
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File: vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier: rmtinPOcg20V65kbsqONyPDKlogV/7T6kRvvBuGrQcE=
Subject key identifier: 50:9E:7D:52:2A:30:33:09:28:EE:B6:24:A7:9E:0A:3D:FE:3C:02:05
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer: /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial: 0194BC72A4B29D4C3178DE2167B17E69FA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number: 03E6
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: KOLKUcJ2wWDA0AwJUsMl3oILMwpoOTa0FPVKT5pgq74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:b2:9d:4c:31:78:de:21:67:b1:7e:69:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=509e7d522a30330928eeb624a79e0a3dfe3c0205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:cc:4a:a8:d8:93:c2:9d:d2:75:2c:e2:12:
42:f7:5c:90:ac:f4:14:94:d0:f8:7b:e5:50:8d:3c:
6a:1a:36:eb:0c:02:d3:eb:17:ea:80:da:b2:7c:21:
c6:11:5d:5d:41:90:dc:ac:45:4d:0e:25:47:af:df:
a4:29:96:43:c2:5b:ba:83:27:7e:db:66:f1:bf:75:
ae:18:d6:ae:c0:5c:43:3d:2e:6d:d8:cf:d1:ae:96:
71:71:a8:3d:71:11:65:a8:26:35:2f:9d:7d:8d:f1:
c1:df:aa:07:61:25:9b:11:bb:55:1f:43:a3:5b:63:
fb:1d:20:04:ac:08:c6:be:3c:3f:fe:27:11:f5:50:
c7:4e:98:e8:70:9a:11:e3:c4:82:f5:e0:38:9b:83:
fa:2e:a7:66:bf:de:11:5f:5e:a3:48:01:7c:91:98:
cf:9e:5b:d6:41:24:d9:53:8f:6d:cc:b5:c8:d9:03:
d6:ed:b5:13:7c:f2:39:9a:88:48:39:fa:ff:46:67:
4c:cf:c4:7c:66:52:91:24:40:f2:34:d0:30:15:1e:
c7:55:55:5f:32:88:b4:cc:82:5b:00:92:c9:7a:6a:
ec:d4:6e:42:55:7c:36:d0:77:c7:4d:a3:36:9f:82:
3c:40:06:d6:dc:f7:85:40:0f:3c:5c:11:02:41:3b:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:7D:52:2A:30:33:09:28:EE:B6:24:A7:9E:0A:3D:FE:3C:02:05
X509v3 Authority Key Identifier:
keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:17:ee:e6:ae:42:ad:dd:27:2a:fe:8f:6c:54:30:0c:ce:
3f:09:95:99:d6:f6:19:54:92:cc:ee:e4:43:2c:13:93:c1:ec:
00:04:98:bf:75:a5:2b:84:6e:23:5c:7e:7c:dc:c8:e6:6e:6b:
2b:37:9c:30:a5:ab:ad:79:71:b5:78:8b:fd:cb:50:91:a9:b3:
21:83:f8:91:34:72:5c:96:f7:43:00:f4:e0:1c:be:be:7f:95:
03:18:bf:90:9d:3c:ca:8c:f1:5d:47:49:38:70:91:b2:9d:7e:
72:59:b4:b7:41:b7:d5:70:4b:08:8b:4b:6d:32:11:87:0e:4c:
ea:e1:42:4f:4d:38:6b:90:70:32:56:7d:f2:40:d6:f4:27:c1:
7b:98:b7:2c:e5:f9:bb:c3:32:a6:82:65:35:c7:57:a3:68:25:
9c:89:a1:79:73:da:5d:ea:cc:4b:c5:3d:57:fa:f3:a1:ba:f5:
ea:9e:ea:92:e1:3f:0a:e9:7f:87:e5:b6:db:0f:ff:c8:d2:88:
dc:58:37:3c:a9:2b:fc:a7:dc:39:97:12:89:ae:eb:d4:d7:09:
43:74:ea:1a:fe:ec:db:c7:cd:1d:63:24:2c:32:26:69:24:2b:
d1:be:27:d8:38:01:63:a0:83:41:da:31:5c:6a:c7:2e:f2:b2:
d1:af:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:55 2025 by rpki-client