Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier: /vlfnGTvURaXf3x+p08Ej1KF8G06pvSnFd0Yzl4FekE=
Subject key identifier: 86:D2:92:0E:8C:FF:00:72:13:59:E9:12:44:DB:5F:19:33:A5:D2:59
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 0194BBCE7BF18AD0AD35263BE18B56B90DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number: 0DC3
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 1-546Kti0lJhdCgM2BGLPJH8tB7A.roa (hash: DZKGU1PUOmodvcooBnReEnL3w/IZk9xJ+ihgar9xlKQ=)
2: DAWuOXIzShKngVeAXIk14zxR1_o.roa (hash: BRexZQjukSfkz0NX2Zg92MIjIVuvAgUDzsMd3Qrzxp0=)
3: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: mX1jaWVH1TbbjSjxXLtMD8CybVimbplm6Ngr50mz3/g=)
4: kc4z2zzYiTW0GaLmTuuhDE91d5o.roa (hash: g/g6twuj787QLJVbdboV8m3Ts06Is1fDi161w4I+b/0=)
5: zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa (hash: /Tu77k3GY/MF6l/555p9Pg+IHa6U4tx0rpsWT2I4Xao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:f1:8a:d0:ad:35:26:3b:e1:8b:56:b9:0d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=86d2920e8cff00721359e91244db5f1933a5d259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:dd:8f:7f:03:9e:86:ee:da:58:b3:dd:27:
51:7b:54:95:cd:df:3c:fd:f1:49:86:c8:8d:eb:4f:
b4:39:8e:40:3b:b4:7c:6b:01:6d:f8:85:55:db:d3:
76:ff:54:61:6c:19:d0:9b:0c:46:71:96:30:42:08:
eb:e1:b6:5e:83:cb:a4:7a:6e:85:00:3b:08:fa:7d:
f0:93:e4:e1:fc:08:12:32:90:85:29:67:e0:75:68:
5f:fa:59:52:c0:94:bd:22:22:3b:39:75:7e:3f:70:
e8:8d:e7:b9:c3:1c:ac:4a:94:75:2e:63:16:d1:6e:
45:a8:51:60:b7:58:69:ba:20:33:d7:1a:b0:a7:6b:
35:49:5c:fd:3e:b9:fc:89:20:27:da:36:f6:0d:39:
93:76:a8:e1:4e:ec:dc:71:ce:c6:c1:65:38:e1:0b:
e4:c8:b5:62:79:0e:de:15:5d:84:d1:1e:ac:90:58:
3f:91:31:ad:b6:96:e4:c4:34:e5:90:12:ec:2b:1f:
2c:a8:54:0c:80:d1:eb:e4:fb:fe:ae:d9:b2:87:86:
0e:48:6b:47:80:a8:2d:36:bb:06:ba:1f:45:d6:c3:
ed:1b:5f:13:c5:0a:a6:2a:d6:e1:79:68:66:47:14:
03:46:c0:3f:da:a3:98:2d:24:9f:3c:c0:14:bd:47:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:92:0E:8C:FF:00:72:13:59:E9:12:44:DB:5F:19:33:A5:D2:59
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1e:3d:bf:d3:5e:4f:ea:04:5c:1a:04:cd:ba:0a:18:43:6f:
26:28:e6:b1:f7:6e:6a:19:61:59:c0:02:92:36:17:50:63:d3:
e6:21:65:3b:d1:26:5a:3e:de:98:b0:6d:fe:8a:a4:38:98:65:
ac:27:7a:43:d9:3a:de:7e:73:08:66:8e:55:d9:a5:c8:48:1d:
57:99:1d:69:17:f7:36:fc:f6:ee:62:b0:6e:e6:73:2b:c2:a6:
03:d4:bc:57:42:2f:fd:d1:d4:fa:c9:8f:39:44:f3:0e:94:dd:
2f:cb:25:f7:36:b5:0b:98:44:46:8b:be:9e:62:c9:c7:64:e9:
80:f6:bf:6f:14:61:82:84:b7:fa:e1:ad:38:55:10:2b:e8:58:
56:e6:b5:a4:d6:68:62:55:d2:55:4a:1c:d1:36:8e:85:af:23:
00:84:49:be:df:f2:8d:74:e6:bb:6d:52:34:fd:fb:2d:13:0c:
aa:75:63:44:c8:ee:7d:df:2d:82:d7:68:cf:f6:c3:4d:01:a9:
21:94:13:0e:06:b2:84:27:79:56:6f:67:27:8a:ec:91:1c:25:
58:cc:d2:4e:13:55:8c:19:4d:a0:0d:ed:59:16:3b:44:ee:f9:
f0:ad:a9:a7:1b:a2:b3:d6:73:d3:8d:27:fe:38:e2:89:ce:46:
65:21:3f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znvxitCtNSY74YtWuQ2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3
ZWVkMTMwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
Eyg4NmQyOTIwZThjZmYwMDcyMTM1OWU5MTI0NGRiNWYxOTMzYTVkMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Hdj38Dnobu2liz3SdRe1SVzd88
/fFJhsiN60+0OY5AO7R8awFt+IVV29N2/1RhbBnQmwxGcZYwQgjr4bZeg8ukem6F
ADsI+n3wk+Th/AgSMpCFKWfgdWhf+llSwJS9IiI7OXV+P3Dojee5wxysSpR1LmMW
0W5FqFFgt1hpuiAz1xqwp2s1SVz9Prn8iSAn2jb2DTmTdqjhTuzccc7GwWU44Qvk
yLVieQ7eFV2E0R6skFg/kTGttpbkxDTlkBLsKx8sqFQMgNHr5Pv+rtmyh4YOSGtH
gKgtNrsGuh9F1sPtG18TxQqmKtbheWhmRxQDRsA/2qOYLSSfPMAUvUcg1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbSkg6M/wByE1npEkTbXxkzpdJZMB8GA1UdIwQY
MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt
MjM3YmU3NzMwMDdhLzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh
LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR49v9Ne
T+oEXBoEzboKGENvJijmsfduahlhWcACkjYXUGPT5iFlO9EmWj7emLBt/oqkOJhl
rCd6Q9k63n5zCGaOVdmlyEgdV5kdaRf3Nvz27mKwbuZzK8KmA9S8V0Iv/dHU+smP
OUTzDpTdL8sl9za1C5hERou+nmLJx2TpgPa/bxRhgoS3+uGtOFUQK+hYVua1pNZo
YlXSVUoc0TaOha8jAIRJvt/yjXTmu21SNP37LRMMqnVjRMjufd8tgtdoz/bDTQGp
IZQTDgayhCd5Vm9nJ4rskRwlWMzSThNVjBlNoA3tWRY7RO758K2ppxuis9Zz040n
/jjiic5GZSE/Lw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:25 2025 by rpki-client