Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: F5b/L4tL2qHA+XdEBHxfNzmExqvtvUTK1ybqeaYbiuU=
Subject key identifier: D1:62:BC:CB:48:2C:FA:57:5D:A6:C8:34:70:A4:B5:FD:B5:10:43:CC
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 0194BBCDE43DCEE153D2647A069A68536AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: PeBE8jxfro6x+2Gytv+kG8HLiXHiiJAaRnz28W/c/oI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e4:3d:ce:e1:53:d2:64:7a:06:9a:68:53:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=d162bccb482cfa575da6c83470a4b5fdb51043cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:f4:b6:18:6e:a4:63:2c:f9:8b:db:d0:5b:
1b:a0:75:aa:08:12:97:98:e7:be:fa:d7:43:3e:e0:
e9:3c:2e:20:bc:29:38:d8:8d:ba:94:f0:ea:9b:39:
ab:38:bc:f2:fa:9e:14:d0:7a:e5:e3:0a:b2:90:66:
9d:7f:43:63:b6:99:f1:22:26:3b:ad:ef:4b:34:86:
b2:77:ac:e5:02:e2:45:4b:4d:b6:b4:b2:34:47:e3:
00:5b:68:b5:f7:59:43:e9:96:61:51:32:9a:32:bf:
83:84:ec:eb:6a:9d:5f:fd:ac:c1:30:1b:8d:45:3d:
38:55:ef:c3:19:fb:9e:01:ee:b8:9b:6a:7a:f0:17:
ac:05:55:43:56:fb:80:9a:02:5b:5e:be:8e:d5:af:
cc:a8:dd:bb:06:72:52:3e:c6:71:4a:41:da:7e:5b:
2b:43:fd:1e:45:66:2a:00:5a:6d:e5:d4:d2:64:1f:
09:31:cc:f4:8a:cf:0b:9d:d9:67:00:0a:13:b8:46:
d9:17:76:27:36:c7:54:42:43:7f:1f:1c:6e:16:a9:
d7:cc:e3:0e:6b:60:33:ff:5d:90:6e:b3:59:be:3a:
d9:44:64:f5:a2:0d:07:51:ee:46:cd:e1:29:3e:34:
43:29:97:41:88:10:55:b6:a5:a5:33:1d:33:19:24:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:62:BC:CB:48:2C:FA:57:5D:A6:C8:34:70:A4:B5:FD:B5:10:43:CC
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:2e:99:1d:ba:f9:69:75:3a:9a:d9:d4:5d:7c:eb:7a:41:
7e:dd:36:05:d6:99:30:bf:98:5c:0b:18:fc:3d:80:4f:a7:d1:
55:38:91:4a:d0:05:23:e0:18:79:ac:98:8d:f9:a4:0a:54:49:
07:9b:0e:c2:ec:b1:62:02:b8:07:66:4a:d9:7f:73:56:4f:e1:
e6:d2:fd:08:62:2d:f2:05:6b:ac:52:cf:2e:68:b3:b9:68:be:
b6:0a:db:8f:e9:12:67:56:44:fc:23:af:8a:54:d4:9e:e0:66:
ee:71:18:12:ad:8c:49:db:9b:3e:c0:9a:29:13:e8:58:47:dc:
9f:60:bb:06:d8:e9:7b:88:3f:0b:a7:08:ad:9b:19:42:a3:17:
7b:9c:9c:f0:a3:a5:6a:ce:e7:d7:a4:f3:5d:36:b0:7a:95:fd:
01:b9:31:07:5e:c5:a7:01:d1:6f:d3:c4:02:6c:70:1e:78:83:
1e:9f:7a:ab:7f:71:b9:de:9d:e8:4b:61:fe:62:9d:10:01:08:
19:54:f9:fa:d0:1a:44:4b:53:4b:27:73:49:73:21:17:8a:ff:
77:13:86:1a:c0:c7:c9:4e:b4:81:4b:0a:24:65:cf:e6:7c:0c:
6d:ad:88:56:f2:84:31:ea:ac:dd:72:8d:12:f1:13:f5:33:f7:
03:10:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:36 2025 by rpki-client