Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: FE8hGgFs2KnmjZweE5l+/Ly+5RgNsK1YHW4m2aEcMX4=
Subject key identifier: ED:FD:CD:6C:E9:15:38:0B:3A:E4:01:F1:F3:A6:E1:2D:F1:7E:5F:42
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0194BD17CC2C740E017F32C34E4EAB09BEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 030C
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: eiQT7e7xVI3qnmGyCbgm625LC2UCd1ICYeurIj8jjPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:2c:74:0e:01:7f:32:c3:4e:4e:ab:09:be:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=edfdcd6ce915380b3ae401f1f3a6e12df17e5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:8d:f9:82:c2:02:4b:3a:fd:0e:dd:9f:39:
c2:5a:d0:24:dd:1e:c3:25:21:71:d4:79:4c:1c:22:
de:4c:76:66:d5:65:a0:7a:c2:0b:fe:13:f9:4f:44:
82:bc:7b:6d:ae:84:6f:38:d7:dc:a6:f9:50:2b:9e:
68:05:62:75:42:16:d4:05:28:45:9d:dd:f5:8d:ba:
2f:f6:69:e4:37:66:a3:f2:4c:76:d4:e2:9c:a0:b4:
30:ed:84:48:f5:85:59:d6:a6:f7:07:67:7e:cf:74:
c5:b5:00:0f:a0:01:1a:a9:32:e7:64:d0:be:11:bf:
d3:7f:7e:e5:15:35:62:25:e8:cc:f7:b2:07:af:0e:
f0:f1:1d:f9:4d:00:f2:c5:44:2b:4d:eb:72:59:c2:
24:5e:28:82:c2:7d:04:ac:95:02:be:61:4a:87:e0:
24:3c:69:a1:ac:a5:5f:13:65:2c:da:6a:fe:f1:bc:
38:8e:a2:e8:c3:36:16:17:fc:3e:21:c2:6e:cb:a0:
b2:be:7a:29:89:76:d4:88:6b:81:a7:85:0b:2e:85:
62:8b:b7:01:ce:74:1f:f9:0b:8d:59:dd:7a:d5:ad:
8d:3d:78:e4:de:1c:23:28:12:61:51:18:81:de:aa:
9b:e4:04:7c:08:fc:f9:f5:3b:db:8a:fd:58:1f:38:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:CD:6C:E9:15:38:0B:3A:E4:01:F1:F3:A6:E1:2D:F1:7E:5F:42
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:81:b5:a4:d8:47:d7:01:18:12:0f:34:a8:26:aa:8c:7a:78:
e7:9f:a1:7d:1a:f9:29:ea:8e:df:b0:31:6f:57:e4:03:28:db:
ed:13:49:84:a3:bb:a4:d9:c2:29:2f:b4:d6:d8:25:1d:f4:f5:
3d:2a:f4:e7:ca:04:f6:55:fc:f1:ab:b9:5e:f6:0e:01:78:d9:
15:d4:88:6b:5b:ff:11:71:65:80:b6:8c:02:85:5c:18:e5:41:
73:dc:c3:3e:60:46:f3:09:3c:16:2b:5d:b8:08:15:73:a0:1e:
23:64:90:aa:e1:75:30:86:ea:6d:e0:18:c9:f5:b8:c9:a6:95:
88:99:1a:60:80:91:ba:b7:e7:8c:a2:29:87:4a:03:23:23:7f:
c4:59:68:e7:ed:2f:59:93:41:f2:77:7b:bd:82:53:12:58:3b:
86:e2:58:34:32:bf:9e:32:f9:b5:6d:16:a0:03:a3:87:5d:a8:
18:7d:cc:6b:67:75:ce:50:59:de:e1:e7:f8:cd:44:59:4d:fc:
f1:eb:e3:ba:bd:ab:44:aa:bf:39:f6:b8:a4:bd:62:87:f9:d5:
9a:27:e6:56:8c:bb:b4:6a:a2:73:10:d6:db:27:3c:dd:ae:57:
74:dd:14:3c:d6:5b:dd:49:88:c6:65:b5:b1:ce:87:81:19:39:
b2:cd:66:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8wsdA4BfzLDTk6rCb7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
EyhlZGZkY2Q2Y2U5MTUzODBiM2FlNDAxZjFmM2E2ZTEyZGYxN2U1ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIyN+YLCAks6/Q7dnznCWtAk3R7D
JSFx1HlMHCLeTHZm1WWgesIL/hP5T0SCvHttroRvONfcpvlQK55oBWJ1QhbUBShF
nd31jbov9mnkN2aj8kx21OKcoLQw7YRI9YVZ1qb3B2d+z3TFtQAPoAEaqTLnZNC+
Eb/Tf37lFTViJejM97IHrw7w8R35TQDyxUQrTetyWcIkXiiCwn0ErJUCvmFKh+Ak
PGmhrKVfE2Us2mr+8bw4jqLowzYWF/w+IcJuy6CyvnopiXbUiGuBp4ULLoVii7cB
znQf+QuNWd161a2NPXjk3hwjKBJhURiB3qqb5AR8CPz59Tvbiv1YHzjljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO39zWzpFTgLOuQB8fOm4S3xfl9CMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIG1pNhH
1wEYEg80qCaqjHp455+hfRr5KeqO37Axb1fkAyjb7RNJhKO7pNnCKS+01tglHfT1
PSr058oE9lX88au5XvYOAXjZFdSIa1v/EXFlgLaMAoVcGOVBc9zDPmBG8wk8Fitd
uAgVc6AeI2SQquF1MIbqbeAYyfW4yaaViJkaYICRurfnjKIph0oDIyN/xFlo5+0v
WZNB8nd7vYJTElg7huJYNDK/njL5tW0WoAOjh12oGH3Ma2d1zlBZ3uHn+M1EWU38
8evjur2rRKq/Ofa4pL1ih/nVmifmVoy7tGqicxDW2yc83a5XdN0UPNZb3UmIxmW1
sc6HgRk5ss1mYw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:27 2025 by rpki-client