Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier: z1tI6w/FlYL4NNup5evGsu9/2fwYGN9kOM1ngc6p3lk=
Subject key identifier: D6:19:D9:1A:71:26:25:6A:B2:D9:5D:3E:B1:77:25:20:97:C3:58:DB
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial: 0194BBCE51332C8F2AC6F784C94F1938B3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number: 0275
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=)
2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: BsRmHSfU/PoXFwvR1XfcsH7N/36BUgwgmVwY7+mpqCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:33:2c:8f:2a:c6:f7:84:c9:4f:19:38:b3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e610c2abd3664c11204580f748996555c22225
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=d619d91a7126256ab2d95d3eb177252097c358db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:1e:0d:06:75:76:fb:c1:8e:b4:32:7c:4b:
e7:cc:33:23:ab:a0:9a:75:bb:1e:6e:d2:20:b7:5f:
34:59:90:3c:f8:fc:4e:74:47:78:79:55:60:53:c4:
55:07:56:fc:18:89:18:15:db:e9:0b:bb:79:b4:fd:
9e:cf:41:df:b1:06:c1:42:22:a3:9d:79:2f:75:de:
09:06:b4:d0:aa:1e:5a:4a:15:34:28:09:a5:1b:ae:
9b:6c:9a:29:38:f7:c6:65:73:c2:13:18:2a:ae:d7:
54:60:4a:05:d3:e8:9f:6d:d3:c6:11:81:ec:58:72:
ec:22:55:c6:8d:32:fc:12:60:c7:38:35:37:b2:a2:
82:43:59:58:9a:32:74:73:04:b9:93:6c:92:14:f5:
e5:dc:a7:89:cb:7d:52:d1:ac:cb:55:85:47:ee:08:
7f:29:13:de:d9:29:9f:b5:8d:6c:55:e3:3b:b6:13:
ee:ac:36:df:3f:b1:4e:5f:fc:cc:e6:8f:89:7d:a5:
63:bd:3c:1d:66:c2:90:f5:b7:4e:1b:98:96:dd:9c:
af:91:bb:a9:10:75:01:b4:20:7b:1f:be:45:3e:8c:
40:54:3e:62:6c:f6:8a:16:a2:47:8b:6d:b4:fc:b0:
bf:92:c4:29:e1:51:17:b5:e2:1c:49:93:a1:95:e5:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:D9:1A:71:26:25:6A:B2:D9:5D:3E:B1:77:25:20:97:C3:58:DB
X509v3 Authority Key Identifier:
keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:11:c2:e8:ec:38:ff:b1:b9:24:32:f3:a9:5c:31:d3:eb:01:
d3:09:da:bd:b1:2e:16:f2:84:e8:bd:31:e0:4f:71:ea:92:27:
ee:e3:24:63:64:bd:89:cb:5e:c3:fe:25:51:23:95:74:1f:3f:
54:af:a1:59:14:d3:58:7e:83:5c:10:81:22:fb:bd:f0:02:a2:
f2:2c:31:59:9f:92:6c:e0:bb:c4:0d:aa:55:27:51:f4:4b:a6:
68:45:a2:b7:aa:40:90:95:09:98:5d:b7:5e:fa:24:88:6e:a2:
0e:dd:87:0f:ee:ea:26:ff:31:0e:9a:f8:b4:30:e0:79:e6:9d:
43:d3:1b:e0:86:4a:db:8e:64:96:b3:c5:d7:00:1c:ff:a9:78:
09:cc:78:2f:a5:00:5e:2e:59:07:35:a0:f9:8c:a9:8f:ee:cf:
b7:70:67:c6:e9:d8:51:de:4e:0f:6b:0f:28:97:4d:4d:21:fe:
2a:7f:93:0f:d2:22:e4:bd:e3:04:05:1f:c9:24:1e:f1:37:68:
a1:2a:19:a0:1f:34:a1:1b:c7:73:72:58:00:35:15:c2:f4:b2:
4c:ef:9c:53:63:31:0d:55:c3:08:58:3d:15:7d:18:48:77:97:
ea:71:83:d5:d5:0d:20:cc:3b:e5:ff:4d:95:59:c6:26:c3:b7:
6a:f4:57:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlEzLI8qxveEyU8ZOLO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj
MjIyMjUwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
EyhkNjE5ZDkxYTcxMjYyNTZhYjJkOTVkM2ViMTc3MjUyMDk3YzM1OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LMeDQZ1dvvBjrQyfEvnzDMjq6Ca
dbsebtIgt180WZA8+PxOdEd4eVVgU8RVB1b8GIkYFdvpC7t5tP2ez0HfsQbBQiKj
nXkvdd4JBrTQqh5aShU0KAmlG66bbJopOPfGZXPCExgqrtdUYEoF0+ifbdPGEYHs
WHLsIlXGjTL8EmDHODU3sqKCQ1lYmjJ0cwS5k2ySFPXl3KeJy31S0azLVYVH7gh/
KRPe2SmftY1sVeM7thPurDbfP7FOX/zM5o+JfaVjvTwdZsKQ9bdOG5iW3Zyvkbup
EHUBtCB7H75FPoxAVD5ibPaKFqJHi220/LC/ksQp4VEXteIcSZOhleUPzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYZ2RpxJiVqstldPrF3JSCXw1jbMB8GA1UdIwQY
MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt
NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz
LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShHC6Ow4
/7G5JDLzqVwx0+sB0wnavbEuFvKE6L0x4E9x6pIn7uMkY2S9ictew/4lUSOVdB8/
VK+hWRTTWH6DXBCBIvu98AKi8iwxWZ+SbOC7xA2qVSdR9EumaEWit6pAkJUJmF23
XvokiG6iDt2HD+7qJv8xDpr4tDDgeeadQ9Mb4IZK245klrPF1wAc/6l4Ccx4L6UA
Xi5ZBzWg+Yypj+7Pt3BnxunYUd5OD2sPKJdNTSH+Kn+TD9Ii5L3jBAUfySQe8Tdo
oSoZoB80oRvHc3JYADUVwvSyTO+cU2MxDVXDCFg9FX0YSHeX6nGD1dUNIMw75f9N
lVnGJsO3avRXyQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:21 2025 by rpki-client