Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
File: V7ifXMeCGeoSc_n1PFueM7xdvrU.mft (raw, json)
Hash identifier: N2y8hzX47JIZXClsS7ZFK0+rD5h10JL+cOb1K/N4A44=
Subject key identifier: CA:F5:4F:35:09:EA:29:0F:50:1B:8F:13:73:4C:67:09:E5:BB:85:08
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 0194BC3C4374132F4984E2D5032AC4AD8834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
Manifest number: 03F1
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (hash: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=)
2: V7ifXMeCGeoSc_n1PFueM7xdvrU.crl (hash: 4EVCB9RJ0XqFWLBhPB4PwKdlP8HcN6K/dPIkoW+tMlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:74:13:2f:49:84:e2:d5:03:2a:c4:ad:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=caf54f3509ea290f501b8f13734c6709e5bb8508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:d9:66:d1:37:6b:99:38:41:d5:3b:a1:42:
af:6e:6d:e3:71:a4:52:e0:da:c6:db:ee:74:c9:ec:
1d:17:49:ed:d2:84:42:fb:38:d6:e2:87:3c:55:bc:
51:aa:70:2e:5d:a6:8f:4c:bc:2f:73:2b:6b:fe:92:
b8:64:78:1e:a5:23:d8:de:26:de:53:a9:03:74:c1:
4a:44:28:70:21:0d:71:6c:3f:be:6f:98:4f:d9:f7:
73:a6:96:19:74:9d:62:0b:61:bb:79:a7:1a:70:6b:
6e:43:bb:f2:ef:b5:db:2b:c5:5b:4f:14:c1:c0:ae:
0f:c6:3e:23:bc:ed:eb:82:ba:2e:ee:9a:2a:ba:71:
d1:16:d5:4a:12:13:9f:82:9c:96:b1:94:3b:3c:34:
4f:9d:8e:a4:10:6a:46:50:55:da:f6:6b:9c:c8:2a:
8f:9f:9f:64:7d:60:b1:d3:98:3f:ac:6d:53:24:7e:
4f:69:df:02:ae:37:81:67:fc:b7:cb:50:97:8e:39:
4e:1f:0f:c2:e8:74:58:41:98:a0:ff:c8:b9:bd:71:
22:a1:4f:5b:8b:6c:0e:d6:51:78:45:95:55:cb:d0:
9c:5d:90:8a:e5:c8:e7:31:03:79:58:fc:26:a6:48:
ae:c6:80:d2:99:76:4d:1c:68:78:3c:e9:fa:57:35:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:4F:35:09:EA:29:0F:50:1B:8F:13:73:4C:67:09:E5:BB:85:08
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8f:00:0a:05:77:ba:b2:ba:88:12:f2:c9:2a:d8:5c:27:8d:
10:cf:5e:84:99:b5:f1:0e:85:73:19:e7:04:28:30:02:ea:8f:
9d:f0:ab:0f:cc:98:54:1f:9f:3d:83:e8:f2:04:4f:f8:be:26:
f2:d4:86:e6:8d:43:44:04:e6:10:5d:7a:70:ae:51:04:a5:c5:
91:05:e4:e0:10:ce:e4:3d:70:6c:09:56:40:c9:8f:17:a9:af:
a3:d3:52:b7:8a:cd:89:0b:75:a7:ae:63:98:28:0a:ae:a9:05:
b7:67:49:3d:11:74:d8:46:26:3c:2f:58:15:f8:e5:22:87:de:
87:94:e8:ec:c9:24:e7:d1:39:64:5c:67:ce:4c:1e:d9:30:a7:
71:dc:4a:7f:ca:1e:f5:2b:32:87:e3:ad:9d:ec:b2:c5:6b:7f:
38:a7:51:72:f9:8d:45:57:03:a7:5f:49:13:f1:19:93:a2:f1:
ed:c0:e4:b5:ec:9a:09:9f:45:6e:49:f5:2f:31:9f:cf:72:90:
04:f4:0b:0f:a6:f6:bb:d6:d4:3d:7d:84:d3:e7:95:3c:a4:19:
ed:7d:45:9a:6c:af:1c:0f:87:f4:28:f5:e5:e8:85:46:bf:70:
8c:d1:30:70:ae:ef:29:f6:62:2f:4e:c2:b0:8f:95:ae:9c:87:
aa:6b:b7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEN0Ey9JhOLVAyrErYg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjg5ZjVjYzc4MjE5ZWExMjczZjlmNTNjNWI5ZTMzYmM1
ZGJlYjUwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhjYWY1NGYzNTA5ZWEyOTBmNTAxYjhmMTM3MzRjNjcwOWU1YmI4NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskrZZtE3a5k4QdU7oUKvbm3jcaRS
4NrG2+50yewdF0nt0oRC+zjW4oc8VbxRqnAuXaaPTLwvcytr/pK4ZHgepSPY3ibe
U6kDdMFKRChwIQ1xbD++b5hP2fdzppYZdJ1iC2G7eacacGtuQ7vy77XbK8VbTxTB
wK4Pxj4jvO3rgrou7poqunHRFtVKEhOfgpyWsZQ7PDRPnY6kEGpGUFXa9mucyCqP
n59kfWCx05g/rG1TJH5Pad8CrjeBZ/y3y1CXjjlOHw/C6HRYQZig/8i5vXEioU9b
i2wO1lF4RZVVy9CcXZCK5cjnMQN5WPwmpkiuxoDSmXZNHGh4POn6VzWj9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr1TzUJ6ikPUBuPE3NMZwnlu4UIMB8GA1UdIwQY
MBaAFFe4n1zHghnqEnP59TxbnjO8Xb61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdpZlhNZUNHZW9TY19uMVBGdWVNN3hkdnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODMxOTgtNDlhNy00ODY0LWE0NmQt
NjM3NWUxNjQ1NjA0LzEvVjdpZlhNZUNHZW9TY19uMVBGdWVNN3hkdnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wODMxOTgtNDlhNy00ODY0LWE0NmQtNjM3NWUxNjQ1NjA0
LzEvVjdpZlhNZUNHZW9TY19uMVBGdWVNN3hkdnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY8ACgV3
urK6iBLyySrYXCeNEM9ehJm18Q6FcxnnBCgwAuqPnfCrD8yYVB+fPYPo8gRP+L4m
8tSG5o1DRATmEF16cK5RBKXFkQXk4BDO5D1wbAlWQMmPF6mvo9NSt4rNiQt1p65j
mCgKrqkFt2dJPRF02EYmPC9YFfjlIofeh5To7Mkk59E5ZFxnzkwe2TCncdxKf8oe
9Ssyh+OtneyyxWt/OKdRcvmNRVcDp19JE/EZk6Lx7cDkteyaCZ9Fbkn1LzGfz3KQ
BPQLD6b2u9bUPX2E0+eVPKQZ7X1FmmyvHA+H9Cj15eiFRr9wjNEwcK7vKfZiL07C
sI+VrpyHqmu3hQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client