Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.mft
File: v0WmpZwO_YpD-qfheqFY6cbLnlI.mft (raw, json)
Hash identifier: gnexJZ5YLAbjug6muqBY85NwVBGvSAa83mtHIz9EogE=
Subject key identifier: 17:7F:8F:7F:07:D3:F8:F5:1A:AB:74:98:15:BC:45:3D:D4:DE:AE:9F
Authority key identifier: BF:45:A6:A5:9C:0E:FD:8A:43:FA:A7:E1:7A:A1:58:E9:C6:CB:9E:52
Certificate issuer: /CN=bf45a6a59c0efd8a43faa7e17aa158e9c6cb9e52
Certificate serial: 01924372E34D99732479C7B56805C98411C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0WmpZwO_YpD-qfheqFY6cbLnlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.mft
Manifest number: 01D2
Signing time: Mon 30 Sep 2024 15:00:55 +0000
Manifest this update: Mon 30 Sep 2024 15:00:55 +0000
Manifest next update: Tue 01 Oct 2024 15:00:55 +0000
Files and hashes: 1: v0WmpZwO_YpD-qfheqFY6cbLnlI.crl (hash: BAfX83cbafWrDc/Fl3gFffDaTn8ydg7/PirbNuY4mEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:72:e3:4d:99:73:24:79:c7:b5:68:05:c9:84:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf45a6a59c0efd8a43faa7e17aa158e9c6cb9e52
Validity
Not Before: Sep 30 15:00:55 2024 GMT
Not After : Oct 1 15:00:55 2024 GMT
Subject: CN=177f8f7f07d3f8f51aab749815bc453dd4deae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:25:c0:5e:a2:10:f9:f9:4f:3c:56:50:4c:
56:0a:9c:41:89:1d:19:7d:e5:bb:5c:bc:47:48:54:
32:25:f6:74:54:92:12:ae:a9:4c:af:d2:73:92:92:
17:93:c6:4d:df:5e:56:e9:95:e7:64:61:e5:60:8d:
7c:f6:a0:0b:81:6f:35:50:3c:74:cf:48:79:4f:63:
22:1a:a5:02:d4:16:a0:81:f2:8c:cd:a4:51:d2:99:
52:2d:5c:61:a6:73:f7:14:c8:a2:99:31:46:ca:ee:
bf:fd:f3:5b:6a:c8:ad:0d:4e:6c:70:b5:cc:21:f8:
db:5b:3b:6c:a4:5b:91:f1:30:7b:91:ef:c7:77:20:
ee:9b:be:16:b5:24:ea:55:7e:5f:70:ad:c1:6f:7e:
75:24:c8:66:d3:ac:a0:7f:3b:7a:9a:6a:15:09:8a:
3d:d9:a5:cf:02:9c:70:91:10:01:a6:6d:96:de:e6:
3e:f9:99:70:d3:dd:83:7e:78:42:6b:30:e3:c1:9a:
9f:2e:c6:c5:13:f3:a1:41:90:09:d5:84:c6:19:fb:
c9:bc:12:72:2c:21:12:f2:21:27:c4:40:52:c0:4e:
7c:ef:e1:94:82:f1:b5:d6:61:64:af:9d:4f:19:be:
bb:03:da:91:dd:21:9e:a3:43:16:a7:ae:c2:8f:7e:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7F:8F:7F:07:D3:F8:F5:1A:AB:74:98:15:BC:45:3D:D4:DE:AE:9F
X509v3 Authority Key Identifier:
keyid:BF:45:A6:A5:9C:0E:FD:8A:43:FA:A7:E1:7A:A1:58:E9:C6:CB:9E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0WmpZwO_YpD-qfheqFY6cbLnlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:92:92:a0:d0:60:6a:93:ed:22:17:1d:c1:8d:e3:5c:84:
75:03:f3:86:80:4a:92:41:b4:76:88:53:44:35:21:5e:d4:57:
9b:f6:10:01:45:f1:c7:24:25:cc:5f:5f:a0:8e:73:8d:42:28:
5a:02:eb:d6:4f:25:3d:f7:b2:de:83:b4:2c:91:64:f6:fd:09:
5d:ca:fd:30:e4:c8:a5:cf:1b:d5:16:78:4b:b8:e0:86:08:d7:
28:b9:c2:96:59:a3:b2:16:b3:af:1f:0c:d5:95:b1:57:90:93:
bd:8c:10:15:fd:72:bb:76:24:3e:c6:32:62:7e:9b:c7:d9:94:
75:45:d3:eb:ea:00:63:2a:cb:ec:99:cb:20:d9:86:93:81:ed:
66:78:d7:f5:af:65:36:31:eb:a6:46:4b:81:b8:e7:53:58:ef:
1c:69:75:6b:ba:29:44:51:61:ef:fb:98:86:f9:7f:f0:13:cd:
9c:3d:ad:2e:57:80:f3:51:e1:e8:92:80:85:cf:5e:c1:63:0b:
f5:63:80:0a:78:e8:aa:0a:67:54:a8:21:bf:3f:88:1e:cc:2e:
40:f6:61:1d:00:94:cf:0a:80:db:e9:2b:e7:3a:fd:ba:8b:6c:
66:20:a0:8a:93:87:6e:b1:d4:2c:16:88:a0:70:c3:91:eb:cb:
96:f0:6d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJDcuNNmXMkece1aAXJhBHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDVhNmE1OWMwZWZkOGE0M2ZhYTdlMTdhYTE1OGU5YzZj
YjllNTIwHhcNMjQwOTMwMTUwMDU1WhcNMjQxMDAxMTUwMDU1WjAzMTEwLwYDVQQD
EygxNzdmOGY3ZjA3ZDNmOGY1MWFhYjc0OTgxNWJjNDUzZGQ0ZGVhZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl14lwF6iEPn5TzxWUExWCpxBiR0Z
feW7XLxHSFQyJfZ0VJISrqlMr9JzkpIXk8ZN315W6ZXnZGHlYI189qALgW81UDx0
z0h5T2MiGqUC1BaggfKMzaRR0plSLVxhpnP3FMiimTFGyu6//fNbasitDU5scLXM
IfjbWztspFuR8TB7ke/HdyDum74WtSTqVX5fcK3Bb351JMhm06ygfzt6mmoVCYo9
2aXPApxwkRABpm2W3uY++Zlw092DfnhCazDjwZqfLsbFE/OhQZAJ1YTGGfvJvBJy
LCES8iEnxEBSwE587+GUgvG11mFkr51PGb67A9qR3SGeo0MWp67Cj37YKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd/j38H0/j1Gqt0mBW8RT3U3q6fMB8GA1UdIwQY
MBaAFL9FpqWcDv2KQ/qn4XqhWOnGy55SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBXbXBad09fWXBELXFmaGVxRlk2Y2JMbmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYWMxZWYtMzQxNC00MzRlLTlkNDgt
NGNhYjAyNGY0NzBmLzEvdjBXbXBad09fWXBELXFmaGVxRlk2Y2JMbmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYWMxZWYtMzQxNC00MzRlLTlkNDgtNGNhYjAyNGY0NzBm
LzEvdjBXbXBad09fWXBELXFmaGVxRlk2Y2JMbmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6CSkqDQ
YGqT7SIXHcGN41yEdQPzhoBKkkG0dohTRDUhXtRXm/YQAUXxxyQlzF9foI5zjUIo
WgLr1k8lPfey3oO0LJFk9v0JXcr9MOTIpc8b1RZ4S7jghgjXKLnCllmjshazrx8M
1ZWxV5CTvYwQFf1yu3YkPsYyYn6bx9mUdUXT6+oAYyrL7JnLINmGk4HtZnjX9a9l
NjHrpkZLgbjnU1jvHGl1a7opRFFh7/uYhvl/8BPNnD2tLleA81Hh6JKAhc9ewWML
9WOACnjoqgpnVKghvz+IHswuQPZhHQCUzwqA2+kr5zr9uotsZiCgipOHbrHULBaI
oHDDkevLlvBtlg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:37:22 2025 by rpki-client