Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier: kZKgvxsRIFjPg5ug+eKqC3illNQ/hI/lQ34GnxMcOdM=
Subject key identifier: D1:9A:CD:1B:E1:C8:76:A2:F0:AC:1F:B3:79:62:AE:91:0E:A3:FC:D9
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0194BD4E6EDE6FF298DB3888F591A5C5BC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number: 0A35
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=)
2: YQXawzEq297nYPKGFHjn15vLQy4.roa (hash: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=)
3: j4-0AZNF6iCS-Y8DwznMUfguQKM.roa (hash: 9UHind5om+M7xPoByFFXJSZvuZyNAdK5MCxVIuXiRrs=)
4: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=)
5: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: 5CEUaFDpt6VZib4YP2GwspKQbq9c7WDcmEWctk1slZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6e:de:6f:f2:98:db:38:88:f5:91:a5:c5:bc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=d19acd1be1c876a2f0ac1fb37962ae910ea3fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:fd:a7:82:87:a2:fb:b3:65:c5:93:11:2a:
0b:bc:09:17:40:ed:d1:d4:8d:9e:f0:55:70:70:0a:
7c:41:5d:71:c7:6b:bd:70:d5:71:d6:b2:28:11:db:
f9:db:64:d4:65:f4:0a:bc:ae:78:c4:26:33:4b:d2:
fb:93:43:fa:34:a4:5e:74:f7:44:81:de:5a:3d:07:
09:29:48:18:f7:60:6d:89:4a:f6:e9:51:4f:75:5f:
e4:29:cc:76:96:c0:72:a9:f4:42:16:97:62:f3:b7:
f3:70:f2:6c:e6:b0:3a:b2:e6:29:4a:7b:af:be:c3:
d8:92:f0:0f:86:b2:8a:17:03:5e:47:f3:3f:35:f5:
ba:df:a3:d2:00:3b:e8:06:71:03:06:51:c3:3c:9b:
eb:27:87:72:d4:00:0b:16:64:1f:e7:17:7d:b1:e4:
91:09:d7:ae:67:04:46:c0:e5:99:6e:56:ec:0f:18:
c2:11:03:be:e8:22:86:be:d7:b7:de:30:96:84:c6:
c8:72:7d:9c:73:6e:ea:c6:98:be:48:8a:86:64:1a:
33:9d:f3:16:51:be:7e:6a:45:a2:ee:37:47:cf:37:
64:97:0b:ec:7d:69:dd:00:73:ad:92:5c:2c:c5:c7:
7c:47:73:e4:28:18:d6:28:cb:09:c0:b3:36:6a:62:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9A:CD:1B:E1:C8:76:A2:F0:AC:1F:B3:79:62:AE:91:0E:A3:FC:D9
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:30:14:e1:97:a5:57:83:ed:61:59:5e:8e:f4:b5:4c:de:
8b:0f:0b:3d:f0:f4:43:92:32:f1:d8:d6:e2:e1:ac:b2:24:46:
21:c9:e1:d6:53:17:d7:b9:b9:df:0f:c8:0b:4a:0b:69:c5:fa:
b9:e0:67:49:7a:65:ce:2b:47:10:6c:0f:7c:9e:d7:52:5d:a3:
9a:26:0b:14:86:2a:8c:c5:e5:e7:ef:39:db:c0:ad:cb:06:12:
29:62:24:f9:d8:50:56:9e:fc:43:17:d5:4c:70:fd:fd:98:e1:
81:32:57:0d:e5:91:40:f6:bf:b2:90:e1:81:d9:a1:38:da:ae:
dc:e3:cb:c3:a8:c3:c3:07:90:93:1d:ee:77:03:f3:bf:78:aa:
cf:32:50:7f:e8:50:3f:ba:f4:ab:31:9a:24:1d:53:7a:67:e5:
20:13:70:ae:88:ca:b7:4c:7e:73:f3:ac:fe:d8:50:dd:2d:99:
24:ff:29:45:2f:46:39:ac:e2:7b:1a:f0:d5:43:6a:71:e0:2c:
f8:06:0c:ab:96:f1:e1:19:eb:fc:19:30:48:62:19:24:41:e8:
6d:36:ff:7f:bf:03:9b:1d:41:ce:ca:83:05:07:4c:3c:30:44:
20:47:b4:83:40:ca:6a:61:3d:70:ab:8a:da:47:b3:36:42:e1:
f4:b7:84:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tm7eb/KY2ziI9ZGlxbyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjUwMTMxMTcwMDIxWhcNMjUwMjAxMTcwMDIxWjAzMTEwLwYDVQQD
EyhkMTlhY2QxYmUxYzg3NmEyZjBhYzFmYjM3OTYyYWU5MTBlYTNmY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolv9p4KHovuzZcWTESoLvAkXQO3R
1I2e8FVwcAp8QV1xx2u9cNVx1rIoEdv522TUZfQKvK54xCYzS9L7k0P6NKRedPdE
gd5aPQcJKUgY92BtiUr26VFPdV/kKcx2lsByqfRCFpdi87fzcPJs5rA6suYpSnuv
vsPYkvAPhrKKFwNeR/M/NfW636PSADvoBnEDBlHDPJvrJ4dy1AALFmQf5xd9seSR
CdeuZwRGwOWZblbsDxjCEQO+6CKGvte33jCWhMbIcn2cc27qxpi+SIqGZBoznfMW
Ub5+akWi7jdHzzdklwvsfWndAHOtklwsxcd8R3PkKBjWKMsJwLM2amLSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGazRvhyHai8Kwfs3lirpEOo/zZMB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5
LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfgwFOGX
pVeD7WFZXo70tUzeiw8LPfD0Q5Iy8djW4uGssiRGIcnh1lMX17m53w/IC0oLacX6
ueBnSXplzitHEGwPfJ7XUl2jmiYLFIYqjMXl5+8528CtywYSKWIk+dhQVp78QxfV
THD9/ZjhgTJXDeWRQPa/spDhgdmhONqu3OPLw6jDwweQkx3udwPzv3iqzzJQf+hQ
P7r0qzGaJB1TemflIBNwrojKt0x+c/Os/thQ3S2ZJP8pRS9GOaziexrw1UNqceAs
+AYMq5bx4Rnr/BkwSGIZJEHobTb/f78Dmx1BzsqDBQdMPDBEIEe0g0DKamE9cKuK
2kezNkLh9LeEQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:35 2025 by rpki-client