Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: kLP5fM+ZhOQBh03+7BoxynUWKyVdPVODEqm72NaRRFE=
Subject key identifier: 19:5A:97:ED:28:44:87:81:DA:3C:53:48:6E:56:B2:A2:2B:CE:AB:D0
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 0194BCA98601BDCFE65734807C59D551FF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 0FC2
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: y9hRCzzXokdjrkTez/ZNFVLF5Waq7DbCmdC7VxwXPT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:01:bd:cf:e6:57:34:80:7c:59:d5:51:ff:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=195a97ed28448781da3c53486e56b2a22bceabd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:7c:95:62:7f:8a:20:b8:a2:24:ae:e2:78:
3e:68:c5:40:6a:c6:ae:7c:f5:7c:65:f9:26:47:ef:
14:69:37:e5:54:68:ff:90:67:a1:e8:e5:1a:fd:45:
e9:a0:de:30:17:2e:d7:1c:2d:1a:23:49:78:f4:92:
45:c2:70:47:fb:7a:47:23:0e:e7:08:e9:51:b8:24:
dd:0f:bb:f5:5b:bf:cc:27:9f:4f:d3:8a:62:9c:c3:
24:d6:14:18:46:d7:76:d5:10:bb:77:4d:9b:0c:b6:
3d:4f:7a:a9:27:74:92:4c:40:30:d0:f9:b2:5c:d9:
f3:fa:01:83:dc:56:87:33:d3:17:4a:ca:7f:37:65:
86:e1:45:05:23:4b:67:90:96:b7:81:76:d6:38:3f:
ff:65:80:78:8c:78:65:74:1f:5d:90:38:f0:09:09:
df:1b:ae:88:9b:a6:10:a0:a2:fc:90:54:ed:10:9e:
cb:d5:d5:50:c0:84:fc:79:3f:84:0c:8d:25:2d:ed:
ef:25:3f:20:f2:01:e7:c5:71:c2:11:2c:95:4f:fe:
29:35:ea:73:72:95:91:87:f2:e3:a1:02:56:aa:19:
99:73:71:bd:14:64:6a:ff:ea:10:0a:af:f4:a9:1a:
ba:16:f6:d1:66:a5:7f:40:d6:a1:94:da:0d:4d:af:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5A:97:ED:28:44:87:81:DA:3C:53:48:6E:56:B2:A2:2B:CE:AB:D0
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:cc:d5:7f:42:c1:d7:dd:2e:8e:98:52:df:07:d3:6e:d0:
52:05:43:12:bd:38:bd:44:dd:8a:ad:ac:72:c2:3b:54:4b:73:
4b:99:9e:e6:f8:99:2e:ff:b3:cd:9e:13:aa:88:2f:39:29:d4:
31:04:e8:8a:cf:2d:e8:62:5b:20:6f:e4:04:6b:01:0e:97:51:
46:0b:10:9d:69:5d:70:3b:d6:d0:84:87:e2:40:49:15:23:ca:
1d:ae:87:fe:67:3b:5e:39:e0:77:fd:ed:72:5e:43:b6:ae:69:
7d:1e:03:59:ce:ef:e2:bd:3c:bd:fc:c0:e2:80:36:c1:6b:1f:
0f:f8:63:46:b0:1a:a5:3b:0a:04:a9:b1:c2:35:cb:44:69:b6:
70:26:90:ad:37:a5:60:77:37:84:94:f9:32:da:82:c6:db:c6:
cb:45:bb:2d:12:c0:8d:c4:68:5d:ce:40:7c:3f:13:6f:24:ed:
78:a3:54:ee:0a:14:9a:4e:41:7c:71:02:5b:eb:bb:29:78:6d:
7f:d5:bd:be:b2:ac:70:14:1d:7d:19:e5:e2:53:14:40:e0:ca:
23:3b:b5:e1:c7:0a:6d:12:ba:2b:b4:bd:8f:fc:fc:63:0b:1b:
8c:60:fe:66:39:1e:84:81:fd:10:b6:fe:b3:07:43:43:11:90:
47:83:36:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYYBvc/mVzSAfFnVUf8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OWM2NGE2YWM0YzQ5NzZhZDM2MjE0MTJhMTM3NDU5ZTY0
OWFiOWUwHhcNMjUwMTMxMTQwMDEzWhcNMjUwMjAxMTQwMDEzWjAzMTEwLwYDVQQD
EygxOTVhOTdlZDI4NDQ4NzgxZGEzYzUzNDg2ZTU2YjJhMjJiY2VhYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYZ8lWJ/iiC4oiSu4ng+aMVAasau
fPV8ZfkmR+8UaTflVGj/kGeh6OUa/UXpoN4wFy7XHC0aI0l49JJFwnBH+3pHIw7n
COlRuCTdD7v1W7/MJ59P04pinMMk1hQYRtd21RC7d02bDLY9T3qpJ3SSTEAw0Pmy
XNnz+gGD3FaHM9MXSsp/N2WG4UUFI0tnkJa3gXbWOD//ZYB4jHhldB9dkDjwCQnf
G66Im6YQoKL8kFTtEJ7L1dVQwIT8eT+EDI0lLe3vJT8g8gHnxXHCESyVT/4pNepz
cpWRh/LjoQJWqhmZc3G9FGRq/+oQCq/0qRq6FvbRZqV/QNahlNoNTa8VaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlal+0oRIeB2jxTSG5WsqIrzqvQMB8GA1UdIwQY
MBaAFFWcZKasTEl2rTYhQSoTdFnmSaueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjIt
ZjMxNTEwNzcxMTg1LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjItZjMxNTEwNzcxMTg1
LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvXM1X9C
wdfdLo6YUt8H027QUgVDEr04vUTdiq2scsI7VEtzS5me5viZLv+zzZ4TqogvOSnU
MQTois8t6GJbIG/kBGsBDpdRRgsQnWldcDvW0ISH4kBJFSPKHa6H/mc7Xjngd/3t
cl5Dtq5pfR4DWc7v4r08vfzA4oA2wWsfD/hjRrAapTsKBKmxwjXLRGm2cCaQrTel
YHc3hJT5MtqCxtvGy0W7LRLAjcRoXc5AfD8TbyTteKNU7goUmk5BfHECW+u7KXht
f9W9vrKscBQdfRnl4lMUQODKIzu14ccKbRK6K7S9j/z8YwsbjGD+ZjkehIH9ELb+
swdDQxGQR4M2XA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:06 2025 by rpki-client