4:ac:
b6:dd:eb:2e:12:6b:cd:80:67:db:d8:f2:36:0f:42:
74:43:f9:59:0c:26:7a:fb:72:00:0c:20:5a:61:ec:
1d:e9:9f:62:9f:56:98:a4:a1:79:7f:dd:ad:8e:44:
15:7d:ee:df:20:77:80:33:3f:35:ad:ae:1e:36:b4:
4a:e4:f9:a5:d2:d9:34:db:ae:e9:64:3f:57:f6:c0:
0a:67:79:c1:86:91:20:4f:65:e3:bb:be:19:b8:87:
98:ba:8d:69:46:b7:04:bd:46:6a:67:9b:b8:1e:89:
35:2c:03:e9:95:ae:49:a2:b2:09:7e:9b:e5:f0:4a:
80:df:50:b1:72:d4:8e:c2:92:a9:af:17:0b:51:ed:
b1:8a:b3:44:45:f2:f3:c6:4f:a9:2c:23:ee:18:95:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:D1:DD:75:D0:E6:35:E3:2A:A6:9F:B5:F1:60:C3:78:25:4E:2F
X509v3 Authority Key Identifier:
keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:39:1d:0e:5c:6d:0e:c1:bc:eb:de:eb:3b:b3:3e:a9:ab:fc:
5d:5e:5a:a9:1b:fa:cf:1a:b6:c5:b5:28:cd:6a:11:ba:e1:c3:
64:1f:fd:42:79:ca:2e:1a:75:fa:75:53:3f:e6:29:7e:6f:85:
2f:ef:c6:1c:d2:dc:e7:f5:bd:ee:91:a6:9b:8f:72:be:27:34:
07:ab:63:ad:c5:97:d3:d1:1f:da:1f:f9:2b:82:f1:4f:1f:7f:
b7:f1:f9:d5:ae:8f:5a:89:5c:be:16:3c:0e:60:bc:57:c1:2c:
68:b3:8e:31:31:e2:35:ae:22:5f:e6:a6:54:7a:be:37:47:90:
49:aa:79:1f:ed:7f:c7:6a:24:af:27:bb:1f:53:70:e3:19:33:
e3:06:69:0e:b6:02:54:31:1b:91:b3:4d:15:4b:74:54:02:93:
a1:8d:13:95:97:2c:aa:74:a8:3c:e2:0f:0f:8d:c7:23:ba:37:
e7:04:16:4b:67:d2:c7:ee:4e:fa:29:9a:d8:e5:11:84:02:c2:
5e:ef:23:f1:e7:19:86:ab:76:4c:22:02:9d:8d:dc:66:93:12:
92:e0:c9:cc:2a:20:70:ec:8d:21:2c:2b:60:cc:33:aa:17:f0:
b5:8e:e8:a0:58:8c:88:44:c8:b8:83:52:76:bb:b0:ba:6d:9b:
b6:c3:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:17 2025 by rpki-client