Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/VCHd-wfM1sHguNcQ78EH1bfByGo.mft
File: VCHd-wfM1sHguNcQ78EH1bfByGo.mft (raw, json)
Hash identifier: pOsafvAl9EbdCXB0h37HdqgICnMcYXA5q36ENZuQJ30=
Subject key identifier: F3:4A:96:38:2E:DC:75:8B:29:91:B3:06:78:E3:7C:54:89:11:FE:BC
Authority key identifier: 54:21:DD:FB:07:CC:D6:C1:E0:B8:D7:10:EF:C1:07:D5:B7:C1:C8:6A
Certificate issuer: /CN=5421ddfb07ccd6c1e0b8d710efc107d5b7c1c86a
Certificate serial: 018B1E2F23EE1C699A24D6804D624B744291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCHd-wfM1sHguNcQ78EH1bfByGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/VCHd-wfM1sHguNcQ78EH1bfByGo.mft
Manifest number: 0F2C
Signing time: Wed 11 Oct 2023 10:01:27 +0000
Manifest this update: Wed 11 Oct 2023 10:01:27 +0000
Manifest next update: Thu 12 Oct 2023 10:01:27 +0000
Files and hashes: 1: VCHd-wfM1sHguNcQ78EH1bfByGo.crl (hash: 40D0McNtab34OlQydSin9ay9lUSCaFNOhUyovKGNf70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2f:23:ee:1c:69:9a:24:d6:80:4d:62:4b:74:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ddfb07ccd6c1e0b8d710efc107d5b7c1c86a
Validity
Not Before: Oct 11 10:01:27 2023 GMT
Not After : Oct 12 10:01:27 2023 GMT
Subject: CN=f34a96382edc758b2991b30678e37c548911febc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:eb:ea:9b:ce:a5:6f:de:ac:ea:1b:93:71:
fd:1c:e9:9a:8d:a9:91:38:51:0b:f4:32:d6:3f:a7:
a4:52:8c:0c:c9:f0:89:25:90:47:f2:6c:8d:6c:14:
ad:66:74:38:c7:6a:83:90:7e:20:49:e2:89:92:79:
a3:33:0f:80:73:bf:f6:fc:9a:8a:3d:0d:77:8a:25:
35:db:82:d8:4a:88:2b:78:12:c7:56:12:78:b6:8f:
09:65:f2:32:67:13:61:76:bd:08:d8:25:fd:7d:ed:
12:9b:fb:74:b2:2d:38:dc:38:7e:58:82:ed:ed:86:
be:2a:4e:f9:3f:fb:14:e9:e9:fb:f6:a7:1d:4d:27:
2c:5c:8e:05:84:a3:3c:2a:c0:82:89:70:ba:02:4c:
4c:f3:7d:1d:a5:48:0e:82:18:8a:d0:7f:62:9f:a9:
4f:1f:3d:f4:95:a0:f7:44:cb:4e:85:c1:5b:63:36:
98:80:f2:59:b8:9a:91:e7:91:85:37:e1:55:06:8a:
e2:9d:16:01:5a:6d:b9:8d:85:30:3d:7b:fb:65:d8:
79:de:3e:0b:ec:21:46:0a:0d:3d:39:4a:c7:66:98:
9a:b2:4f:e3:8c:61:3f:2b:c6:a5:40:9d:88:df:4e:
0b:1f:fd:11:68:00:1c:9a:3d:28:35:cb:9c:f3:11:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4A:96:38:2E:DC:75:8B:29:91:B3:06:78:E3:7C:54:89:11:FE:BC
X509v3 Authority Key Identifier:
keyid:54:21:DD:FB:07:CC:D6:C1:E0:B8:D7:10:EF:C1:07:D5:B7:C1:C8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCHd-wfM1sHguNcQ78EH1bfByGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/VCHd-wfM1sHguNcQ78EH1bfByGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/VCHd-wfM1sHguNcQ78EH1bfByGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:b3:1c:b6:22:06:dc:26:ad:ac:e9:a8:45:3f:0a:75:7d:
02:71:41:d1:91:23:79:97:39:0f:47:a7:e8:8e:69:e7:dd:b6:
5f:ec:fa:df:37:5e:13:96:c1:36:03:07:03:12:40:84:27:7e:
90:98:ae:28:7e:d3:9a:ba:ff:7f:7d:2c:9d:a0:1e:26:1b:d0:
ad:1c:7e:50:8a:74:d9:cb:2f:09:ab:bb:6c:ac:d7:90:49:5d:
34:4d:9d:f0:41:c5:fd:7b:5e:59:63:05:c4:30:e8:41:fa:d2:
89:84:3b:ee:81:ea:e7:a5:8e:e7:c5:da:56:e7:64:5b:fc:09:
71:ec:24:f1:15:b7:77:82:91:82:a6:2e:31:4a:80:37:f6:02:
1a:e3:85:cc:53:a1:e8:03:80:2f:7a:3b:59:00:fd:81:96:5e:
ff:ab:44:d5:fa:1c:c5:3d:0c:5f:3a:9f:7b:2c:ed:8a:a9:19:
b2:85:a9:d8:c5:64:84:78:6d:5b:8e:da:27:00:4f:64:c1:ce:
e8:73:1b:ee:99:c9:b8:c7:9e:54:03:6d:61:e2:7b:bd:2b:44:
aa:c1:13:07:81:b2:c3:4a:5c:b3:ab:5f:19:57:9d:48:cd:ab:
f6:76:aa:93:7c:4c:1e:d3:10:ce:a8:b6:89:96:81:38:d6:47:
b4:51:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:14 2025 by rpki-client