Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: JxRaIQXMyf2x2rAwAx7PvHGlmfwWQvgMqEoTl1AvkBY=
Subject key identifier: 34:06:EF:21:A5:5A:C0:32:47:7B:92:11:95:03:93:1F:81:1D:C9:37
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 0194BD4EA8704026F464389E421FE517EBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: yP1Ty8+AQLUjJ19XxfHFUEnUsffeVVifoKkB3Sf5rY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a8:70:40:26:f4:64:38:9e:42:1f:e5:17:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=3406ef21a55ac032477b92119503931f811dc937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:54:5c:68:fe:a3:12:4b:c7:68:46:d9:66:
7f:7f:6c:0a:51:b8:04:01:ad:53:4a:7b:be:5a:43:
1c:d9:72:31:d2:f2:a4:84:0c:d0:8c:8e:a2:be:e9:
44:0a:b1:b8:ec:99:a4:81:75:c6:34:b3:1a:9c:bc:
f9:63:d9:45:12:6e:7a:e2:f0:a4:0f:ec:f3:72:5f:
83:3b:cd:b4:25:ed:77:ae:fd:6d:b2:f8:8f:0c:a3:
62:e3:01:ef:fb:77:83:61:a8:7c:e1:2e:5c:73:3b:
6f:12:02:09:80:67:36:69:01:68:f4:56:38:d2:d3:
c1:28:8b:fa:c2:90:96:6e:c8:4f:bb:06:aa:c8:91:
5b:14:30:4e:e8:41:d8:6b:a7:6f:a1:32:23:b6:7a:
2e:1d:95:75:1b:3b:1c:33:73:c2:e1:30:35:86:f5:
7f:f6:64:ed:21:eb:e3:90:64:cc:37:72:8a:b1:a6:
66:4f:48:8a:93:5c:d0:87:91:52:44:63:26:17:3c:
5e:08:f3:8e:75:f8:49:f9:f3:ff:9a:3e:77:5d:3d:
8a:61:59:50:1e:94:eb:d5:8e:cf:51:3b:32:2c:9a:
8e:5d:7b:6e:40:19:d9:f0:7f:d7:ac:4f:50:da:ce:
12:9a:ae:1c:d1:ec:ed:55:9f:98:d5:f3:27:b9:da:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:EF:21:A5:5A:C0:32:47:7B:92:11:95:03:93:1F:81:1D:C9:37
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7f:a8:21:cf:80:90:9d:3f:0b:07:4f:b6:1f:ee:a4:fb:f6:
eb:87:d8:29:eb:34:d5:7b:a4:7b:f2:2a:b7:a8:d5:eb:0e:b1:
26:9c:2f:73:42:46:0f:05:e3:d1:c0:f7:cf:42:ef:10:f2:81:
99:66:68:8c:53:b9:18:12:ed:67:eb:2e:d3:20:eb:16:57:c7:
b7:78:73:eb:63:a5:c3:84:4b:ae:8b:ce:fd:c1:58:ed:94:cc:
ea:9e:b1:67:5a:61:52:a3:1a:dc:3e:4c:73:4a:0b:ad:1a:9b:
61:81:c4:02:49:e4:f3:27:c7:10:31:37:ed:65:66:71:73:ce:
4d:e3:7c:80:13:b5:83:66:6f:30:e8:8d:9f:8f:c6:ce:78:7a:
ec:74:c5:56:27:a5:b1:a2:82:c9:c9:cd:89:31:60:70:cd:a8:
80:a9:7f:ed:76:ae:80:cb:1c:02:43:ca:88:a2:24:6c:91:6d:
eb:0c:ce:ad:a6:8f:0d:fa:e1:d0:ad:19:93:82:02:97:4e:68:
60:a5:85:e3:32:45:6e:57:fd:df:a2:00:4c:7a:1a:f0:93:6c:
e9:2f:ef:d3:ed:9c:ac:12:f6:de:31:eb:05:f1:6d:7f:9f:f1:
48:a1:de:7d:90:1c:a8:02:e6:6f:06:ff:f2:7d:ce:f6:c0:bd:
13:24:a6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqhwQCb0ZDieQh/lF+v5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4
ZTkwNWYwHhcNMjUwMTMxMTcwMDM2WhcNMjUwMjAxMTcwMDM2WjAzMTEwLwYDVQQD
EygzNDA2ZWYyMWE1NWFjMDMyNDc3YjkyMTE5NTAzOTMxZjgxMWRjOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DJUXGj+oxJLx2hG2WZ/f2wKUbgE
Aa1TSnu+WkMc2XIx0vKkhAzQjI6ivulECrG47JmkgXXGNLManLz5Y9lFEm564vCk
D+zzcl+DO820Je13rv1tsviPDKNi4wHv+3eDYah84S5ccztvEgIJgGc2aQFo9FY4
0tPBKIv6wpCWbshPuwaqyJFbFDBO6EHYa6dvoTIjtnouHZV1GzscM3PC4TA1hvV/
9mTtIevjkGTMN3KKsaZmT0iKk1zQh5FSRGMmFzxeCPOOdfhJ+fP/mj53XT2KYVlQ
HpTr1Y7PUTsyLJqOXXtuQBnZ8H/XrE9Q2s4Smq4c0eztVZ+Y1fMnudpjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQG7yGlWsAyR3uSEZUDkx+BHck3MB8GA1UdIwQY
MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt
MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4
LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan+oIc+A
kJ0/CwdPth/upPv264fYKes01Xuke/Iqt6jV6w6xJpwvc0JGDwXj0cD3z0LvEPKB
mWZojFO5GBLtZ+su0yDrFlfHt3hz62Olw4RLrovO/cFY7ZTM6p6xZ1phUqMa3D5M
c0oLrRqbYYHEAknk8yfHEDE37WVmcXPOTeN8gBO1g2ZvMOiNn4/Gznh67HTFViel
saKCycnNiTFgcM2ogKl/7XaugMscAkPKiKIkbJFt6wzOraaPDfrh0K0Zk4ICl05o
YKWF4zJFblf936IATHoa8JNs6S/v0+2crBL23jHrBfFtf5/xSKHefZAcqALmbwb/
8n3O9sC9EySmgw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client