Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
File: vxfVoihiEhe4cYVdRhG8pGTg5iA.mft (raw, json)
Hash identifier: aXyUgN3phid3f7fW80sSMl0i5aQZJ8uhW2+cx9TKEko=
Subject key identifier: 07:54:50:87:7E:94:93:D6:24:9F:B7:A3:03:3E:7C:14:CA:1F:F9:5C
Authority key identifier: BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
Certificate issuer: /CN=bf17d5a228621217b871855d4611bca464e0e620
Certificate serial: 0194BABB74BE1FD0466FE65E5E6FE3D9A0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
Manifest number: 025A
Signing time: Fri 31 Jan 2025 05:00:34 +0000
Manifest this update: Fri 31 Jan 2025 05:00:34 +0000
Manifest next update: Sat 01 Feb 2025 05:00:34 +0000
Files and hashes: 1: vxfVoihiEhe4cYVdRhG8pGTg5iA.crl (hash: dVE9d+tB+Vl/iNkCweDGpvjzLNgj1qoTpKxduCP0K20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:74:be:1f:d0:46:6f:e6:5e:5e:6f:e3:d9:a0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf17d5a228621217b871855d4611bca464e0e620
Validity
Not Before: Jan 31 05:00:34 2025 GMT
Not After : Feb 1 05:00:34 2025 GMT
Subject: CN=075450877e9493d6249fb7a3033e7c14ca1ff95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:42:0c:72:d3:b9:07:bb:ba:95:6c:d7:da:
4a:87:6c:5a:6c:9a:23:a5:29:bb:83:ad:e9:86:cb:
d3:81:af:01:de:3e:47:6f:e0:ab:cc:d9:6b:49:04:
eb:90:c2:ec:7d:44:d7:35:66:c8:04:24:e3:74:82:
3f:0a:af:f9:f7:1f:1c:fb:f9:55:dc:fd:ab:3a:25:
18:17:ae:21:57:ae:cc:74:31:0c:ba:6c:6e:10:52:
87:38:2b:5c:40:f0:47:3c:e1:98:b5:94:59:7d:e5:
ec:e3:74:49:f5:76:5a:f4:78:ab:d0:1e:32:84:7f:
aa:4c:09:b8:00:f8:49:9d:ac:63:f1:bb:c5:aa:09:
93:7b:8a:70:c3:e0:e2:2f:38:84:78:b1:f8:56:36:
fe:ff:3b:ec:a4:76:5c:89:96:19:33:8a:49:b5:f8:
85:76:63:55:24:5d:48:ac:14:b3:0b:33:fa:a8:8a:
d1:fd:99:42:ef:04:d7:bc:f0:8e:a4:77:27:4d:b9:
f0:2c:e8:bc:ef:38:27:23:d2:82:28:41:96:95:5c:
62:31:09:0c:ab:ee:aa:48:a4:12:4f:dc:54:15:7e:
12:64:26:8a:53:d9:4f:8a:38:2a:a6:07:cf:40:fc:
e9:61:d6:45:aa:29:4f:5d:2b:88:15:f5:d5:83:9c:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:50:87:7E:94:93:D6:24:9F:B7:A3:03:3E:7C:14:CA:1F:F9:5C
X509v3 Authority Key Identifier:
keyid:BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:11:2b:1b:3d:89:a0:21:4f:e6:84:f5:2b:55:89:51:c9:d2:
b6:f9:87:78:1e:90:6b:64:33:22:13:62:8d:5c:8d:e8:35:e6:
a6:0e:d7:2c:58:df:7c:8e:2d:40:8b:49:88:53:35:cc:de:d1:
ba:ea:fd:5a:d8:03:1c:c6:af:f5:f7:f0:32:f9:d6:bd:ff:e5:
9b:fd:c9:91:22:c5:a7:38:c6:53:5a:be:a3:66:ea:2e:6d:ac:
c0:95:5d:47:7b:fd:95:ef:48:a3:98:8a:73:93:bf:a8:d2:64:
02:8b:41:2b:a1:0a:46:64:b7:79:e7:26:9d:54:1c:af:b2:ae:
30:c2:3c:d1:32:99:9f:30:b5:94:57:cf:bb:9c:02:72:a3:d4:
91:f8:f0:2a:59:14:22:63:c6:69:b9:cc:61:b7:71:48:76:6c:
29:98:7b:da:25:3e:e2:b0:15:c5:53:21:fe:8b:6d:92:cf:02:
e9:fc:b0:e0:26:c5:99:f7:6d:3a:7f:f7:bd:41:88:e2:18:01:
ca:d3:13:20:2f:4c:75:f3:df:2e:13:21:e0:9d:24:68:97:81:
14:ee:04:5d:f5:6f:0e:1c:e6:ab:73:94:06:64:6a:61:9b:99:
7d:b2:43:ce:8a:14:41:62:f4:e9:60:9a:6c:3d:c6:59:e5:a8:
ec:29:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 15:33:35 2025 by rpki-client