Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
File: 0D_r_VN-Mgy77CtOImd7muZvYE4.mft (raw, json)
Hash identifier: /jkbjRr1ErCOKF/F90dTL6nXr/ZrLK5OLQYVr2Bn85g=
Subject key identifier: AD:A3:89:1A:15:E6:B3:82:76:6F:08:1B:7B:9F:92:52:5E:58:C2:48
Authority key identifier: D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Certificate issuer: /CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Certificate serial: 018E59604E4B65ABEA4257031651FE36ADF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
Manifest number: 08D2
Signing time: Wed 20 Mar 2024 01:01:07 +0000
Manifest this update: Wed 20 Mar 2024 01:01:07 +0000
Manifest next update: Thu 21 Mar 2024 01:01:07 +0000
Files and hashes: 1: 0D_r_VN-Mgy77CtOImd7muZvYE4.crl (hash: GRyPC+dVZgZhrVDtUaClGnPPFiTMs4HAs0USM2mBHA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:59:60:4e:4b:65:ab:ea:42:57:03:16:51:fe:36:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Validity
Not Before: Mar 20 01:01:07 2024 GMT
Not After : Mar 21 01:01:07 2024 GMT
Subject: CN=ada3891a15e6b382766f081b7b9f92525e58c248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:a5:e5:05:2b:61:7b:8d:9f:97:fa:c3:ee:
b1:92:70:be:92:97:6a:c7:2c:79:5b:1f:4c:2c:1f:
e8:67:c6:76:9c:38:9d:a1:1e:fb:f6:ae:66:20:2c:
ce:85:f0:0c:01:0b:40:6a:9d:06:ae:2b:dc:8c:ef:
e6:93:d8:cb:d9:71:0b:2a:fd:e8:4e:9d:8c:f5:e9:
a6:60:50:fe:8e:1b:ba:d1:e0:02:b0:3a:0a:69:69:
35:9d:62:55:11:da:ee:e4:06:b2:da:d3:f2:43:51:
25:05:e8:2f:eb:c0:56:1f:d0:41:4e:2c:c8:9d:bc:
a9:0f:96:61:32:49:3c:ad:c3:7d:ef:fd:fc:49:2d:
09:8b:b8:38:a4:d3:7d:c0:cb:aa:4b:ec:ac:53:06:
29:38:61:38:19:f2:90:78:e2:da:f0:37:ed:46:0b:
2b:7f:f9:dd:d0:d1:f1:31:71:3d:83:7b:a9:f5:0c:
b4:6e:33:90:9c:fa:b9:b9:5c:84:21:ed:57:54:8f:
ba:99:35:18:54:e9:5d:31:a0:0e:36:31:8a:f0:d0:
b9:39:25:2f:d6:6d:d9:e1:0f:34:74:7f:0c:88:3a:
1a:1e:3e:54:b1:35:b0:97:b5:c8:16:1b:fe:95:f2:
c1:24:3f:cc:9c:39:74:38:18:d4:84:9a:22:5e:bb:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:89:1A:15:E6:B3:82:76:6F:08:1B:7B:9F:92:52:5E:58:C2:48
X509v3 Authority Key Identifier:
keyid:D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fd:a9:07:71:2b:e3:f7:0d:25:6b:21:37:66:2f:ab:c0:83:
f5:90:f0:01:46:56:57:24:81:c8:f6:88:13:ac:92:79:ae:b2:
45:3b:ad:4a:32:ae:2a:40:d5:a4:ab:c0:45:15:3c:eb:b5:7f:
fb:80:32:cf:f0:62:65:ea:b1:0d:2a:b7:03:71:57:3b:f2:2c:
8a:72:da:9a:f2:ab:70:3b:c8:78:35:32:5b:03:ae:04:a5:f6:
e7:af:f7:28:c5:ac:0c:4b:5f:e5:88:39:48:8a:2a:99:a5:7f:
44:01:71:f0:a5:42:69:15:37:c0:dd:54:f1:9c:8e:2b:83:28:
a8:28:ab:03:a6:3f:64:a0:b6:59:b2:fb:ce:d4:22:02:5c:8f:
34:11:55:51:ab:c4:4d:fd:f1:d9:dd:63:4d:46:a9:22:c5:76:
3a:b3:53:d9:1a:40:91:97:70:7d:f2:47:51:aa:c8:8a:c2:66:
36:db:26:4f:c0:91:1c:d0:51:ea:c7:66:c2:8d:55:d4:0c:c6:
47:c9:b6:25:c9:e3:b3:26:08:70:2b:91:f1:e6:82:11:cf:c3:
59:21:fc:c0:ce:5d:21:fc:9b:7d:44:f4:04:94:00:c4:63:c9:
ca:ba:93:8d:82:5b:34:1c:37:83:fe:bf:35:c1:9d:da:85:70:
62:73:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:11:47 2025 by rpki-client