Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: ft4YgEBdfqSmusrC1EnaAAk1ubRZFRHoeJvgtyhHe6E=
Subject key identifier: B3:80:D3:E3:CE:40:DD:7B:08:F6:BA:77:D3:C1:B8:D1:47:1E:42:4C
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 0194BC729FCDA3C595017450D26FC8FFF47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: W0ISdcMD3BWsHVPGG7LkFApumXs.roa (hash: ycAJc8E2fcKafG7/xeE7xIvkeS6Y7snCVRq4mmzolw0=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: o0XDgNb1oZV4lbb4mTzfXYWohRaFA5GIUzpOPXPDRcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9f:cd:a3:c5:95:01:74:50:d2:6f:c8:ff:f4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=b380d3e3ce40dd7b08f6ba77d3c1b8d1471e424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:e9:83:fe:6c:83:d6:a8:1a:1d:7a:7b:6d:
ba:fb:c7:63:6b:37:3c:6f:82:f3:51:85:25:c3:75:
5c:0f:8a:6e:45:8c:5f:04:b9:db:48:e0:b1:46:9f:
0d:6d:a5:7b:60:6d:78:a2:1c:a1:8c:86:ac:f7:a6:
1b:1a:a0:97:db:0e:b8:92:9c:70:b8:41:76:d2:7a:
a5:2b:ba:e2:ea:5f:e8:b8:c2:ee:48:11:81:30:78:
64:f4:bf:c2:28:cd:e3:1b:0f:90:73:c0:4c:17:53:
49:04:41:a9:07:c3:b1:72:07:4d:54:8c:89:e9:d9:
61:7b:d1:e0:a4:d5:7e:9d:cb:b4:ad:44:69:41:57:
e2:6a:ca:5b:79:62:21:be:03:eb:c9:a5:57:a8:60:
fc:48:7d:48:6c:c9:1d:2c:fc:2d:1d:00:62:3e:97:
f8:ec:67:6c:87:3d:6e:3f:84:db:1d:1b:d6:85:4b:
46:b7:b7:d9:1b:e9:b9:35:3a:56:fc:e9:9d:98:03:
9f:4f:ad:2a:bf:55:f3:f1:55:0a:b0:15:be:01:59:
3e:71:3f:f7:55:94:2c:d2:dc:e2:3f:39:99:47:2b:
37:32:0b:6d:57:b2:5d:11:38:4e:33:13:36:ce:c4:
a1:ac:9f:f2:95:0e:0f:6c:f1:69:57:fe:c7:55:6c:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:D3:E3:CE:40:DD:7B:08:F6:BA:77:D3:C1:B8:D1:47:1E:42:4C
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:e5:87:dd:99:d6:86:0d:ad:ef:8e:3f:81:17:11:e0:53:
93:b5:d7:8e:a4:fa:33:8f:70:70:f0:86:68:92:04:71:6a:8b:
9f:4b:e9:4f:0d:93:e1:35:9b:31:39:5a:b5:d5:ff:8d:09:f9:
7b:c2:4f:20:a8:ee:c7:75:f1:73:59:29:0c:02:c9:94:e8:28:
2d:4e:a0:80:6b:d3:40:ec:e3:c9:40:41:42:8b:78:bf:7a:53:
44:6f:95:63:ed:31:83:42:35:3f:06:8f:42:db:e7:22:af:ba:
33:f9:db:f3:24:c4:e4:6b:0c:45:92:a1:22:9f:1a:ab:71:8c:
2f:5c:47:e1:c0:07:34:fa:4b:62:9b:cc:b6:5b:fc:83:78:9b:
c9:8b:10:34:df:a8:7e:6e:b7:2d:21:56:cb:81:9f:0f:39:d5:
88:cc:7b:30:10:c0:a8:bc:e5:74:b4:ab:d1:5d:13:c7:47:aa:
f5:fd:37:a9:26:8f:e4:2a:db:27:11:d0:2f:28:da:f2:03:85:
9a:bf:4e:d9:a0:76:27:6f:12:d8:ed:05:d5:ee:56:34:1b:94:
6e:d5:f1:26:09:6a:63:50:76:8b:8f:b3:72:8b:2d:23:71:e6:
20:53:f1:e1:92:c6:7f:a0:eb:be:5c:e8:67:9e:a3:f6:10:07:
d4:d1:81:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cp/No8WVAXRQ0m/I//R+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjQ5NzA0N2YyMGQ2ZjcwOGQ3ZGI0MjU1N2I2OThmYmZi
M2Q4ZmIwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EyhiMzgwZDNlM2NlNDBkZDdiMDhmNmJhNzdkM2MxYjhkMTQ3MWU0MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqDpg/5sg9aoGh16e226+8djazc8
b4LzUYUlw3VcD4puRYxfBLnbSOCxRp8NbaV7YG14ohyhjIas96YbGqCX2w64kpxw
uEF20nqlK7ri6l/ouMLuSBGBMHhk9L/CKM3jGw+Qc8BMF1NJBEGpB8OxcgdNVIyJ
6dlhe9HgpNV+ncu0rURpQVfiaspbeWIhvgPryaVXqGD8SH1IbMkdLPwtHQBiPpf4
7Gdshz1uP4TbHRvWhUtGt7fZG+m5NTpW/OmdmAOfT60qv1Xz8VUKsBW+AVk+cT/3
VZQs0tziPzmZRys3MgttV7JdEThOMxM2zsShrJ/ylQ4PbPFpV/7HVWw4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOA0+POQN17CPa6d9PBuNFHHkJMMB8GA1UdIwQY
MBaAFL1klwR/INb3CNfbQlV7aY+/s9j7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUt
ODJhMTA3YzRhN2UyLzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUtODJhMTA3YzRhN2Uy
LzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnnlh92Z
1oYNre+OP4EXEeBTk7XXjqT6M49wcPCGaJIEcWqLn0vpTw2T4TWbMTlatdX/jQn5
e8JPIKjux3Xxc1kpDALJlOgoLU6ggGvTQOzjyUBBQot4v3pTRG+VY+0xg0I1PwaP
QtvnIq+6M/nb8yTE5GsMRZKhIp8aq3GML1xH4cAHNPpLYpvMtlv8g3ibyYsQNN+o
fm63LSFWy4GfDznViMx7MBDAqLzldLSr0V0Tx0eq9f03qSaP5CrbJxHQLyja8gOF
mr9O2aB2J28S2O0F1e5WNBuUbtXxJglqY1B2i4+zcostI3HmIFPx4ZLGf6Drvlzo
Z56j9hAH1NGBaw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:33 2025 by rpki-client