Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: qSmSJ9cKYNER0sB8PxUZ5H31cUIQXLuWcskMi4s3eCM=
Subject key identifier: 88:3F:05:9A:96:C8:35:81:09:00:4A:F0:5F:D6:77:62:C1:61:68:CA
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 0194BBCE42B25A22A3048583BADF921AC1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: AwPEUr8HESJDDWaYXNn2th6ANtT9nc0mT88goANZAEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:b2:5a:22:a3:04:85:83:ba:df:92:1a:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=883f059a96c8358109004af05fd67762c16168ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:fd:9b:74:81:74:0b:38:92:af:ff:ca:dc:
60:82:a5:af:3b:c1:7f:ba:a8:ca:9b:24:3d:d7:56:
d6:11:7d:c4:3b:0c:8d:93:99:78:50:00:dc:94:d9:
04:c6:de:2b:8e:d2:84:99:49:87:57:78:ec:d0:1e:
fa:f7:59:f9:d6:ac:fb:12:a5:53:2a:d2:0f:88:5e:
1f:c5:74:8e:74:9e:49:6a:4c:7b:51:ee:48:03:6b:
a3:01:d5:7f:eb:40:d7:22:3d:31:51:5d:ff:d0:d1:
1c:f0:2f:8b:c2:00:76:32:aa:d1:20:63:0c:8b:3f:
0d:18:e5:23:c5:f8:53:64:33:62:ea:21:dc:7f:fb:
7d:dc:49:b7:ed:83:1f:bf:6b:81:6d:7f:24:94:71:
b2:e9:2d:67:7a:0b:5c:db:3e:13:dc:b3:cb:9a:ce:
96:20:a5:bd:7c:42:4a:9c:64:93:fd:71:c4:ca:22:
6c:5a:fd:11:6e:4c:94:71:7b:8c:6c:a8:45:12:93:
5b:c8:33:bd:81:21:31:6d:19:85:81:9e:53:22:00:
5f:66:cb:f0:24:03:53:b3:e4:13:bd:eb:7b:ff:6e:
16:51:73:c7:0b:96:43:10:e7:80:89:60:62:9b:5d:
9c:6d:37:1f:25:b3:91:02:94:6a:89:d8:00:4a:a7:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:05:9A:96:C8:35:81:09:00:4A:F0:5F:D6:77:62:C1:61:68:CA
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:67:47:1e:26:58:89:6b:e7:0b:92:40:e3:18:0c:f1:2b:4a:
92:b1:6c:10:e1:ce:af:6a:d3:d0:2c:58:f8:79:f7:4c:bc:da:
dc:52:aa:c7:57:ee:7a:bb:c6:5f:b4:07:8f:22:ba:34:4b:d2:
51:7a:eb:49:5d:e3:e2:09:9f:81:f6:13:c9:21:73:90:d3:ba:
22:31:86:d6:8b:8b:d8:50:6f:96:4b:95:65:56:ce:59:c0:ec:
a4:d8:e0:70:05:37:4e:10:65:77:cf:10:d0:6c:bc:4a:76:b7:
23:b9:bd:74:f4:7b:18:9a:16:d3:fd:8b:6f:12:90:15:9a:4d:
7a:5e:38:d8:09:e1:4c:fa:31:e9:5c:a3:91:df:93:0e:be:f0:
35:7e:85:ee:ea:d3:f1:e3:ee:cf:4f:7d:57:72:ae:6a:d0:5a:
03:8c:bf:4f:6b:52:f0:31:d2:4c:42:8a:14:44:a6:a4:7f:45:
1e:1e:4e:89:81:27:c3:a8:cb:32:86:72:20:39:99:29:5c:9a:
a5:6b:f6:f0:06:1b:db:3e:5c:b1:47:89:be:2c:3c:da:49:c9:
a3:01:51:67:98:b0:5b:a0:97:8f:31:f4:f7:23:8e:5d:41:c9:
de:d1:e2:d7:19:db:59:14:ad:9f:3e:83:40:cc:ea:42:ef:ee:
4c:61:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:53 2025 by rpki-client