Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/vbAAF1kqR-V8_iEwxqIuVzSVyT8.mft
File: vbAAF1kqR-V8_iEwxqIuVzSVyT8.mft (raw, json)
Hash identifier: s8wjMFKCZv+NTOOWK3FnReQYV5lQHOHv25i0O4xK9tk=
Subject key identifier: 5D:64:1A:16:DD:E6:1E:D5:E9:EF:B4:B4:91:C1:61:0B:5B:E1:AA:C9
Authority key identifier: BD:B0:00:17:59:2A:47:E5:7C:FE:21:30:C6:A2:2E:57:34:95:C9:3F
Certificate issuer: /CN=bdb00017592a47e57cfe2130c6a22e573495c93f
Certificate serial: 018735770D7BEA6E92C1D799F3E7ED0BA535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbAAF1kqR-V8_iEwxqIuVzSVyT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/vbAAF1kqR-V8_iEwxqIuVzSVyT8.mft
Manifest number: 0CFE
Signing time: Fri 31 Mar 2023 02:20:07 +0000
Manifest this update: Fri 31 Mar 2023 02:20:07 +0000
Manifest next update: Sat 01 Apr 2023 02:20:07 +0000
Files and hashes: 1: vbAAF1kqR-V8_iEwxqIuVzSVyT8.crl (hash: 1/A3aXInZd2Raiyda5sHDmQLuCELF1RTl/A5noAqPUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:35:77:0d:7b:ea:6e:92:c1:d7:99:f3:e7:ed:0b:a5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb00017592a47e57cfe2130c6a22e573495c93f
Validity
Not Before: Mar 31 02:20:07 2023 GMT
Not After : Apr 1 02:20:07 2023 GMT
Subject: CN=5d641a16dde61ed5e9efb4b491c1610b5be1aac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:86:06:ba:c0:cd:f7:f3:33:30:cf:57:d4:
b3:88:72:c8:b5:bb:51:61:10:8a:28:a7:2c:dd:18:
f9:ad:7b:25:c4:f0:f9:c8:63:b4:71:ff:fb:f2:24:
93:a7:85:e1:34:98:b7:80:7d:7b:7f:02:bf:fe:c6:
91:48:4c:4b:3c:87:67:7e:d7:ca:77:7a:66:71:87:
e5:86:19:2a:d2:1d:96:3b:51:52:5e:7d:d0:ce:5d:
d6:82:49:52:da:55:6f:ad:74:65:50:8a:1a:95:35:
df:03:09:97:9e:4d:c6:5a:01:e9:ff:8a:9e:70:77:
17:02:88:75:27:da:3e:1c:bc:77:64:34:73:e6:7d:
ac:68:75:35:70:59:6c:0e:e6:6c:7d:51:b1:1a:86:
4e:91:34:ae:11:4e:c6:e5:15:59:3d:9b:60:f8:cf:
a3:89:3b:ee:70:ac:e2:f3:b0:4a:98:ce:2a:94:f5:
0e:03:47:7d:1a:fb:7a:26:8f:95:fc:bb:93:07:b0:
d2:b1:5c:79:fd:3a:8a:17:58:04:95:e3:83:29:ba:
ec:0e:81:0e:b1:da:85:73:c0:b6:66:a6:36:f2:71:
7b:bd:b5:40:95:f8:72:ff:7f:c6:0f:cd:34:01:ba:
1e:64:1c:98:1a:70:05:80:58:c5:c2:19:dc:d8:06:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:1A:16:DD:E6:1E:D5:E9:EF:B4:B4:91:C1:61:0B:5B:E1:AA:C9
X509v3 Authority Key Identifier:
keyid:BD:B0:00:17:59:2A:47:E5:7C:FE:21:30:C6:A2:2E:57:34:95:C9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbAAF1kqR-V8_iEwxqIuVzSVyT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/vbAAF1kqR-V8_iEwxqIuVzSVyT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/vbAAF1kqR-V8_iEwxqIuVzSVyT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:88:c4:19:ee:05:75:0b:d9:69:e7:60:a3:be:41:f7:d5:
14:5a:c4:13:8a:f6:10:10:e1:46:37:0c:e8:dd:d7:6b:b6:42:
74:8f:00:74:3b:f0:ee:c0:a4:c1:98:ea:1a:2a:08:0a:1d:17:
3d:f5:8c:ce:c1:36:1f:bd:07:7d:d7:54:02:4e:ce:a2:fd:73:
d7:0e:8d:a4:1b:f0:43:7e:d0:fe:b6:e3:13:55:32:bd:f9:60:
e9:7c:8b:72:12:a6:ed:b3:6f:83:04:90:69:00:ce:0a:47:37:
fc:20:2a:b9:a8:57:4a:66:15:ef:8a:ce:16:ed:67:ff:14:91:
23:16:29:98:47:67:e3:56:55:cc:e1:52:31:bf:e2:eb:35:d9:
d1:ed:06:ec:48:4d:f3:dc:8b:c6:76:71:c9:29:74:fd:17:3c:
85:16:43:34:20:d6:f7:1a:fe:0a:21:20:e3:b3:a5:8e:f0:63:
cb:12:b7:8b:d7:99:9d:a0:2e:1c:ba:56:b4:9c:71:60:4a:9a:
5e:c8:b6:c9:71:a2:96:10:c8:ac:48:76:e2:dd:6d:48:b2:93:
57:c6:df:6a:68:8b:76:55:b8:d2:f7:5d:c9:7d:e3:bd:ef:a1:
92:67:9e:77:6e:99:cc:89:b9:29:cd:11:05:30:72:af:32:41:
70:81:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:01:22 2025 by rpki-client