Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: qYm8YkdxRKhBqa1M8j3mDCl3+qmlXqMYAK872kgJx/w=
Subject key identifier: D3:F7:65:A5:A8:3B:E3:B3:D3:7C:D8:F2:64:B0:F9:26:72:80:0F:5E
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 0194BD17C638A5DDEFC99F35755F07FF3370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: csYzGDZbORpHDMbE9Ok7qsqWfl8cVTKECDuGL6GhKPY=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:38:a5:dd:ef:c9:9f:35:75:5f:07:ff:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=d3f765a5a83be3b3d37cd8f264b0f92672800f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:00:c5:4a:0f:cf:95:41:df:13:15:3f:71:
0e:b1:00:57:a7:ac:b3:7c:59:e4:c0:ba:a8:b4:54:
ac:c0:fd:f2:f3:3c:e0:df:03:91:e7:a5:ff:b9:9f:
16:48:53:3f:c5:e3:69:4f:81:c2:73:fa:20:da:4e:
5c:95:c4:42:cd:0b:df:2c:97:fb:fd:a0:4c:54:cc:
8d:0f:47:47:79:5c:63:99:e7:dc:cc:8c:da:b2:e1:
a3:10:8e:03:92:c9:7a:e0:eb:19:21:b6:2a:72:a7:
5c:97:db:99:ba:ab:d0:52:ee:c4:1a:d3:19:cb:7b:
42:e0:82:51:82:5e:84:c3:f4:1c:0e:39:74:a0:95:
69:3c:c9:6c:49:e1:fa:bf:4b:1d:66:82:36:cc:6c:
a0:d2:56:13:5e:a7:9c:0e:97:5f:01:0d:de:7f:d9:
43:f4:52:e2:20:c3:94:32:87:12:35:57:1a:7f:b5:
02:91:b5:15:fe:cd:e1:05:8e:97:3d:fc:91:3f:6f:
e5:07:25:9f:dc:ea:73:e2:ff:6a:50:45:13:39:06:
8f:ec:e5:9c:d0:d0:60:51:cf:bd:d4:bd:5f:fa:24:
35:c2:eb:40:f1:7a:e4:d6:b0:73:a7:1a:92:ba:ca:
c1:ea:be:36:8a:dd:7a:31:80:ee:a4:4e:7f:f0:dc:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F7:65:A5:A8:3B:E3:B3:D3:7C:D8:F2:64:B0:F9:26:72:80:0F:5E
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:72:8e:9a:80:c8:2a:b9:4b:db:c3:4a:e7:63:85:39:8e:
3e:87:32:34:2a:b3:8b:5c:80:a6:fc:37:70:a9:37:f4:bf:af:
5e:64:61:b0:61:e4:ae:05:df:6e:66:7f:ba:84:47:de:b8:f1:
dc:22:03:f0:e5:a9:d7:3d:63:d0:30:e4:d5:a4:38:3e:5f:07:
95:05:df:41:ea:f5:5f:20:d6:57:cb:ba:e4:a9:8e:8b:ae:0d:
ab:d7:d3:16:85:84:1c:99:04:92:19:b2:f5:c3:74:fe:58:56:
48:02:07:4f:82:2d:89:99:c5:93:9f:6f:ad:24:7b:8a:75:eb:
0b:a9:b8:c1:b0:8b:d5:fe:9b:47:ed:c1:a8:41:34:5a:68:7a:
2b:e9:ad:23:61:d8:8d:22:4f:97:14:36:37:d9:0f:7c:68:e3:
3a:b8:f4:a5:1d:7e:14:f2:80:fd:97:4f:b7:5d:59:28:ab:eb:
0f:60:81:86:6e:44:ea:aa:b8:4e:19:36:aa:a7:26:ad:8c:02:
a0:3c:ae:f7:0c:08:ec:6f:5f:5d:ab:a2:67:c1:6a:fb:d8:91:
94:ac:8a:7f:db:15:8b:f0:c5:fb:89:fe:c7:57:39:da:7a:7b:
cf:84:1e:80:5d:93:a6:25:62:bf:e1:cc:f9:f4:02:5a:83:9d:
be:51:26:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8Y4pd3vyZ81dV8H/zNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky
ZDc5M2QwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
EyhkM2Y3NjVhNWE4M2JlM2IzZDM3Y2Q4ZjI2NGIwZjkyNjcyODAwZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgIAxUoPz5VB3xMVP3EOsQBXp6yz
fFnkwLqotFSswP3y8zzg3wOR56X/uZ8WSFM/xeNpT4HCc/og2k5clcRCzQvfLJf7
/aBMVMyND0dHeVxjmefczIzasuGjEI4Dksl64OsZIbYqcqdcl9uZuqvQUu7EGtMZ
y3tC4IJRgl6Ew/QcDjl0oJVpPMlsSeH6v0sdZoI2zGyg0lYTXqecDpdfAQ3ef9lD
9FLiIMOUMocSNVcaf7UCkbUV/s3hBY6XPfyRP2/lByWf3Opz4v9qUEUTOQaP7OWc
0NBgUc+91L1f+iQ1wutA8Xrk1rBzpxqSusrB6r42it16MYDupE5/8NyZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP3ZaWoO+Oz03zY8mSw+SZygA9eMB8GA1UdIwQY
MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt
NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4
LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmRyjpqA
yCq5S9vDSudjhTmOPocyNCqzi1yApvw3cKk39L+vXmRhsGHkrgXfbmZ/uoRH3rjx
3CID8OWp1z1j0DDk1aQ4Pl8HlQXfQer1XyDWV8u65KmOi64Nq9fTFoWEHJkEkhmy
9cN0/lhWSAIHT4ItiZnFk59vrSR7inXrC6m4wbCL1f6bR+3BqEE0Wmh6K+mtI2HY
jSJPlxQ2N9kPfGjjOrj0pR1+FPKA/ZdPt11ZKKvrD2CBhm5E6qq4Thk2qqcmrYwC
oDyu9wwI7G9fXauiZ8Fq+9iRlKyKf9sVi/DF+4n+x1c52np7z4QegF2TpiViv+HM
+fQCWoOdvlEmUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:39 2025 by rpki-client