
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File: rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier: KJAO9a02620NV0JtuR6lxgWYUH/6aeKZTDwKC6JlZ/E=
Subject key identifier: D4:EE:A0:79:27:CC:C7:BF:FF:F6:AD:E3:68:DD:F7:86:BC:C7:A7:9A
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer: /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial: 0194BBCEDEF8C4BC488E775354F0E7F5F5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number: 0C33
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: V4u4cjAlgsE9maX40c6kUOsP+vJ6Jhy23XCZjG5odFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:f8:c4:bc:48:8e:77:53:54:f0:e7:f5:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=d4eea07927ccc7bffff6ade368ddf786bcc7a79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:1e:32:d2:4a:4e:e7:ba:39:6a:b6:46:b1:
0b:ed:a8:29:7e:c0:8c:7c:7f:6a:58:de:00:ea:95:
8a:c7:38:a6:b5:b6:32:8d:d5:cc:e5:e2:c7:0f:5b:
ab:d3:25:3d:c1:14:bb:6a:e5:06:b8:2c:49:ca:5d:
1c:9f:21:85:9e:eb:8b:e6:36:60:e0:56:ab:06:97:
f2:8b:3a:3a:73:7d:9e:6f:48:a2:9e:38:78:5f:01:
e0:be:c3:10:57:8f:d5:1f:bf:55:70:90:b1:ce:8a:
a2:cd:80:56:6a:4d:f4:e3:b4:51:ee:a5:0f:ec:ed:
5a:9a:26:4b:59:f4:21:80:0b:1f:80:67:74:8a:01:
2e:0d:d1:b6:4a:5b:ae:0e:ee:73:03:02:56:c4:49:
88:96:f4:8f:40:f1:81:92:0e:41:67:09:85:99:91:
f8:5e:fe:26:01:63:9e:8f:43:26:a7:16:1a:e9:7b:
f8:c4:9b:84:e9:54:12:11:e8:09:d2:c7:fb:3f:35:
db:81:8e:16:e7:f8:58:4a:c4:8e:df:cf:3b:38:46:
75:fc:c3:88:3b:d6:31:df:60:50:ed:d8:ab:2d:b4:
d0:34:c8:6c:15:bf:21:46:35:58:b1:7b:4f:d4:03:
8e:77:c6:67:42:cb:9e:08:87:34:1e:de:a1:8b:56:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:A0:79:27:CC:C7:BF:FF:F6:AD:E3:68:DD:F7:86:BC:C7:A7:9A
X509v3 Authority Key Identifier:
keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:80:c5:36:58:1b:60:a6:3e:cc:1d:03:b6:8c:32:5a:e4:fa:
45:1e:3e:77:fd:9c:26:06:3e:37:11:9b:59:0c:c0:9a:fb:60:
ac:0d:dc:13:87:34:df:3f:5a:79:ec:15:ed:d4:60:6d:cf:0b:
a5:64:00:5e:3c:f0:92:0c:f2:68:cf:45:d4:98:f7:b6:d0:27:
b5:5b:6d:6c:c3:6c:8d:ff:2e:cc:0d:05:c8:6d:c2:83:58:64:
66:f7:fb:8b:cd:b2:e8:c7:74:c0:0a:61:90:c4:b9:cd:c8:ab:
bb:8c:c6:99:70:96:4c:ad:0f:d5:9e:af:fa:7d:14:86:fa:c6:
dc:b4:77:7d:3b:a2:ea:44:fa:f9:de:dd:9b:37:df:fa:d6:1a:
4b:a3:12:7a:00:25:4d:09:05:bd:ba:28:46:41:07:79:92:e8:
21:4e:2e:8a:3f:12:21:9b:5a:5a:e9:28:fa:e1:2c:26:0e:e5:
42:05:84:69:16:da:be:53:cc:ec:af:a7:2e:b1:6b:a3:0f:17:
68:35:90:6f:59:91:9a:de:10:67:eb:a6:85:00:9a:99:4e:72:
da:0a:61:fb:1f:71:4d:7c:87:76:90:89:25:53:fe:32:d9:96:
b4:3f:02:9d:2f:3a:56:55:44:c3:6f:b1:a2:3b:4e:1a:69:db:
e1:88:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:03 2025 by rpki-client