Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: Lc2u1AZ+m43Zm+pwE8vZr9q0mODvJqEr/BLZbkYQUtg=
Subject key identifier: E4:B0:01:4D:A6:F0:37:A6:FF:3B:28:1E:B7:28:BE:77:F1:FE:1A:5C
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 0194BC3C41ADEE811F735F2E80394AE5C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: 2FFFpTtl9eGD/0c7Kmm9i38z5AmsjFI9WJujjWlrNB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:ad:ee:81:1f:73:5f:2e:80:39:4a:e5:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=e4b0014da6f037a6ff3b281eb728be77f1fe1a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:91:a6:8a:47:21:48:ce:a6:08:25:21:f8:
8e:2e:e8:98:0b:28:10:b2:d6:47:76:77:f9:44:62:
b9:a2:17:b5:63:06:f1:9b:0c:b0:08:d0:93:0d:90:
dd:e9:b6:ff:68:24:5f:ce:df:aa:b5:51:0c:9d:ec:
08:80:8d:4a:77:be:0d:d2:85:1d:e0:85:52:b2:06:
58:d0:13:b9:16:fd:25:c5:a6:6d:e5:b5:8e:50:a3:
6b:c0:4f:52:9a:3c:c8:03:91:ab:bd:48:dc:79:b8:
f9:fa:02:dc:f6:68:44:97:20:f0:1b:f1:73:c3:83:
6a:89:cb:7a:47:23:ee:11:8f:b2:07:60:74:fe:a4:
c8:9e:07:73:40:0a:65:b6:49:ca:bb:39:3d:6f:51:
e0:d7:35:b8:fb:52:d0:26:2c:c5:25:3c:ba:37:31:
03:9c:26:9c:96:c7:e0:d4:d2:a0:ec:f8:8b:ac:06:
5c:cf:33:62:b3:f6:bd:9b:47:a5:d0:ba:48:41:72:
67:d5:82:3b:f8:c7:97:80:87:a8:d6:0b:38:ec:51:
57:1c:93:d6:f8:53:ce:eb:ef:24:a4:32:24:b3:d0:
34:bb:31:b1:5d:80:42:8f:e2:5a:d7:81:8b:e8:3c:
79:53:25:3d:d1:ec:20:65:6e:d3:59:4d:e9:60:3a:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B0:01:4D:A6:F0:37:A6:FF:3B:28:1E:B7:28:BE:77:F1:FE:1A:5C
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:23:b6:a3:d2:99:f6:ac:65:93:6f:38:65:ca:fb:b5:ce:22:
97:91:df:e0:4d:d9:fd:7b:b7:f0:88:ac:72:8e:f5:35:f9:74:
83:31:7f:d9:41:be:08:8a:52:7b:bc:80:69:3f:da:5b:26:f1:
24:ce:cd:48:e4:ae:97:7d:68:da:f8:b3:33:74:e4:5f:a7:9f:
10:85:30:99:8d:61:58:0f:9d:5c:0b:3d:bd:77:a9:67:cc:b0:
2a:36:7f:56:d2:88:f1:2a:8a:46:8a:d2:b7:1c:c5:bf:7d:2a:
c0:75:a7:21:4d:24:59:b7:f1:37:26:e2:51:ae:ff:1e:22:3b:
a7:64:14:92:25:ef:a8:89:37:5e:42:8f:cd:90:d2:d3:d7:fe:
f2:f1:c4:4b:4c:49:89:5b:03:6b:32:92:9d:2c:b2:d8:ed:76:
5b:d5:3f:9a:6f:3c:94:d4:57:82:6f:3d:dc:fd:ef:7c:9a:33:
08:83:20:ad:50:d6:34:1f:e0:01:5e:55:a6:ff:de:9e:58:02:
88:cc:e4:ba:df:d9:20:fe:ef:9e:3e:9a:23:8e:34:91:89:be:
48:7c:75:9c:31:9d:66:fc:28:7c:2a:cc:d5:17:07:10:95:af:
fe:28:10:ac:df:ac:2a:52:5c:28:42:40:e7:29:ac:31:4a:b3:
ab:6d:31:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEGt7oEfc18ugDlK5cDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNzIyYTk5NzMyYzljM2NiYzIwYjBhNDcyOTJhODIzNzgy
NjAzYWMwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhlNGIwMDE0ZGE2ZjAzN2E2ZmYzYjI4MWViNzI4YmU3N2YxZmUxYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjORpopHIUjOpgglIfiOLuiYCygQ
stZHdnf5RGK5ohe1YwbxmwywCNCTDZDd6bb/aCRfzt+qtVEMnewIgI1Kd74N0oUd
4IVSsgZY0BO5Fv0lxaZt5bWOUKNrwE9SmjzIA5GrvUjcebj5+gLc9mhElyDwG/Fz
w4Nqict6RyPuEY+yB2B0/qTIngdzQApltknKuzk9b1Hg1zW4+1LQJizFJTy6NzED
nCaclsfg1NKg7PiLrAZczzNis/a9m0el0LpIQXJn1YI7+MeXgIeo1gs47FFXHJPW
+FPO6+8kpDIks9A0uzGxXYBCj+Ja14GL6Dx5UyU90ewgZW7TWU3pYDrEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSwAU2m8Dem/zsoHrcovnfx/hpcMB8GA1UdIwQY
MBaAFL5yKplzLJw8vCCwpHKSqCN4JgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODct
MjliOTdhMTg3N2ZiLzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODctMjliOTdhMTg3N2Zi
LzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyO2o9KZ
9qxlk284Zcr7tc4il5Hf4E3Z/Xu38Iisco71Nfl0gzF/2UG+CIpSe7yAaT/aWybx
JM7NSOSul31o2vizM3TkX6efEIUwmY1hWA+dXAs9vXepZ8ywKjZ/VtKI8SqKRorS
txzFv30qwHWnIU0kWbfxNybiUa7/HiI7p2QUkiXvqIk3XkKPzZDS09f+8vHES0xJ
iVsDazKSnSyy2O12W9U/mm88lNRXgm893P3vfJozCIMgrVDWNB/gAV5Vpv/enlgC
iMzkut/ZIP7vnj6aI440kYm+SHx1nDGdZvwofCrM1RcHEJWv/igQrN+sKlJcKEJA
5ymsMUqzq20xZQ==
-----END CERTIFICATE-----
Generated at Thu May 1 10:51:57 2025 by rpki-client