Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: dKWhGT9OF5bCaTOxaoZf22OIqTE0RPZaafDxBoCJ1yI=
Subject key identifier: C1:FE:3E:6C:15:18:23:AB:69:B9:32:FC:1C:76:FE:00:5C:25:31:76
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 0194BCA9AC780B3C006B4D8B4BBB0FAC9E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 0CD2
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 1ExgTuSySQyC_7FBzIv34_p5WTU.roa (hash: mZYs+TpSA4E+Path/+KS27rWuvTmn4NdNpBE5O9B57Y=)
2: rrezcNEUN6MGnNLWl4gekJAeqFw.roa (hash: KOXLh158R4ZUMzu019SjfG8NkVDv1gPIQsLtneXh9WQ=)
3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: wdpdY9GlRB4zaDy1vqa4iOhZ6UH3icfR5TFBzclUkpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:78:0b:3c:00:6b:4d:8b:4b:bb:0f:ac:9e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=c1fe3e6c151823ab69b932fc1c76fe005c253176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:c6:db:9c:a4:25:38:7c:4b:57:bf:94:07:
6f:44:b6:9c:91:b8:f8:d9:13:e0:a5:55:6e:33:c5:
d7:07:13:c3:5a:c3:a5:87:86:9e:37:6a:b8:2d:9d:
07:52:f4:05:22:f5:ae:e1:8a:5b:12:fc:57:3f:93:
bf:a0:e6:02:f2:b8:48:60:e3:22:33:d5:a4:60:af:
8b:ce:93:14:6f:64:cf:b1:d7:ef:13:17:80:b9:14:
de:e5:bb:f9:1e:3d:13:87:8f:cd:ba:d5:47:37:7d:
d8:cd:1b:c3:6e:f6:ae:20:df:4f:50:ee:31:72:98:
ae:18:5a:fe:7c:e2:78:0f:8c:fb:35:99:d9:cd:23:
a6:8f:06:87:5a:f4:f5:11:c9:cb:32:4a:04:65:27:
73:42:26:10:b8:7b:c0:7f:3e:0c:ad:bd:7e:80:2b:
0a:6f:61:67:cd:f9:b1:31:a3:e1:99:c7:c7:74:ae:
bf:98:4e:55:42:49:83:42:ab:5c:6b:7e:23:29:8d:
0c:54:43:99:5b:59:e8:bc:2f:aa:8a:d9:ae:90:ea:
87:ae:e9:d9:c2:35:17:48:0b:73:54:c8:78:09:0d:
69:91:f8:31:b0:7e:4b:a9:04:85:0f:6a:35:69:92:
6f:a0:4d:8f:2e:09:98:37:0b:73:1c:85:54:28:dd:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:3E:6C:15:18:23:AB:69:B9:32:FC:1C:76:FE:00:5C:25:31:76
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:58:db:24:c9:10:f8:52:ca:f7:11:97:88:ff:da:a1:58:47:
91:fa:df:3f:60:49:77:74:12:08:3d:cb:39:45:2d:47:b9:9a:
0a:5d:63:81:43:22:47:bc:fd:59:6d:bf:3c:95:97:63:3a:cb:
b5:65:4f:41:75:63:2b:5f:5a:1c:22:b9:f1:02:6a:bf:60:eb:
73:73:a1:ba:08:de:35:da:6d:f2:29:87:71:29:55:f8:ad:d4:
03:0b:cb:fa:53:c9:9e:20:86:64:3e:e0:9b:76:11:b9:3b:3b:
28:66:39:ec:ed:19:9f:90:19:06:71:bd:b9:21:89:21:80:84:
2b:ac:30:8c:28:fa:bf:47:ce:a2:2d:32:b7:c2:be:d8:37:27:
5c:58:86:a2:1d:db:a3:f5:85:d9:14:93:24:19:4a:14:04:df:
bf:19:23:09:81:44:e5:c8:85:57:cf:fb:90:82:04:8e:aa:ba:
59:f9:4a:1d:a9:18:1c:64:d3:76:35:bb:98:b7:67:75:a6:7a:
3e:da:76:17:26:13:91:c3:45:39:47:2a:94:60:aa:cb:01:f1:
a8:1e:ab:cf:b5:bd:9d:db:ea:22:39:72:7b:08:44:c9:70:51:
94:db:f6:08:26:47:fe:8e:df:56:66:7d:07:7c:27:ac:22:f6:
d5:9c:d4:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qax4CzwAa02LS7sPrJ4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx
OTlkNDkwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhjMWZlM2U2YzE1MTgyM2FiNjliOTMyZmMxYzc2ZmUwMDVjMjUzMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqijG25ykJTh8S1e/lAdvRLackbj4
2RPgpVVuM8XXBxPDWsOlh4aeN2q4LZ0HUvQFIvWu4YpbEvxXP5O/oOYC8rhIYOMi
M9WkYK+LzpMUb2TPsdfvExeAuRTe5bv5Hj0Th4/NutVHN33YzRvDbvauIN9PUO4x
cpiuGFr+fOJ4D4z7NZnZzSOmjwaHWvT1EcnLMkoEZSdzQiYQuHvAfz4Mrb1+gCsK
b2FnzfmxMaPhmcfHdK6/mE5VQkmDQqtca34jKY0MVEOZW1novC+qitmukOqHrunZ
wjUXSAtzVMh4CQ1pkfgxsH5LqQSFD2o1aZJvoE2PLgmYNwtzHIVUKN1ZOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH+PmwVGCOrabky/Bx2/gBcJTF2MB8GA1UdIwQY
MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt
YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk
LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArljbJMkQ
+FLK9xGXiP/aoVhHkfrfP2BJd3QSCD3LOUUtR7maCl1jgUMiR7z9WW2/PJWXYzrL
tWVPQXVjK19aHCK58QJqv2Drc3OhugjeNdpt8imHcSlV+K3UAwvL+lPJniCGZD7g
m3YRuTs7KGY57O0Zn5AZBnG9uSGJIYCEK6wwjCj6v0fOoi0yt8K+2DcnXFiGoh3b
o/WF2RSTJBlKFATfvxkjCYFE5ciFV8/7kIIEjqq6WflKHakYHGTTdjW7mLdndaZ6
Ptp2FyYTkcNFOUcqlGCqywHxqB6rz7W9ndvqIjlyewhEyXBRlNv2CCZH/o7fVmZ9
B3wnrCL21ZzUEQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:40 2025 by rpki-client