Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: IQHlRVAktLDFX22vLZnR/HzTzwuMSEpKuggidf08gx4=
Subject key identifier: E3:DC:26:85:19:D8:7F:94:60:20:71:F1:78:14:D9:1C:A8:54:83:00
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 0194BC72C61E2F38D66917C6D2DAE641E878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0DFE
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: pajBeCI1yCEp4hvc1dcBQXNzxVIX9jCoRk1FeHGdt2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:1e:2f:38:d6:69:17:c6:d2:da:e6:41:e8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=e3dc268519d87f94602071f17814d91ca8548300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:85:4a:67:48:4e:ed:f4:4f:f6:17:47:a5:
e8:81:5c:0b:75:b8:6a:b2:6b:94:6a:74:09:04:9e:
04:2a:82:7e:af:88:15:c1:f4:5c:b2:8e:0f:d4:e6:
87:8a:80:f8:b0:8a:34:37:92:1f:dd:4c:0e:26:84:
77:11:c5:15:46:16:1f:5e:64:cf:f1:2a:db:27:ec:
7f:7f:b5:b4:9d:57:4b:60:0a:f5:95:d9:27:5d:66:
a8:f5:2f:bb:04:b5:3b:b1:20:8d:59:b4:e1:bb:f8:
1d:82:3b:87:d8:53:b1:3f:ea:6c:18:d6:72:83:b2:
ea:ab:96:36:7f:ef:a2:07:ff:07:f3:5f:54:7b:2a:
26:40:77:b4:37:13:66:57:0c:82:c4:cc:77:a6:95:
e7:eb:c7:a9:d3:e4:8c:5b:aa:20:ba:25:cb:45:fa:
48:15:12:b5:73:5a:34:ba:dc:54:b7:bb:b3:12:dd:
cd:1d:45:9e:9b:3e:f6:f4:f9:9c:ae:31:19:fb:a0:
64:74:bc:02:d1:7f:be:e1:a1:aa:13:3e:4e:84:37:
8e:c7:1a:06:71:08:52:03:e7:e5:e7:83:fb:90:3d:
d2:2c:74:00:b2:a6:bb:55:94:18:66:60:27:78:17:
e1:c6:4a:34:62:f1:a3:8d:b2:62:b2:f7:16:e9:1c:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DC:26:85:19:D8:7F:94:60:20:71:F1:78:14:D9:1C:A8:54:83:00
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9d:b0:03:9f:dc:26:6d:6f:21:b4:0a:73:52:f0:e5:08:89:
bb:9b:7a:5f:6f:cd:8a:c8:7c:b1:a2:43:47:6d:d0:2d:4b:30:
1d:7c:da:31:81:fd:1d:74:f3:a2:2b:83:e2:b1:22:cf:82:f2:
7c:96:94:8a:1b:f1:fe:18:ae:43:ec:ae:3e:25:68:f1:59:27:
50:cf:52:e4:61:17:33:9c:13:f2:0f:d4:98:c2:5c:16:8c:46:
fd:32:a6:71:e6:ac:ec:6a:83:66:26:19:65:0e:2f:a6:43:89:
98:ad:4f:d6:3c:54:ce:7f:8c:28:20:be:ea:a8:07:3c:bb:bf:
76:12:6c:ec:73:66:24:e5:83:e4:d7:1f:2a:ba:b5:30:5c:3c:
48:f2:71:84:d6:e2:bf:59:90:be:77:9a:35:98:58:39:ac:50:
7c:6d:82:3b:65:83:7d:d4:d8:43:40:9f:1f:ba:40:a2:38:d1:
6d:18:69:bb:1f:7d:b9:fb:40:b1:33:04:61:a1:60:49:bb:c2:
d0:c1:0f:f2:c5:ac:67:7f:a2:c2:bb:be:44:b2:45:cb:55:10:
e7:4c:dc:2c:de:6f:1d:3b:50:09:51:2d:07:5a:2f:4e:f6:84:
a0:94:30:fa:0e:c9:d2:cd:64:99:8c:19:84:2a:9d:c1:dd:21:
e0:92:1d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csYeLzjWaRfG0trmQeh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj
NDlkMzEwHhcNMjUwMTMxMTMwMDI1WhcNMjUwMjAxMTMwMDI1WjAzMTEwLwYDVQQD
EyhlM2RjMjY4NTE5ZDg3Zjk0NjAyMDcxZjE3ODE0ZDkxY2E4NTQ4MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlmFSmdITu30T/YXR6XogVwLdbhq
smuUanQJBJ4EKoJ+r4gVwfRcso4P1OaHioD4sIo0N5If3UwOJoR3EcUVRhYfXmTP
8SrbJ+x/f7W0nVdLYAr1ldknXWao9S+7BLU7sSCNWbThu/gdgjuH2FOxP+psGNZy
g7Lqq5Y2f++iB/8H819UeyomQHe0NxNmVwyCxMx3ppXn68ep0+SMW6oguiXLRfpI
FRK1c1o0utxUt7uzEt3NHUWemz729PmcrjEZ+6BkdLwC0X++4aGqEz5OhDeOxxoG
cQhSA+fl54P7kD3SLHQAsqa7VZQYZmAneBfhxko0YvGjjbJisvcW6Rx9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPcJoUZ2H+UYCBx8XgU2RyoVIMAMB8GA1UdIwQY
MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct
OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3
LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp2wA5/c
Jm1vIbQKc1Lw5QiJu5t6X2/Nish8saJDR23QLUswHXzaMYH9HXTzoiuD4rEiz4Ly
fJaUihvx/hiuQ+yuPiVo8VknUM9S5GEXM5wT8g/UmMJcFoxG/TKmceas7GqDZiYZ
ZQ4vpkOJmK1P1jxUzn+MKCC+6qgHPLu/dhJs7HNmJOWD5NcfKrq1MFw8SPJxhNbi
v1mQvneaNZhYOaxQfG2CO2WDfdTYQ0CfH7pAojjRbRhpux99uftAsTMEYaFgSbvC
0MEP8sWsZ3+iwru+RLJFy1UQ50zcLN5vHTtQCVEtB1ovTvaEoJQw+g7J0s1kmYwZ
hCqdwd0h4JIdQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:33 2025 by rpki-client