Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
File: vwhJDuKbOzwpO91zIrWjOthA2AE.mft (raw, json)
Hash identifier: jS79tjWEQ5gGxxybq9W1tIQfuIGUiQO2G9Bz3pS6V1c=
Subject key identifier: 40:22:B8:65:B3:16:7E:A4:BC:EA:6F:F6:A7:ED:9D:76:21:C4:EB:AE
Authority key identifier: BF:08:49:0E:E2:9B:3B:3C:29:3B:DD:73:22:B5:A3:3A:D8:40:D8:01
Certificate issuer: /CN=bf08490ee29b3b3c293bdd7322b5a33ad840d801
Certificate serial: 0193DC6E28330FAC1818BA6AE978F0294878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
Manifest number: 0926
Signing time: Thu 19 Dec 2024 01:00:26 +0000
Manifest this update: Thu 19 Dec 2024 01:00:26 +0000
Manifest next update: Fri 20 Dec 2024 01:00:26 +0000
Files and hashes: 1: vwhJDuKbOzwpO91zIrWjOthA2AE.crl (hash: WxQOHOzKDAyJLWCMyzTtbwzFTjxvwxorm9Helg8wbDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dc:6e:28:33:0f:ac:18:18:ba:6a:e9:78:f0:29:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf08490ee29b3b3c293bdd7322b5a33ad840d801
Validity
Not Before: Dec 19 01:00:26 2024 GMT
Not After : Dec 20 01:00:26 2024 GMT
Subject: CN=4022b865b3167ea4bcea6ff6a7ed9d7621c4ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:d2:88:52:6d:17:f5:7a:b4:cb:34:16:f1:
e3:7b:0c:90:0c:fb:2d:99:55:30:2f:ba:89:8d:9b:
f2:a1:06:e2:a3:f8:93:39:a1:94:14:2b:88:1c:c7:
b3:99:e8:33:ec:b5:a7:66:ea:6d:4b:bc:f8:9f:ac:
c7:96:8f:2e:26:e8:e7:fa:3d:0e:06:28:be:91:c9:
82:a8:54:8f:4a:ee:62:d2:c2:a7:0d:0c:ef:da:37:
af:18:a5:68:b2:2c:79:4d:92:ae:c3:58:9f:a0:1b:
05:10:22:52:7c:32:1e:13:28:14:e3:67:ee:f7:e8:
04:45:bd:2c:5f:ed:c5:c4:f4:b7:68:cc:b2:31:6b:
20:a9:44:26:56:4d:5c:f0:29:f3:a0:f3:d8:03:a2:
0a:a2:d6:ed:d3:3d:6d:45:90:16:76:01:0d:08:67:
49:3e:99:55:44:08:c5:2c:5b:9c:87:51:91:f2:99:
9a:3b:33:bb:c8:f5:8b:30:19:c1:e5:a5:92:5f:8b:
cc:e0:93:8e:78:b2:e6:0e:89:bd:05:8d:ad:07:04:
f9:76:0e:21:2f:d8:58:c6:75:54:16:2a:f1:08:20:
70:1b:f8:78:b3:21:c5:23:b5:5b:20:b1:66:0e:5c:
82:8d:58:79:c5:65:92:ff:e4:25:6a:d5:c1:99:59:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:B8:65:B3:16:7E:A4:BC:EA:6F:F6:A7:ED:9D:76:21:C4:EB:AE
X509v3 Authority Key Identifier:
keyid:BF:08:49:0E:E2:9B:3B:3C:29:3B:DD:73:22:B5:A3:3A:D8:40:D8:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:8e:4e:3d:00:6c:3c:8a:2e:a7:ae:16:fa:3c:b8:59:39:
ce:d3:9e:0d:5d:97:c1:e2:60:fd:81:f8:f2:ca:53:ad:e3:02:
81:93:70:6a:d3:0c:4e:4a:7c:9b:14:78:37:66:0a:b3:2c:d6:
c3:94:77:86:18:f6:88:5e:b7:ce:26:4e:6d:04:94:e9:2f:e8:
25:42:ff:cd:c7:5b:7f:2a:70:13:5b:4e:29:cc:6d:dc:1d:2b:
99:05:4d:9d:f7:8e:48:b0:70:89:c9:dc:94:bc:92:d4:d5:8c:
17:91:64:71:de:5f:ba:03:c6:ca:d8:31:eb:c8:6a:69:66:45:
60:4d:5f:2b:07:d4:dd:bd:9c:f4:fb:a1:26:bb:96:80:d8:dc:
1f:29:a9:1e:1b:5c:97:e7:c5:40:64:a5:8d:a0:94:26:00:6f:
43:8a:64:9c:ff:45:9f:ec:da:c7:32:12:92:06:f0:1a:2c:ec:
81:88:e6:f4:a0:78:3d:13:df:95:51:45:5e:1a:8f:d0:16:1a:
c9:cc:00:ca:9a:5c:e8:05:1e:75:63:5b:d1:2c:da:99:d9:d7:
20:80:5b:62:d3:49:8e:00:f8:29:14:77:9f:9a:73:df:cc:7b:
8e:ec:78:a5:16:4a:bf:16:68:fe:f4:b5:03:6c:05:cf:73:d3:
8e:77:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:29:52 2025 by rpki-client