Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File: vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier: 5gmrDTHryEkfnMWBwp8ZGTg9fKvb7n9AVR6S3fmViaQ=
Subject key identifier: CB:A1:11:E2:03:32:B6:AF:C0:C2:86:C4:CB:4F:DB:16:D4:51:91:BF
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer: /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial: 0195EF82ACE14CC2A3B6525BD0F829A31A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number: 0485
Signing time: Tue 01 Apr 2025 04:01:13 +0000
Manifest this update: Tue 01 Apr 2025 04:01:13 +0000
Manifest next update: Wed 02 Apr 2025 04:01:13 +0000
Files and hashes: 1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: ae8SMxQKkxMs3zvksWTkd2240oyeYlljEWF/pYeY2sI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ef:82:ac:e1:4c:c2:a3:b6:52:5b:d0:f8:29:a3:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Validity
Not Before: Apr 1 04:01:13 2025 GMT
Not After : Apr 2 04:01:13 2025 GMT
Subject: CN=cba111e20332b6afc0c286c4cb4fdb16d45191bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:6e:23:65:b9:b0:0a:3d:58:c0:09:93:30:
9d:50:24:35:19:eb:b3:54:59:cc:18:5f:aa:e5:1e:
37:a5:eb:1e:de:5b:92:b1:ae:e1:f5:27:55:46:64:
6a:d4:61:2f:7c:43:8d:b3:cf:09:fe:ef:44:93:f3:
31:4d:17:1a:d0:71:c2:1d:34:97:d8:c4:e2:94:8d:
bf:8d:50:6c:bd:cc:17:9b:7e:a0:71:18:e7:92:4e:
00:d5:a5:37:ab:a6:c0:b3:52:f9:2a:c9:1b:f5:9a:
e9:74:2c:60:7b:1a:18:d3:49:3e:7c:0c:29:9a:e5:
f9:53:e0:70:dc:11:58:9e:3a:33:55:ea:2c:9e:c0:
5c:cc:69:96:ae:91:23:5d:57:8b:00:5d:50:69:df:
4a:ab:5c:73:72:90:5f:be:f5:12:2b:db:3f:b5:d6:
f8:7a:88:45:85:b0:0a:82:07:ba:3d:5b:e3:ca:07:
9b:f4:de:93:48:a5:52:65:7c:b6:39:a6:e7:21:2b:
7e:67:49:cf:d0:b3:db:af:db:57:97:80:d6:ba:82:
e9:7b:2a:55:92:bb:ce:79:a1:ee:c9:77:e6:2d:73:
d7:d6:6d:2f:d9:ab:d5:0f:f4:9e:c4:fe:99:7a:38:
72:ee:1d:14:ce:5a:db:62:fa:dc:57:86:9f:67:b3:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:11:E2:03:32:B6:AF:C0:C2:86:C4:CB:4F:DB:16:D4:51:91:BF
X509v3 Authority Key Identifier:
keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:05:c0:6c:ba:37:75:10:ae:3a:40:6b:e1:16:44:4b:93:bf:
31:98:e9:5c:a5:11:3f:79:3b:f7:57:90:b8:85:f0:98:f5:2a:
1d:35:a8:7d:62:7c:a4:70:d3:b5:7d:71:2a:55:fe:1b:4e:b3:
b3:67:1f:82:03:20:be:84:0e:12:86:9b:a8:f7:a6:88:5f:c9:
41:d0:13:98:17:e3:87:86:ac:a7:06:dc:73:2e:db:de:1d:28:
30:dd:dd:da:71:e8:b2:b5:82:7f:0d:95:d8:8d:19:77:94:ad:
68:ff:a0:b5:76:8e:a5:23:26:24:e0:dd:0d:67:e2:ef:86:10:
aa:14:f5:52:18:ae:37:53:2f:9c:dd:b5:5e:72:28:11:87:1c:
19:52:3c:12:b9:2f:2d:bc:24:b2:c9:19:f7:df:51:46:96:88:
6f:d5:cd:2c:e2:2d:55:2e:68:a1:88:58:be:d1:57:6d:a7:e6:
09:7a:ad:32:10:85:28:f9:c4:ab:15:9a:4d:dd:9a:64:de:76:
1e:80:37:21:53:a7:80:5d:26:24:d8:2a:89:f7:c5:e7:52:60:
b7:0b:9b:d2:bb:cd:df:81:f9:f4:28:5b:ae:18:3f:06:58:0e:
f8:e5:8e:df:e5:0b:db:1e:a2:fb:75:b5:e6:6e:7d:8f:1e:2b:
78:82:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:51 2025 by rpki-client