Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
File: vxyx6NN85X_iALAnQQb1pYFeoi4.mft (raw, json)
Hash identifier: WKRw+kUioL/i37/PjUl8cFqr00m92MXuFxq3tYITY3o=
Subject key identifier: D2:E6:2A:D0:31:16:F1:FA:10:BD:D5:59:80:E7:B0:BA:07:8D:F5:AF
Authority key identifier: BF:1C:B1:E8:D3:7C:E5:7F:E2:00:B0:27:41:06:F5:A5:81:5E:A2:2E
Certificate issuer: /CN=bf1cb1e8d37ce57fe200b0274106f5a5815ea22e
Certificate serial: 019444133C71C9A1E8538AEF997465FE32BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
Manifest number: 13E7
Signing time: Wed 08 Jan 2025 04:01:38 +0000
Manifest this update: Wed 08 Jan 2025 04:01:38 +0000
Manifest next update: Thu 09 Jan 2025 04:01:38 +0000
Files and hashes: 1: vxyx6NN85X_iALAnQQb1pYFeoi4.crl (hash: y/7shOS4BR2GtH8p4gqzFyKTzvCCUeqiXq4g27RUuJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:13:3c:71:c9:a1:e8:53:8a:ef:99:74:65:fe:32:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1cb1e8d37ce57fe200b0274106f5a5815ea22e
Validity
Not Before: Jan 8 04:01:38 2025 GMT
Not After : Jan 9 04:01:38 2025 GMT
Subject: CN=d2e62ad03116f1fa10bdd55980e7b0ba078df5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:05:73:ce:9d:33:b5:ae:f6:ce:14:6a:f4:
ca:fb:4d:4b:76:ae:5c:a9:43:30:3c:bd:76:86:3c:
ed:14:b4:13:a5:12:9a:b7:64:12:3f:f8:5f:5e:ae:
b8:31:67:2c:fc:72:b0:af:6a:57:7c:af:b4:9b:ab:
12:33:27:f1:85:8a:15:51:cb:0e:56:c5:fa:82:f1:
f2:b5:4c:7b:80:5b:12:91:84:6e:e7:f7:a0:79:e1:
cc:81:eb:78:85:7c:6a:ab:ca:b1:92:ce:4c:ca:dd:
b8:79:f4:d2:4f:32:29:e8:b3:5e:0e:75:ec:f8:94:
2e:95:64:4e:97:b3:73:de:48:b3:00:81:8e:bd:a9:
bb:b1:fd:f0:91:2c:16:1c:54:f3:2b:74:45:26:c5:
c9:b1:7b:84:38:41:7c:6f:1e:56:c3:47:52:5e:62:
e6:e7:2a:a4:32:b9:31:9b:1c:1d:70:40:96:ee:c2:
7c:64:9b:72:87:7f:22:31:2b:84:15:c4:a9:0b:c6:
f9:90:a6:d6:15:e1:b8:05:bd:52:fa:9f:06:ce:b2:
f6:e2:b6:b8:f0:a8:a9:3a:de:f5:41:e3:c3:2c:78:
30:12:de:50:90:28:1a:81:31:fd:20:7d:e2:45:28:
26:ea:01:b7:e4:29:d5:de:be:9d:bb:6a:ba:a6:f9:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:2A:D0:31:16:F1:FA:10:BD:D5:59:80:E7:B0:BA:07:8D:F5:AF
X509v3 Authority Key Identifier:
keyid:BF:1C:B1:E8:D3:7C:E5:7F:E2:00:B0:27:41:06:F5:A5:81:5E:A2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:68:fa:97:f8:26:d5:b0:4b:a0:72:51:9b:90:3b:d7:64:c1:
ad:05:2a:7b:51:be:31:a8:ea:d8:e8:67:e1:22:b7:bc:e4:ec:
88:a5:c1:39:89:c1:c5:46:1f:c4:f0:20:2b:97:20:4b:be:5d:
a1:88:1b:ab:fe:91:9c:81:63:7c:3d:d2:46:7e:cd:b0:2a:e3:
2b:8c:12:aa:59:d2:6c:51:57:d8:66:c1:53:aa:59:88:73:67:
34:ef:3d:78:fc:41:1b:e8:df:bb:4b:65:98:00:3b:58:9a:9c:
d6:d1:04:cb:db:43:7b:30:80:80:3b:5f:02:2d:d6:e8:3a:4f:
99:5a:95:88:fa:c2:76:cf:dd:78:9f:c4:56:eb:7c:10:24:2b:
8d:16:f9:28:48:69:52:c5:6f:88:05:56:01:e3:45:c7:44:ac:
88:8a:94:85:e6:e0:7c:53:68:19:6f:4e:0d:91:a6:ef:90:50:
04:52:ea:90:72:64:58:86:82:5a:d8:32:10:b9:18:42:a8:0a:
f3:65:a0:8d:59:51:74:f7:2a:a7:9a:e8:c1:2a:23:b7:9a:3c:
94:c5:9f:7e:f2:86:a2:ba:5e:49:e0:65:06:af:a2:78:56:b3:
9d:dc:8e:3e:bf:4a:8d:97:dd:0c:41:17:0c:33:be:f3:30:07:
de:56:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:46 2025 by rpki-client