Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: ZvUJm+8/5qK7rpunia3WSVAkmKQViIGQVUFlSaviUwg=
Subject key identifier: 26:84:B7:E5:F6:5C:41:55:22:63:CA:5C:CA:F8:67:21:C7:14:C9:19
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 0194BC3C8F68B7D6F9E78B0EBAF9F03A1027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 1B
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: sgRSeUbzywFt7CAkyNmbTXjYdc4X1KyW9LiLOgWbV+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:68:b7:d6:f9:e7:8b:0e:ba:f9:f0:3a:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=2684b7e5f65c41552263ca5ccaf86721c714c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:84:da:d6:14:4d:13:48:f5:a6:c6:be:27:
16:cb:a5:86:2c:ce:76:e4:38:06:fb:2a:1c:7a:95:
4c:6b:35:cd:38:61:4b:3d:b7:21:cb:9d:1e:13:6e:
f1:f7:51:60:1d:99:64:97:9b:a9:03:1a:8c:67:fe:
c9:cb:4c:36:a0:b0:67:58:92:50:53:33:94:7c:92:
07:e6:ea:7f:a4:f1:25:55:6f:b0:bf:dd:1b:53:b5:
e3:c8:14:5c:ef:08:88:0d:96:7b:3b:f4:a0:28:e2:
5e:bb:8f:e2:98:ba:1f:04:cd:c8:b0:d4:96:37:2c:
7a:45:13:73:52:27:30:69:81:37:39:ef:13:15:94:
d6:21:ba:3c:5e:aa:7b:73:f7:37:e1:9b:9a:11:d3:
8e:5f:4c:5c:f7:4f:8d:d6:f1:dd:00:8f:09:da:b8:
88:3e:12:15:af:e8:ae:0c:15:bf:ed:68:23:d4:c7:
7b:2a:f6:e8:a2:bc:a6:c1:bc:58:e5:81:5c:a1:d9:
96:f6:99:dd:e3:de:c3:3a:af:2d:25:02:15:09:2b:
e4:32:54:ef:0f:be:2f:8f:fa:ff:9a:c8:9e:8e:71:
61:20:b9:32:75:42:02:bb:92:5a:a0:df:ff:fe:df:
f3:f9:4d:3f:3d:30:69:70:78:00:ed:4b:51:81:94:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:84:B7:E5:F6:5C:41:55:22:63:CA:5C:CA:F8:67:21:C7:14:C9:19
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:46:e8:49:ca:a7:73:79:b5:01:ea:26:46:f4:1e:4a:5e:bd:
a7:15:de:54:b4:9e:b4:db:eb:2a:1a:66:30:81:81:43:98:9c:
9b:ab:4a:74:56:a9:a2:06:69:c0:b5:d7:ff:49:3e:28:d2:94:
a3:c6:86:5f:7d:5e:03:1a:e4:cd:ad:06:c3:b4:85:6c:90:19:
59:24:6a:1a:ec:f4:fe:97:bd:40:d2:bb:95:3e:fb:d6:40:4e:
e2:ea:92:c1:23:ea:9e:46:e2:84:87:c1:b9:80:c8:e7:d9:62:
34:3e:2f:af:2d:33:1a:91:2f:f8:a9:d6:5a:21:42:4d:fd:67:
ee:dd:3f:42:10:69:8f:b0:70:ae:74:36:7c:9a:5a:22:0d:fd:
16:d5:08:9e:46:d4:5d:5e:65:7f:04:91:ad:9f:f2:f1:14:63:
b5:47:ea:9b:fb:a9:9c:99:d9:06:63:5c:ec:74:cc:ef:3f:88:
3f:7f:72:bc:ef:05:ba:45:3a:73:99:95:25:e5:e2:e2:b1:b8:
69:60:f8:97:e4:97:3a:94:84:bb:64:c0:6e:25:bd:da:38:24:
0e:a0:fb:0d:1a:d4:a6:36:5d:8d:d4:99:20:c5:b4:93:4e:23:
e9:27:ad:42:8d:35:9e:d1:90:17:b2:bb:c8:07:df:6a:fd:0a:
d9:a8:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:18 2025 by rpki-client