Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier: TCrKoEmtvHKX2MD3A2oADfvD4aU8Xgg5f5t+K4GA4Tc=
Subject key identifier: 1F:54:9E:AA:80:0A:32:79:A8:C9:62:6E:93:07:86:74:5E:2A:97:6A
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial: 0194BC04B394608D73074E58A39B374C189F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number: 021F
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: O7wVhYp5aN-EHbBcAt5o4QIzfyg.roa (hash: 1pH3pLqu6QshZ8HwYPfHNSe335AW5zx9SMrVG3Y2btc=)
2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: NGYg8eqg47fy32uCk/4/3PFHBo7KxBpNpNnl+xho6J8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:94:60:8d:73:07:4e:58:a3:9b:37:4c:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c7018034725963a971c96a8caab598cae638a
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=1f549eaa800a3279a8c9626e930786745e2a976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:95:7b:af:44:3e:e4:51:51:6a:f0:3e:c6:
0a:4c:e5:82:21:6a:a9:d3:43:b7:95:58:db:7b:66:
d9:60:7c:c2:1e:92:e1:c6:9f:a4:0b:26:91:de:f5:
26:16:a6:cb:90:7a:0e:4b:6b:5c:01:bc:7d:91:9e:
23:23:da:b1:44:88:aa:2f:09:77:97:2e:42:ec:ea:
18:71:09:c5:ca:65:d5:6a:ee:f9:1d:cb:c4:ef:81:
81:3f:6c:d1:29:f6:fc:fa:4c:77:56:42:22:20:af:
40:0e:58:27:c7:f4:34:88:27:7a:28:c0:16:c0:22:
3a:c2:1f:b3:f1:dd:58:80:cb:66:6c:c6:4a:7c:10:
c4:78:da:0f:ca:f3:12:69:d8:85:08:ea:dc:0f:a8:
68:4b:6e:26:e8:5e:3a:88:e2:45:c9:88:71:dc:ee:
ac:6b:62:43:f1:6e:59:62:b8:b7:2c:05:16:0e:d3:
8f:63:fc:29:12:cb:56:3c:0a:e6:ee:a1:1e:f3:3e:
bf:3c:c7:91:9b:ff:5d:70:a2:62:07:6b:ad:91:a1:
7f:db:92:54:11:0e:c9:5a:b4:ad:36:f2:31:35:86:
2c:1c:44:ec:1b:f0:7c:ab:31:6d:24:77:6b:eb:66:
b7:38:3f:8c:32:66:4b:7a:3e:00:1b:d0:84:b4:88:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:54:9E:AA:80:0A:32:79:A8:C9:62:6E:93:07:86:74:5E:2A:97:6A
X509v3 Authority Key Identifier:
keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fa:f8:8b:94:65:f6:be:e7:65:d5:5f:2b:80:ec:53:c8:6d:
da:73:ad:b5:5f:67:24:6b:4b:3a:d9:99:69:ce:15:3d:03:a8:
f7:95:ef:21:28:94:89:23:9b:5c:ee:9d:a8:bd:29:c0:09:6d:
30:11:68:9e:b5:5d:0d:90:7e:00:74:3b:e0:d8:41:1e:66:bb:
27:25:8e:34:98:7c:5e:a3:a2:0f:00:95:5c:06:d3:1d:6a:07:
8e:e4:05:f8:c4:0e:7e:32:37:57:03:2d:6b:4d:2e:8d:1e:8c:
1c:36:93:ce:35:82:11:9f:b6:f6:64:6f:c9:22:eb:3d:39:07:
bf:f6:ed:e6:5b:33:d1:15:1f:52:a8:04:21:9c:30:6c:16:59:
9d:8b:5c:05:f7:53:ab:ac:2c:d7:f9:66:1d:0e:ea:7f:23:27:
ba:df:84:14:b7:99:f4:97:fc:aa:cb:db:77:c7:bf:c6:23:a1:
3d:e0:21:59:22:28:c0:9f:4b:95:99:62:d6:64:d0:72:b7:3d:
f4:6f:a2:d2:30:ea:ab:92:ca:0b:7d:b5:23:7a:21:e8:38:9a:
95:68:6d:db:f6:35:f5:10:6d:fb:aa:c0:d8:ba:8d:4c:bb:29:
38:53:da:c6:5f:bb:97:a4:c7:28:ea:8e:40:45:49:4d:a5:45:
1f:ab:5f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLOUYI1zB05Yo5s3TBifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M3MDE4MDM0NzI1OTYzYTk3MWM5NmE4Y2FhYjU5OGNh
ZTYzOGEwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
EygxZjU0OWVhYTgwMGEzMjc5YThjOTYyNmU5MzA3ODY3NDVlMmE5NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJqVe69EPuRRUWrwPsYKTOWCIWqp
00O3lVjbe2bZYHzCHpLhxp+kCyaR3vUmFqbLkHoOS2tcAbx9kZ4jI9qxRIiqLwl3
ly5C7OoYcQnFymXVau75HcvE74GBP2zRKfb8+kx3VkIiIK9ADlgnx/Q0iCd6KMAW
wCI6wh+z8d1YgMtmbMZKfBDEeNoPyvMSadiFCOrcD6hoS24m6F46iOJFyYhx3O6s
a2JD8W5ZYri3LAUWDtOPY/wpEstWPArm7qEe8z6/PMeRm/9dcKJiB2utkaF/25JU
EQ7JWrStNvIxNYYsHETsG/B8qzFtJHdr62a3OD+MMmZLej4AG9CEtIiqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9UnqqACjJ5qMlibpMHhnReKpdqMB8GA1UdIwQY
MBaAFFQ8cBgDRyWWOpcclqjKq1mMrmOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2Qt
Mzc1ZjI0NDlhOGMxLzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2QtMzc1ZjI0NDlhOGMx
LzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfr4i5Rl
9r7nZdVfK4DsU8ht2nOttV9nJGtLOtmZac4VPQOo95XvISiUiSObXO6dqL0pwAlt
MBFonrVdDZB+AHQ74NhBHma7JyWONJh8XqOiDwCVXAbTHWoHjuQF+MQOfjI3VwMt
a00ujR6MHDaTzjWCEZ+29mRvySLrPTkHv/bt5lsz0RUfUqgEIZwwbBZZnYtcBfdT
q6ws1/lmHQ7qfyMnut+EFLeZ9Jf8qsvbd8e/xiOhPeAhWSIowJ9LlZli1mTQcrc9
9G+i0jDqq5LKC321I3oh6DialWht2/Y19RBt+6rA2LqNTLspOFPaxl+7l6THKOqO
QEVJTaVFH6tfwg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:22 2025 by rpki-client