Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: CcLxBkRSXT+r48xv8+4tfDTxx5hP56lP29H48YxtbNg=
Subject key identifier: EB:06:C6:FA:B2:3A:32:2A:78:09:D3:AE:71:3A:3B:26:A8:D6:DF:51
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 0194BCE087D199DFE5F01EB76C329FEAF32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 08A8
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
2: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: M5T+P7T7fhnRzGC9vkc1Q142y1wcLX9zUW5AEHygoGE=)
3: iqdJN8sHfwO1sPuxLCpmupVWwoM.roa (hash: dJz0Laitt81U0rDiYpZ4I/hTrum0qQS8UUTJ0IjaiLI=)
4: tCBCZkdZFIegl0allg62wVbeH1Q.roa (hash: F9BLqElTomUF9mrqt6Awfg8woe+OpyYGWzMEJd9qmJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:87:d1:99:df:e5:f0:1e:b7:6c:32:9f:ea:f3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=eb06c6fab23a322a7809d3ae713a3b26a8d6df51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:af:07:7b:2d:ae:7d:5f:04:cc:d7:34:d4:
f2:bf:14:77:97:50:48:64:c6:44:44:ae:6e:c0:0a:
54:dc:d8:e6:da:c9:c9:93:ca:94:58:8a:74:41:b2:
f7:86:dd:3e:36:d7:f3:f4:0c:3f:41:7a:dc:09:74:
88:f8:70:1e:ec:a7:10:af:8c:db:dc:54:2a:ec:2a:
20:cb:67:ac:34:55:c7:36:9b:56:ee:88:44:b6:ac:
3c:f1:12:ce:58:48:ad:50:22:e0:a9:22:88:c3:ea:
39:73:d0:26:43:ba:cc:fb:25:2b:a1:5b:f9:ca:c4:
c5:58:d1:92:7d:14:6d:7c:09:31:9f:c4:8d:ca:58:
26:c2:b8:f7:b6:e6:4f:38:3c:de:d5:f9:9c:f5:0b:
02:36:bd:4c:05:ce:78:ba:15:ff:20:e0:81:dd:c7:
c0:d1:fa:48:99:49:b3:ec:54:2a:35:55:19:e4:d5:
11:4a:54:0a:39:53:d4:af:66:dd:05:b3:ca:b1:c0:
42:e8:3b:24:3a:b2:32:fd:6b:a7:7d:02:cf:39:c8:
0b:b2:6e:80:9b:a7:ad:da:ac:ea:35:75:be:ae:a8:
23:a6:92:f3:70:cb:01:b8:26:b4:86:b1:a4:e9:b4:
ca:1e:0d:d7:be:61:8b:db:ed:44:f7:a4:aa:4d:15:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:C6:FA:B2:3A:32:2A:78:09:D3:AE:71:3A:3B:26:A8:D6:DF:51
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:df:5f:ea:75:1e:cc:dd:77:55:b5:f7:81:be:4a:76:6e:39:
3f:7a:6f:e8:6a:0f:8e:20:69:e5:4a:87:79:b4:07:5f:9d:7f:
df:8a:99:18:84:03:ef:ba:b6:79:c0:c0:0a:49:5b:33:a1:f4:
a6:d2:d4:c4:5a:93:12:da:d4:43:33:22:55:6e:03:8f:60:b0:
79:87:e5:4d:0b:7c:7d:16:a1:c5:39:53:8d:f6:e0:fe:6e:f7:
45:60:a1:26:7f:88:d1:fa:ad:84:36:d0:3e:2e:f4:ce:e7:33:
81:83:27:b6:93:77:81:38:ba:21:d8:7a:9b:7b:d2:72:4c:f9:
e9:df:9b:bf:ca:8d:ce:9f:46:f7:d3:d9:44:97:7a:fc:2c:f4:
6c:bc:80:3e:0a:ef:e8:3f:99:7e:85:8a:0d:40:4f:f2:54:25:
9f:34:b2:57:09:91:ae:fc:a6:4b:f8:09:03:27:30:a9:02:1a:
9d:87:85:dc:01:81:48:cc:33:48:7e:dc:5a:54:4f:1b:b0:38:
33:38:44:be:79:b9:bd:60:46:75:3f:e2:4e:7f:74:b4:92:e6:
f1:fe:5f:d0:e0:16:46:6a:92:96:90:49:13:bf:15:9e:ac:00:
6a:58:b9:5a:1b:26:d1:24:5d:99:2f:f1:99:3f:0c:37:ba:a0:
c8:8d:31:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IfRmd/l8B63bDKf6vMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjUwMTMxMTUwMDE4WhcNMjUwMjAxMTUwMDE4WjAzMTEwLwYDVQQD
EyhlYjA2YzZmYWIyM2EzMjJhNzgwOWQzYWU3MTNhM2IyNmE4ZDZkZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIavB3strn1fBMzXNNTyvxR3l1BI
ZMZERK5uwApU3Njm2snJk8qUWIp0QbL3ht0+Ntfz9Aw/QXrcCXSI+HAe7KcQr4zb
3FQq7Cogy2esNFXHNptW7ohEtqw88RLOWEitUCLgqSKIw+o5c9AmQ7rM+yUroVv5
ysTFWNGSfRRtfAkxn8SNylgmwrj3tuZPODze1fmc9QsCNr1MBc54uhX/IOCB3cfA
0fpImUmz7FQqNVUZ5NURSlQKOVPUr2bdBbPKscBC6DskOrIy/WunfQLPOcgLsm6A
m6et2qzqNXW+rqgjppLzcMsBuCa0hrGk6bTKHg3XvmGL2+1E96SqTRVOawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsGxvqyOjIqeAnTrnE6Oyao1t9RMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd9f6nUe
zN13VbX3gb5Kdm45P3pv6GoPjiBp5UqHebQHX51/34qZGIQD77q2ecDACklbM6H0
ptLUxFqTEtrUQzMiVW4Dj2CweYflTQt8fRahxTlTjfbg/m73RWChJn+I0fqthDbQ
Pi70zuczgYMntpN3gTi6Idh6m3vSckz56d+bv8qNzp9G99PZRJd6/Cz0bLyAPgrv
6D+ZfoWKDUBP8lQlnzSyVwmRrvymS/gJAycwqQIanYeF3AGBSMwzSH7cWlRPG7A4
MzhEvnm5vWBGdT/iTn90tJLm8f5f0OAWRmqSlpBJE78VnqwAali5Whsm0SRdmS/x
mT8MN7qgyI0xfg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client