Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File: vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier: iR4p1Y4iXnbg9DLBQcDSERp08Q59wcBHDpfh5AsWTfw=
Subject key identifier: D0:32:BA:5E:68:61:8F:AE:16:79:4C:F8:D9:96:9F:A4:C2:2A:15:EB
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer: /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial: 0195ED944BD2481B9576C30D14EE1D2BC690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number: 0484
Signing time: Mon 31 Mar 2025 19:01:13 +0000
Manifest this update: Mon 31 Mar 2025 19:01:13 +0000
Manifest next update: Tue 01 Apr 2025 19:01:13 +0000
Files and hashes: 1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: dR8kUjtAGYWpzlfEfvUODa/jIYMt9qQ/looib4dhPX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:94:4b:d2:48:1b:95:76:c3:0d:14:ee:1d:2b:c6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Validity
Not Before: Mar 31 19:01:13 2025 GMT
Not After : Apr 1 19:01:13 2025 GMT
Subject: CN=d032ba5e68618fae16794cf8d9969fa4c22a15eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:06:dd:38:d8:16:ab:4b:75:bb:8a:c7:6e:
29:87:85:4d:a7:ef:34:08:47:44:f6:de:e1:f5:ce:
de:19:45:93:9a:0a:37:ce:de:21:ce:c2:3c:7b:fe:
1e:e4:1b:b6:4a:fb:e7:fe:3d:ac:59:97:89:fa:84:
08:4e:1f:2a:5f:0c:f8:8b:1e:83:8e:e8:b2:76:84:
5e:3d:d0:d7:ad:67:8b:32:05:00:35:25:c8:3d:55:
5a:4d:ee:31:4d:a0:f1:0f:8e:a8:52:5c:b5:81:60:
72:7a:d4:ee:55:10:b7:e8:15:a7:0a:11:26:7c:70:
df:5d:4a:1b:2d:64:22:b7:bf:14:35:d4:f0:62:46:
e7:ae:06:a2:95:51:dd:87:f7:12:64:9e:fd:b1:72:
30:6f:f6:dc:9b:29:db:06:5f:68:82:aa:59:dc:3d:
6f:ee:62:f3:87:74:aa:7b:f5:3c:1e:e5:f6:62:c0:
fc:c7:fb:9a:59:e0:aa:37:8a:2f:c4:93:c4:71:63:
c2:96:4f:98:08:93:1b:7b:16:d5:78:d6:c0:0d:cb:
5b:d3:94:fd:0c:19:55:e3:9c:95:83:6f:e7:f4:26:
7b:78:5e:7b:55:3e:ff:06:57:05:c1:70:30:8d:dd:
97:e0:1e:90:ac:a8:b4:ba:24:05:71:6d:ec:79:c4:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:BA:5E:68:61:8F:AE:16:79:4C:F8:D9:96:9F:A4:C2:2A:15:EB
X509v3 Authority Key Identifier:
keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:f6:68:47:2f:34:7d:34:45:aa:4c:06:db:a6:a3:07:50:
25:48:9d:76:1c:1d:2a:55:a1:74:c9:bd:9d:56:7f:54:0a:78:
58:66:b1:b2:6b:ea:58:e4:0f:d2:6a:e9:12:31:0f:89:9c:7d:
e6:b7:f7:d5:8e:bc:04:f8:6b:05:bb:27:bf:5a:de:b0:ab:c4:
02:b3:27:07:dd:e9:79:51:c9:3b:0f:13:f2:54:54:22:ac:a4:
aa:72:bf:1e:5c:15:19:0e:3f:96:02:5a:2b:90:2d:e5:a2:de:
35:97:ac:d9:9e:2e:c7:d1:f6:44:07:ae:db:43:92:46:5c:57:
8e:40:29:03:f2:a0:e5:dc:24:40:f1:bd:c3:bd:02:fa:be:17:
b7:b3:1e:bc:85:cc:75:2f:79:28:00:02:26:b3:95:6b:6e:23:
b6:12:4a:4f:7a:1f:31:99:35:66:a1:44:8d:45:94:a9:20:7d:
59:5c:6a:96:8c:ac:83:db:64:b0:65:0b:50:ee:6b:be:16:96:
45:7c:e7:4b:c0:69:3b:ef:95:58:ca:c0:c9:f8:f7:8d:4b:7f:
21:83:c8:ea:60:6a:e2:e8:4b:98:17:54:36:ff:e8:3e:06:fa:
a1:9b:88:7e:fc:a4:c5:95:83:cf:6b:cf:52:3e:73:b1:3c:dd:
dc:a1:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:25:04 2025 by rpki-client on console.sobornost.net