Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
File: VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft (raw, json)
Hash identifier: 1vxITYBCFHux9UbQO+nAyzSg0yY5i5N6STCilXH6Tfc=
Subject key identifier: AA:39:88:C0:5A:FC:76:10:09:46:0B:23:E4:D8:71:B1:F6:BA:75:83
Authority key identifier: 55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
Certificate issuer: /CN=55c3f37c666ce845a2a0782c1c873046efb0e596
Certificate serial: 0194DB21E4BB38DD3B71AEDFEE28894CB17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
Manifest number: 0F2A
Signing time: Thu 06 Feb 2025 12:00:18 +0000
Manifest this update: Thu 06 Feb 2025 12:00:18 +0000
Manifest next update: Fri 07 Feb 2025 12:00:18 +0000
Files and hashes: 1: VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl (hash: GW7m8vV+9UcFTQhevxTjjXqc+TA4mNZcuO+CjSH7HDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:21:e4:bb:38:dd:3b:71:ae:df:ee:28:89:4c:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c3f37c666ce845a2a0782c1c873046efb0e596
Validity
Not Before: Feb 6 12:00:18 2025 GMT
Not After : Feb 7 12:00:18 2025 GMT
Subject: CN=aa3988c05afc761009460b23e4d871b1f6ba7583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:62:ed:84:47:74:2d:5c:d5:48:55:26:f0:
ad:58:e3:3d:83:b6:bc:ae:3b:a4:21:71:cf:25:81:
ac:e9:8b:1b:3c:25:53:0b:89:f4:de:45:b4:5b:08:
e5:91:af:e0:d7:5e:38:a9:b7:b6:e8:03:2d:36:a9:
6a:bd:05:6c:96:22:17:68:f5:ac:2d:59:dc:fe:1b:
5e:10:dd:f4:94:99:cb:bf:23:16:44:6d:6a:83:12:
e8:95:35:8b:b7:e6:09:4a:ad:db:8f:56:74:00:07:
bc:27:e2:de:96:24:eb:d4:88:4c:be:ae:f3:c1:5f:
21:36:3c:87:58:c2:3e:29:c7:9d:3d:77:be:b8:48:
5a:b9:cf:e3:b2:5a:b6:c8:64:ea:3c:c3:8e:29:b5:
8e:7c:ef:9b:a0:ec:77:6a:40:ea:99:32:ee:32:f0:
cf:8e:9c:5f:c0:72:16:e1:24:cb:79:5b:24:29:f3:
3e:1f:ad:f1:97:ff:04:d7:00:de:16:28:0d:a9:7d:
69:e0:1a:a8:31:f9:73:37:ff:c2:ec:72:f6:78:30:
39:de:8b:b2:e7:dc:72:1b:0c:61:e1:70:44:25:11:
d1:5f:37:0f:b1:57:39:43:48:b4:76:9f:27:2a:c4:
ae:d7:93:b6:a3:71:69:a7:df:71:e4:76:aa:d0:b2:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:39:88:C0:5A:FC:76:10:09:46:0B:23:E4:D8:71:B1:F6:BA:75:83
X509v3 Authority Key Identifier:
keyid:55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3e:5e:70:f6:88:17:0c:ea:58:55:df:92:26:99:64:a4:59:
b3:5b:b9:65:f2:c6:7a:50:9c:53:87:0d:e8:83:fe:78:71:40:
f9:bf:ed:11:be:d5:1f:57:88:8a:bf:77:ac:ac:01:f7:3f:d5:
49:15:73:f4:09:82:16:cb:de:08:db:a5:4a:02:50:fc:2f:88:
b1:a6:29:3d:2a:bd:7f:1f:c3:d8:87:bd:55:b6:c2:11:f1:97:
74:37:b9:73:e7:fc:cf:a8:42:8e:76:83:99:77:39:47:12:51:
0f:0e:ce:1c:04:c6:cf:0a:59:38:94:19:30:06:20:07:d3:cf:
0f:7e:73:9e:6a:8d:77:9a:61:a6:0c:48:ef:24:b1:a5:0e:0b:
61:77:5f:d8:91:a1:2e:90:9e:94:9b:0d:49:56:44:5b:d3:ca:
44:11:6e:30:8a:0f:cd:b2:b4:04:a3:33:c9:69:77:7b:7b:70:
05:84:d9:7d:20:f1:b3:ae:24:67:a0:92:79:b0:57:87:33:55:
e3:99:83:e0:bf:f1:d3:18:e2:01:58:ab:b7:aa:1b:32:64:24:
8e:d3:e3:60:5d:4a:ed:11:55:bf:c1:16:f3:72:4a:e7:0f:1f:
28:18:c4:ff:e0:34:7e:e1:7d:84:e3:5a:93:1c:c5:e2:0a:28:
f1:8e:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:05:40 2025 by rpki-client