Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: FrvNrldxsQptYF+MfwC8XIF2J8qccavjpZFN0aQ7CYg=
Subject key identifier: EF:EC:17:46:C1:0F:C2:2D:77:F3:44:C9:2C:20:27:DB:3D:6B:32:8C
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 0194BCAA16C382067E22337F23F8D5B8C7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 050C
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: yy6f36sbgJTd1yIAeMIFM0rxOnhV+k7wtM5dz/GUsIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:c3:82:06:7e:22:33:7f:23:f8:d5:b8:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=efec1746c10fc22d77f344c92c2027db3d6b328c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:45:b7:d2:99:03:16:db:19:dd:21:d0:09:
1f:a9:f6:b5:26:9d:77:d8:8c:ed:b6:38:32:b1:4f:
38:1f:a3:b8:4d:72:e2:04:35:a1:ad:18:5a:ca:5d:
fd:36:87:0c:6c:13:26:9d:b9:03:46:b2:6d:59:48:
ae:13:1f:a5:c0:f7:30:d1:88:67:03:11:80:8a:1a:
24:e0:7c:34:f4:06:06:7b:cb:5a:ad:15:75:1a:e1:
c3:1a:ff:c9:28:72:38:e8:ba:81:07:87:4b:6a:53:
07:ce:71:85:7f:38:9d:3c:9b:fe:1c:97:a3:62:49:
76:d7:f1:db:c6:e0:57:f7:13:87:4e:0c:b4:49:8d:
bb:4d:56:80:fd:52:b7:27:1a:be:b3:5f:fa:ce:76:
ef:55:4b:1f:1d:39:e1:da:9a:79:48:c6:99:02:88:
5d:e9:69:1f:c4:d1:9b:b8:ef:7b:d1:86:26:3e:82:
10:bc:9e:f6:69:cf:c7:3a:60:0b:70:78:54:ee:7e:
41:81:ab:b2:80:a4:ba:e3:b8:4d:22:23:b4:66:df:
57:27:10:4c:75:f6:1e:d0:66:eb:d5:a9:4f:57:03:
9a:4f:7f:17:91:9e:ea:9e:e5:65:5b:c1:b6:0f:83:
09:c3:a9:67:6f:49:50:62:62:29:54:c0:af:fe:51:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:17:46:C1:0F:C2:2D:77:F3:44:C9:2C:20:27:DB:3D:6B:32:8C
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:62:ed:a5:ee:02:05:23:6b:e9:b2:13:29:e6:cc:c7:a2:
81:2e:93:cf:da:35:cc:25:7b:d1:77:7d:bf:ef:da:b4:f1:88:
d5:ca:23:1b:0d:b3:9e:d2:ef:c4:95:5f:6b:73:98:98:d9:8b:
3f:4a:fe:d6:07:8e:c8:a1:b3:56:52:d7:76:c0:7e:3c:d7:78:
fb:fd:c2:f5:65:90:5a:74:a4:2e:1c:b5:15:fb:54:54:37:b5:
7c:cd:89:36:1a:65:3e:02:e3:02:b3:18:b3:7d:9d:b3:20:4e:
a1:9f:bf:ad:92:4a:96:49:eb:21:58:88:9b:bd:5a:3f:0a:e3:
d9:6d:0d:4f:27:6e:a2:c1:b8:69:fd:f2:c4:a0:5a:d3:82:7b:
3c:9c:c2:da:c1:91:35:45:79:30:bf:7b:0e:d1:58:0c:18:9e:
fd:83:f1:49:73:05:87:52:54:34:e0:2a:e7:ef:f3:01:98:09:
f4:27:b7:fb:68:34:97:2d:c7:4c:2c:40:f7:d0:e9:f2:e9:9b:
55:be:98:76:9f:f0:fd:7e:4d:2c:34:d5:df:9c:bd:b2:f9:e7:
f3:0d:f5:98:14:32:f3:c4:79:b0:2c:7b:99:90:11:77:3f:ca:
79:7b:32:01:3e:68:93:0c:d9:77:86:cc:46:ff:b5:6f:03:5f:
9a:a3:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:18 2025 by rpki-client