Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: uO6UoIgIRvdYxJdF5a7MdgJfalu8hUmuUTzpKIX+eTk=
Subject key identifier: 9B:1A:4F:21:B5:09:0C:30:71:08:30:7F:CA:D5:44:41:BB:5D:E9:A3
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 0194BCE0C07CF2711CD18A60CF224680D692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: sE8LipPSDvklp2jRWHTOWHS4cV4ERGNQ8FdkjjiPpys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:7c:f2:71:1c:d1:8a:60:cf:22:46:80:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=9b1a4f21b5090c307108307fcad54441bb5de9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:eb:52:9e:02:23:46:4c:f0:34:12:7f:72:
f5:e4:9a:bf:b6:ef:5b:88:e6:39:43:17:8d:c0:99:
a0:b2:b8:18:76:2d:da:f2:1c:cb:1f:13:77:04:35:
51:4d:5c:3e:9f:ce:76:55:18:f5:b1:9f:ed:21:e0:
a3:b5:7a:cc:4d:35:d5:06:99:b8:2d:0f:3b:9e:4f:
a4:b1:03:8e:45:37:92:ea:56:be:dc:e5:22:d1:0e:
8c:3a:3a:b1:98:8f:36:1a:ec:5c:40:40:c9:74:94:
a5:29:9d:39:1c:2f:aa:aa:55:8a:74:8e:f9:d4:b2:
0c:fd:b6:fd:31:32:12:a5:1f:49:8b:9a:44:23:7f:
ad:a9:e4:4f:09:ba:01:d1:df:a4:1a:50:d9:e5:cc:
da:74:92:0f:ad:4e:ad:37:f0:06:7e:6b:94:a3:14:
91:02:aa:8a:6e:27:c9:95:21:85:83:0e:36:00:94:
46:29:64:34:0f:fb:0e:28:69:fc:29:d6:07:68:d3:
13:d8:30:66:e3:3e:5c:4b:d5:f1:81:fd:fb:42:0d:
56:94:ee:9c:dd:84:b4:2d:04:7d:f2:df:86:39:bc:
6b:0c:64:ca:ee:a2:dc:8a:47:98:fa:1d:a4:4d:ca:
b6:0d:94:56:a4:bc:75:6e:00:22:e1:c4:19:d0:14:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:4F:21:B5:09:0C:30:71:08:30:7F:CA:D5:44:41:BB:5D:E9:A3
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:49:9c:ed:16:6c:8d:87:00:e9:15:f6:70:0e:a1:81:8e:
5f:a4:24:b4:3c:ff:ba:11:eb:1a:34:bf:07:04:08:c6:9a:a5:
29:c8:90:89:04:45:5e:53:cf:01:72:48:4a:d8:4e:e3:fe:46:
9b:ab:80:7e:9b:a8:09:c3:fa:fc:5a:ad:9b:12:19:e4:ae:b8:
b6:40:53:d6:4b:03:4d:f2:e3:00:05:ac:c0:59:ec:ee:09:ef:
9d:d6:c6:d9:3e:2d:db:af:d4:e0:90:e6:63:f3:bd:e9:5b:4f:
ac:85:72:9f:36:20:52:1f:0c:91:07:4b:a4:c0:c4:15:e1:30:
82:6f:b0:4b:98:f1:c3:d2:61:a2:4e:a4:d2:27:4e:d3:96:cd:
5e:09:a2:e8:fc:2e:b9:f6:af:82:7d:b5:29:c6:8e:7a:46:e4:
81:c9:ee:a7:09:2c:9e:f6:97:85:ff:22:6c:1b:96:f5:69:32:
c4:ab:3f:f0:a0:d0:58:0f:cc:bc:eb:12:60:15:b0:06:52:10:
8c:fb:69:2f:78:4d:61:30:ca:3a:be:28:10:03:10:f9:0a:ff:
84:c8:0e:e6:df:0b:d3:31:19:bc:0f:ef:5a:3c:78:82:d6:fd:
90:d8:3e:73:63:cd:14:7f:22:1f:21:37:6d:a9:f5:68:5b:fc:
b9:71:bb:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MB88nEc0YpgzyJGgNaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli
M2U3NTEwHhcNMjUwMTMxMTUwMDMzWhcNMjUwMjAxMTUwMDMzWjAzMTEwLwYDVQQD
Eyg5YjFhNGYyMWI1MDkwYzMwNzEwODMwN2ZjYWQ1NDQ0MWJiNWRlOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UzrUp4CI0ZM8DQSf3L15Jq/tu9b
iOY5QxeNwJmgsrgYdi3a8hzLHxN3BDVRTVw+n852VRj1sZ/tIeCjtXrMTTXVBpm4
LQ87nk+ksQOORTeS6la+3OUi0Q6MOjqxmI82GuxcQEDJdJSlKZ05HC+qqlWKdI75
1LIM/bb9MTISpR9Ji5pEI3+tqeRPCboB0d+kGlDZ5czadJIPrU6tN/AGfmuUoxSR
AqqKbifJlSGFgw42AJRGKWQ0D/sOKGn8KdYHaNMT2DBm4z5cS9Xxgf37Qg1WlO6c
3YS0LQR98t+GObxrDGTK7qLcikeY+h2kTcq2DZRWpLx1bgAi4cQZ0BQdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsaTyG1CQwwcQgwf8rVREG7XemjMB8GA1UdIwQY
MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt
ODZjMWVlMmE5ZWJhLzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh
LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASExJnO0W
bI2HAOkV9nAOoYGOX6QktDz/uhHrGjS/BwQIxpqlKciQiQRFXlPPAXJISthO4/5G
m6uAfpuoCcP6/FqtmxIZ5K64tkBT1ksDTfLjAAWswFns7gnvndbG2T4t26/U4JDm
Y/O96VtPrIVynzYgUh8MkQdLpMDEFeEwgm+wS5jxw9Jhok6k0idO05bNXgmi6Pwu
ufavgn21KcaOekbkgcnupwksnvaXhf8ibBuW9WkyxKs/8KDQWA/MvOsSYBWwBlIQ
jPtpL3hNYTDKOr4oEAMQ+Qr/hMgO5t8L0zEZvA/vWjx4gtb9kNg+c2PNFH8iHyE3
ban1aFv8uXG7AQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:03 2025 by rpki-client