Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: cjK9FgXPBphsF4kcdguS3UEvJSptb0fXTXgy6xdunQc=
Subject key identifier: B9:44:C2:5D:F6:09:A8:D0:B0:CF:43:2F:81:E8:EF:E9:40:A4:F7:9F
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 0194BBCE4830AEB0A4F9E87187DEA01F0A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 0638
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: /tVRxRF1V9bYx4V0s1oy9i1BvwmkBsOKfSiz7sYh7mE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:30:ae:b0:a4:f9:e8:71:87:de:a0:1f:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=b944c25df609a8d0b0cf432f81e8efe940a4f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:88:49:a1:e6:b2:a6:a5:e8:d1:89:ce:1e:
ea:91:23:e8:27:da:e3:35:9a:21:8c:63:bf:d0:ac:
1d:d9:9f:88:da:fe:34:e8:70:82:c9:03:2f:6a:42:
13:63:d0:39:ed:7f:6a:ad:dd:e6:a5:d5:e4:a4:81:
86:fd:63:87:52:3f:c1:4e:4e:35:c8:07:da:5f:6f:
71:6d:73:08:0e:8e:90:14:c8:ea:79:b4:e2:59:6a:
82:7d:65:f6:3d:b7:02:ea:ae:86:55:f7:3d:d4:67:
05:a6:6f:56:69:b6:bb:7f:e9:ad:5e:cf:b1:4f:79:
06:d2:75:08:aa:2c:18:4e:0d:66:65:50:e6:6b:8e:
78:91:4c:34:2d:4f:c0:59:2a:76:5c:43:e3:1a:fb:
4d:93:78:43:59:41:8b:a6:b9:86:13:df:4d:85:3c:
04:ec:21:80:b5:45:03:ec:75:ae:77:b4:eb:5e:fa:
37:e5:c2:77:de:cb:0a:18:7a:b7:13:8a:16:69:48:
95:88:32:96:f8:00:a8:c1:a9:45:25:43:0b:db:aa:
57:8f:9a:b9:24:ab:82:b9:06:4c:a5:74:28:89:d3:
56:3f:fa:69:63:bf:f1:6b:09:0a:aa:c1:b7:ec:a3:
60:68:4b:2c:b2:52:2c:86:eb:15:ca:ba:ac:ea:79:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:C2:5D:F6:09:A8:D0:B0:CF:43:2F:81:E8:EF:E9:40:A4:F7:9F
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:d3:3a:47:e3:3f:08:b9:7f:ee:b9:29:4b:96:7f:2a:f0:
76:de:20:29:76:f2:d8:a4:f5:d3:f8:4d:60:34:bf:94:34:89:
a0:1d:b3:11:2c:89:18:1c:21:8b:e6:73:0e:9f:aa:06:c1:76:
85:5b:c9:33:e8:3c:08:d8:42:46:52:7c:f7:1d:a6:86:2b:4a:
f3:8c:81:69:22:07:25:e2:ed:f9:b0:8d:12:bb:c3:cd:66:4a:
e9:7d:59:ac:fe:8f:c1:3a:06:dc:04:66:80:0d:6c:05:e9:01:
ca:ef:68:9a:2c:3f:4b:37:8e:cd:ac:9a:86:6c:5f:b8:3c:39:
b2:91:11:04:e5:98:72:05:79:21:cb:d3:82:bd:bf:f8:6f:49:
2c:91:26:bd:4e:59:3b:ec:90:89:d3:c0:89:22:2f:2f:4c:1c:
90:01:e0:1a:91:5f:59:a2:9f:ac:0d:e7:eb:35:aa:8a:e6:90:
67:e5:a4:19:89:6f:ba:d7:8a:a0:7d:9e:77:5d:0d:ad:3c:25:
96:2f:3e:9a:ef:80:5e:9b:dd:76:48:5f:98:ce:04:80:e4:d8:
4f:2b:a4:64:ac:f3:e1:71:b4:6a:eb:4f:c7:c9:5e:d1:36:45:
f7:7d:0b:2b:f8:23:ea:e9:c0:f4:47:f0:62:87:34:bc:a9:25:
95:c7:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client