Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: fIiKNIOPcmQ+bKo/pXdvl50ZyZbHvBKf59BAUtdgcsc=
Subject key identifier: BC:A0:A0:B7:2D:BF:63:46:D5:8E:32:06:1D:5B:4C:24:32:44:29:47
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 0194BC3CAEC0001B632E36709C808504D8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 098D
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
3: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: 41zwvry3JmMoXDk9SuwKAmslPJHqPT78Dh34ADscTvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ae:c0:00:1b:63:2e:36:70:9c:80:85:04:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=bca0a0b72dbf6346d58e32061d5b4c2432442947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:9f:9c:aa:5d:08:3f:03:63:13:88:a8:2e:
09:9c:1b:22:ef:90:d6:17:d3:e9:b1:77:cb:77:18:
5c:c3:9e:f2:b3:ff:cc:d6:c0:32:a9:25:6f:f9:45:
4e:65:09:8b:bb:e6:9e:f4:77:15:fc:ef:14:b1:69:
c3:80:ea:2c:13:6e:12:29:7b:4c:2c:d4:89:03:58:
8e:3d:a3:95:f9:40:0c:3f:73:43:d5:9e:84:90:9a:
bd:a2:a5:4f:8a:1b:58:1d:3e:6a:89:cc:48:d4:31:
d8:ab:18:c8:22:93:ca:c0:06:5f:10:ca:4f:39:a2:
1c:1a:7b:26:64:86:5f:95:36:9d:bb:fe:0d:a2:f5:
f8:2b:cc:78:b5:bd:9e:20:5b:fc:d9:07:e8:b7:70:
ac:3c:ab:d1:73:43:9b:77:6b:f1:7f:74:af:7a:bf:
9a:c3:de:3f:74:a9:62:b1:7a:69:4a:93:66:f4:f3:
ec:6f:34:ec:d7:9d:99:91:3b:d8:fa:a7:2c:54:cb:
63:02:0e:54:f0:3b:b8:35:33:8c:7c:69:d9:19:18:
e3:7d:c5:db:56:9b:bc:ff:8c:5f:0f:6d:62:b8:34:
db:96:e5:7c:34:33:f5:5e:c0:db:50:de:fc:7c:ab:
ea:57:23:c7:02:b2:78:77:86:e0:2b:91:a1:81:81:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:A0:B7:2D:BF:63:46:D5:8E:32:06:1D:5B:4C:24:32:44:29:47
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:eb:6c:ec:18:ab:59:56:9e:02:59:f2:fb:73:0e:5b:48:51:
01:7c:34:a5:92:47:2e:ac:71:31:51:83:85:b5:d9:b0:6b:f8:
94:4c:35:a3:3a:d6:47:dd:b1:06:8d:58:15:88:d7:ab:af:38:
d7:9e:97:56:b3:93:9c:ae:63:fb:e4:9b:55:a5:81:42:d5:a4:
8a:76:5e:6c:f4:10:56:1a:d0:e6:06:08:d7:e2:47:28:b7:57:
be:b6:3d:12:a6:34:75:7e:01:d7:03:09:5a:ff:c0:e2:3f:d8:
9f:54:4b:42:66:04:86:70:82:b0:93:8b:21:8f:cb:79:37:7d:
49:db:27:44:0d:5b:2f:19:f0:cc:57:33:6b:4f:4d:05:62:05:
e6:60:b9:37:30:e1:92:63:94:50:03:da:9f:24:30:86:19:a1:
1e:64:28:12:04:d4:76:75:b5:9f:35:f0:ef:3f:eb:f5:e5:7b:
8f:7f:fc:6f:27:9f:11:a9:25:31:62:37:71:db:b2:ee:26:84:
dc:de:7b:87:5a:93:76:e6:ea:c8:13:79:2d:4a:58:58:32:10:
a3:cf:65:28:c0:44:c0:78:34:35:6e:91:75:bc:3c:85:77:ac:
89:5b:45:7d:ec:bd:dc:8e:f9:66:0a:8f:91:0f:f5:ec:86:5a:
f3:2b:bf:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PK7AABtjLjZwnICFBNi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx
ZTRkNDMwHhcNMjUwMTMxMTIwMTIxWhcNMjUwMjAxMTIwMTIxWjAzMTEwLwYDVQQD
EyhiY2EwYTBiNzJkYmY2MzQ2ZDU4ZTMyMDYxZDViNGMyNDMyNDQyOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tCfnKpdCD8DYxOIqC4JnBsi75DW
F9PpsXfLdxhcw57ys//M1sAyqSVv+UVOZQmLu+ae9HcV/O8UsWnDgOosE24SKXtM
LNSJA1iOPaOV+UAMP3ND1Z6EkJq9oqVPihtYHT5qicxI1DHYqxjIIpPKwAZfEMpP
OaIcGnsmZIZflTadu/4NovX4K8x4tb2eIFv82Qfot3CsPKvRc0Obd2vxf3Sver+a
w94/dKlisXppSpNm9PPsbzTs152ZkTvY+qcsVMtjAg5U8Du4NTOMfGnZGRjjfcXb
Vpu8/4xfD21iuDTbluV8NDP1XsDbUN78fKvqVyPHArJ4d4bgK5GhgYGaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLygoLctv2NG1Y4yBh1bTCQyRClHMB8GA1UdIwQY
MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt
M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4
LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUets7Bir
WVaeAlny+3MOW0hRAXw0pZJHLqxxMVGDhbXZsGv4lEw1ozrWR92xBo1YFYjXq684
156XVrOTnK5j++SbVaWBQtWkinZebPQQVhrQ5gYI1+JHKLdXvrY9EqY0dX4B1wMJ
Wv/A4j/Yn1RLQmYEhnCCsJOLIY/LeTd9SdsnRA1bLxnwzFcza09NBWIF5mC5NzDh
kmOUUAPanyQwhhmhHmQoEgTUdnW1nzXw7z/r9eV7j3/8byefEaklMWI3cduy7iaE
3N57h1qTdubqyBN5LUpYWDIQo89lKMBEwHg0NW6Rdbw8hXesiVtFfey93I75ZgqP
kQ/17IZa8yu/+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:17 2025 by rpki-client