Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/vTmQXyfmafhLEkgnom7K8iKKnrU.mft
File: vTmQXyfmafhLEkgnom7K8iKKnrU.mft (raw, json)
Hash identifier: /NN5Wk62m2RiylLiTnPCOp8xlUe67o993nfXvkMl+WI=
Subject key identifier: DD:C3:C4:C9:C9:1E:6F:17:71:5A:54:75:35:31:1B:F8:E1:1F:91:9D
Authority key identifier: BD:39:90:5F:27:E6:69:F8:4B:12:48:27:A2:6E:CA:F2:22:8A:9E:B5
Certificate issuer: /CN=bd39905f27e669f84b124827a26ecaf2228a9eb5
Certificate serial: 0185296E747E0E26B5935B0EC88B3DE70AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTmQXyfmafhLEkgnom7K8iKKnrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/vTmQXyfmafhLEkgnom7K8iKKnrU.mft
Manifest number: 0BD3
Signing time: Mon 19 Dec 2022 08:09:42 +0000
Manifest this update: Mon 19 Dec 2022 08:09:42 +0000
Manifest next update: Tue 20 Dec 2022 08:09:42 +0000
Files and hashes: 1: vTmQXyfmafhLEkgnom7K8iKKnrU.crl (hash: GUls/LqnVlUFnHf1l3UiPttbl1bKZOlpiFM2nI0WyVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:6e:74:7e:0e:26:b5:93:5b:0e:c8:8b:3d:e7:0a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd39905f27e669f84b124827a26ecaf2228a9eb5
Validity
Not Before: Dec 19 08:09:42 2022 GMT
Not After : Dec 20 08:09:42 2022 GMT
Subject: CN=ddc3c4c9c91e6f17715a547535311bf8e11f919d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:23:0a:d5:14:ed:06:a9:74:9f:2f:89:3b:
3a:ec:5e:77:f1:16:2a:1e:21:5f:ae:8b:e3:af:99:
b9:a7:40:48:a2:2e:c9:79:44:fd:8d:c0:3c:63:7f:
63:d2:5e:f8:5f:6d:eb:24:65:e2:c6:4d:6c:4a:87:
8d:02:a0:21:91:08:ce:ac:19:85:20:af:c7:a9:3b:
0d:1f:be:d1:f9:e8:e7:e9:e3:93:41:2b:a9:66:aa:
c2:01:55:bf:e6:da:e7:37:ba:da:1e:68:8e:00:ff:
43:19:ac:ff:c4:80:60:88:e9:7e:47:e0:1f:b2:a5:
c9:88:c8:56:ba:80:c9:9b:e7:8a:b3:48:d9:75:f2:
1a:e7:65:f7:31:9e:1a:73:0a:6b:68:de:59:9e:77:
d6:01:19:b8:29:2c:9b:12:b1:b1:2e:b8:3f:da:0a:
ad:82:d9:ec:3e:4d:1f:4b:68:ca:c5:cc:bc:76:d6:
44:d9:80:13:dc:fe:73:2f:d7:ef:74:8e:23:e9:13:
4f:78:91:f5:d5:02:c6:5b:bf:8b:fd:2f:d3:92:91:
2a:01:3e:bd:d3:a3:c8:f8:2d:bb:d4:08:19:5e:9c:
54:c2:34:1f:11:74:3a:75:7f:f2:58:71:01:9a:88:
fb:27:ce:d0:dd:78:df:c8:50:e5:68:95:af:66:cd:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C3:C4:C9:C9:1E:6F:17:71:5A:54:75:35:31:1B:F8:E1:1F:91:9D
X509v3 Authority Key Identifier:
keyid:BD:39:90:5F:27:E6:69:F8:4B:12:48:27:A2:6E:CA:F2:22:8A:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTmQXyfmafhLEkgnom7K8iKKnrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/vTmQXyfmafhLEkgnom7K8iKKnrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/vTmQXyfmafhLEkgnom7K8iKKnrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d0:0e:d8:9e:4c:90:53:7b:73:93:21:6c:9b:80:1c:8d:96:
ac:8e:75:b9:d6:7e:64:48:ab:3e:d6:77:d9:44:6a:4c:0c:5e:
34:78:2e:e1:d4:05:7e:96:17:f3:28:63:a0:c3:c1:73:36:60:
5a:ac:63:68:cf:8f:b3:a5:a2:69:1d:27:1b:0e:ec:d5:26:ca:
cb:03:75:81:47:ad:01:5c:bf:96:a1:2c:8d:2b:6b:c9:58:0e:
ba:d5:19:94:16:78:5b:9f:4d:d3:c4:ea:7e:95:03:b3:ad:a1:
97:f3:a3:6d:67:c0:b6:93:d6:04:2e:cd:30:8f:64:d3:04:6f:
b5:5d:36:ef:3b:b0:a5:a9:e5:f7:52:37:17:de:c1:3b:75:24:
c8:28:95:fa:14:de:72:29:cf:b5:22:a0:88:37:01:75:d0:5a:
c4:b8:16:f0:66:0d:c2:90:63:e2:51:bb:6f:50:87:5b:af:22:
d9:ae:56:89:aa:f9:4a:8d:7e:0c:f9:98:02:1c:91:12:15:17:
b8:4d:6e:14:60:b5:9b:e5:39:90:fa:cd:70:bb:8c:aa:52:c7:
09:4e:ac:8a:39:00:a8:da:45:dd:fe:09:ea:01:14:6d:07:02:
1c:99:51:25:1b:2a:c5:2e:f8:10:0b:02:57:e6:e6:45:1b:bf:
1c:19:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:34 2025 by rpki-client