Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.mft
File: vYq1gF13uGFO-tL5rLg-ME1M36w.mft (raw, json)
Hash identifier: omFk+EXdXZuRyhnQEyrY8PiaVMbi4LAU9yV6uXKVHAs=
Subject key identifier: 49:D5:36:02:30:38:67:E8:36:84:8C:7B:62:0E:FD:B5:45:59:A1:CA
Authority key identifier: BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
Certificate issuer: /CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Certificate serial: 018BA481A848D22B6232CE7E06078B8E13EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.mft
Manifest number: 06EF
Signing time: Mon 06 Nov 2023 12:00:42 +0000
Manifest this update: Mon 06 Nov 2023 12:00:42 +0000
Manifest next update: Tue 07 Nov 2023 12:00:42 +0000
Files and hashes: 1: vYq1gF13uGFO-tL5rLg-ME1M36w.crl (hash: kK4fBkk6AAcqUcxsV600eqEzzcBWyzyLeYYNBg8GArY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:81:a8:48:d2:2b:62:32:ce:7e:06:07:8b:8e:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Validity
Not Before: Nov 6 12:00:42 2023 GMT
Not After : Nov 7 12:00:42 2023 GMT
Subject: CN=49d53602303867e836848c7b620efdb54559a1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:05:00:95:e4:f2:4f:0c:c1:5e:78:16:9b:
c0:c4:d4:f5:2a:85:66:be:19:9f:8b:69:c5:32:ee:
d7:e7:1c:89:ee:84:cd:89:40:38:c9:4e:49:98:09:
75:b2:a9:1b:d1:0a:86:b4:8a:b3:92:9e:15:2c:d1:
12:b0:cf:91:68:45:3b:d5:89:0c:7b:60:5a:ce:86:
97:6b:55:b5:25:f1:54:59:e5:62:a7:a6:ec:0a:54:
e9:37:fe:eb:82:1c:4a:fd:25:96:96:44:9a:5b:ff:
d1:25:1f:b4:65:d5:b2:05:3e:a7:1c:16:74:c7:93:
40:3b:d3:01:7f:96:24:f9:9d:89:65:6a:d9:11:82:
6b:00:f7:79:cf:8c:f0:ee:7c:ef:53:5d:2b:ae:0d:
ee:0c:ad:62:88:62:b0:92:0a:46:60:ca:87:5e:bd:
92:e6:42:47:26:c6:2f:46:dc:2b:a2:ba:f8:b4:19:
8b:b4:88:26:63:f0:7f:91:0e:20:79:fe:9b:f3:34:
bf:89:43:fd:a6:25:49:63:41:d6:d6:20:6d:63:a0:
1d:d9:73:0a:f7:1e:c3:a0:9b:a7:09:de:be:ec:1b:
94:a1:54:0a:52:98:a3:de:aa:2e:40:92:77:7d:64:
24:f2:13:d0:e9:90:3e:0a:19:1c:b3:9c:15:2f:5b:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:36:02:30:38:67:E8:36:84:8C:7B:62:0E:FD:B5:45:59:A1:CA
X509v3 Authority Key Identifier:
keyid:BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fc:2c:e5:b5:4d:01:bb:6e:48:d7:d5:62:a9:29:24:8c:41:
9e:4b:77:e3:cd:6e:b0:79:03:4e:18:d7:5c:72:f4:07:d6:99:
50:ee:be:3e:f4:da:1e:8d:e1:e1:83:3c:7e:d1:a7:88:25:a9:
e7:af:1b:c0:aa:b6:ab:dc:56:c7:41:0d:5b:04:b5:93:7f:ba:
6f:14:c5:08:0a:0f:85:7f:1b:fe:fe:01:82:ff:6b:92:78:50:
06:09:e5:a4:e9:03:c3:24:06:4b:ad:5c:32:cc:b5:7b:1f:a5:
c6:62:37:8e:78:af:00:3e:cb:ee:dd:d7:ae:82:f5:24:cf:a4:
e6:63:7c:b8:5b:dd:8d:10:2a:f9:94:95:89:90:09:25:80:6c:
97:a3:5f:51:f6:99:33:8b:66:2e:11:9b:c6:dd:67:4b:4a:1f:
8f:fd:c0:ad:f0:1e:67:ee:41:f3:a2:06:53:a7:e7:47:93:37:
4a:46:04:67:6c:30:f4:90:17:5c:4d:45:8f:d8:1b:93:62:47:
9d:01:0a:2c:71:75:e5:ad:01:ff:fa:fc:38:b9:57:0f:d1:3d:
35:e3:1b:f6:e7:eb:01:19:a5:8c:5e:80:78:cf:2b:1f:5f:03:
a6:9a:7b:0d:23:41:31:51:e9:1f:f8:41:be:f1:07:38:7a:85:
6d:8c:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:43 2025 by rpki-client