Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
File: vPI0wEREFriFL7NHh4rTdtCBjWQ.mft (raw, json)
Hash identifier: s4nruyvTRMdNbSYqQYiuvVfGmNNCYJuJ0KZFvWzm6mw=
Subject key identifier: 5B:0A:6A:04:F6:49:F3:56:13:25:D2:D5:F8:07:1A:80:68:E3:A8:38
Authority key identifier: BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
Certificate issuer: /CN=bcf234c0444416b8852fb347878ad376d0818d64
Certificate serial: 0194BD17DD670FB5C66EABA02A93B890D3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
Manifest number: 07B5
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: vPI0wEREFriFL7NHh4rTdtCBjWQ.crl (hash: vMHXAc+wcWZJ/ay2qfa7/bKC7EQ5dkBNVMvBi6QKwqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dd:67:0f:b5:c6:6e:ab:a0:2a:93:b8:90:d3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf234c0444416b8852fb347878ad376d0818d64
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=5b0a6a04f649f3561325d2d5f8071a8068e3a838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:16:ec:bf:9d:06:69:46:db:02:96:40:f0:
f1:ac:c7:e6:45:24:ad:14:18:4b:6b:6c:2f:b7:ed:
d1:61:4c:3e:68:9f:8d:57:74:65:6d:83:a8:16:76:
f1:62:45:bc:c6:9a:83:e3:a9:ea:10:a7:7d:58:ac:
5b:18:14:76:52:e7:b3:1d:2c:04:9a:11:79:cd:fe:
09:f7:7e:24:58:d8:12:cb:83:79:02:b2:26:95:97:
a7:e9:45:3f:7c:88:92:5f:da:f6:34:b2:59:fb:84:
bb:e9:c5:1d:95:3e:57:09:90:c6:af:5d:82:11:01:
be:84:c0:26:fc:4d:16:eb:be:af:f5:fa:f3:36:83:
ca:2b:42:4d:f1:ff:8c:43:92:72:23:69:39:1b:c8:
c9:6c:ef:dc:65:5a:e3:82:9d:2f:23:85:ca:88:ff:
5e:86:0b:b8:2a:51:74:ec:27:d0:d7:f3:c8:e1:65:
d9:d3:b3:6a:06:3d:c4:aa:d7:2d:bc:8e:5d:a8:ea:
4a:78:b7:32:b2:ce:77:fc:ed:39:40:91:a2:7b:b3:
c8:1e:8a:60:38:21:d4:28:fd:ca:7f:74:9d:f3:14:
43:a9:e8:eb:f3:09:46:08:f9:55:2e:db:75:31:52:
5c:aa:05:60:70:fb:58:5f:66:d8:07:71:93:83:42:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:6A:04:F6:49:F3:56:13:25:D2:D5:F8:07:1A:80:68:E3:A8:38
X509v3 Authority Key Identifier:
keyid:BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:94:bc:9d:ba:6e:61:2c:40:49:29:6c:65:06:cb:14:84:6f:
3c:b1:b3:e4:f5:70:1a:c5:47:c7:a7:07:6a:d1:2f:8d:72:81:
b4:f3:f7:e3:ab:48:d5:da:50:70:61:d8:cc:64:34:f1:90:3f:
93:ff:09:3a:e5:ca:19:d1:e7:91:e3:de:c2:e4:7a:43:42:a5:
ac:b5:f8:4d:4a:a6:51:af:55:38:41:8e:df:7a:40:12:f6:39:
15:08:15:86:e2:5d:35:06:da:11:38:ba:9e:c3:71:37:ee:d3:
11:1e:c7:07:98:9e:35:5b:40:aa:a2:0f:57:07:3a:72:d0:bc:
47:30:7a:33:42:a6:9b:c7:b8:4c:c2:ce:b8:fa:c2:57:6a:14:
7a:72:73:28:f3:18:01:55:2f:ed:2c:63:d6:99:c0:de:a9:2a:
0f:06:a4:0f:a3:77:bd:41:33:4b:3e:b5:ee:56:71:68:db:a3:
4d:d8:f2:36:42:fc:03:a8:1b:dc:ff:86:43:e9:d0:58:9a:08:
19:e2:ee:0d:96:4e:de:8e:9b:5e:9c:08:ec:32:23:b6:0e:c5:
45:7e:06:e9:8a:c8:4c:52:d1:d4:16:b0:57:9f:2a:5b:c8:f4:
e4:03:ef:cd:14:e0:87:76:73:a0:7c:97:56:07:22:33:60:0d:
ee:b1:34:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F91nD7XGbqugKpO4kNPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjIzNGMwNDQ0NDE2Yjg4NTJmYjM0Nzg3OGFkMzc2ZDA4
MThkNjQwHhcNMjUwMTMxMTYwMDQ1WhcNMjUwMjAxMTYwMDQ1WjAzMTEwLwYDVQQD
Eyg1YjBhNmEwNGY2NDlmMzU2MTMyNWQyZDVmODA3MWE4MDY4ZTNhODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6wW7L+dBmlG2wKWQPDxrMfmRSSt
FBhLa2wvt+3RYUw+aJ+NV3RlbYOoFnbxYkW8xpqD46nqEKd9WKxbGBR2UuezHSwE
mhF5zf4J934kWNgSy4N5ArImlZen6UU/fIiSX9r2NLJZ+4S76cUdlT5XCZDGr12C
EQG+hMAm/E0W676v9frzNoPKK0JN8f+MQ5JyI2k5G8jJbO/cZVrjgp0vI4XKiP9e
hgu4KlF07CfQ1/PI4WXZ07NqBj3EqtctvI5dqOpKeLcyss53/O05QJGie7PIHopg
OCHUKP3Kf3Sd8xRDqejr8wlGCPlVLtt1MVJcqgVgcPtYX2bYB3GTg0I6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsKagT2SfNWEyXS1fgHGoBo46g4MB8GA1UdIwQY
MBaAFLzyNMBERBa4hS+zR4eK03bQgY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjdhN2EtMzAzZi00MjM0LTgyYTEt
OWFjYTdiZDhlYzBmLzEvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iYjdhN2EtMzAzZi00MjM0LTgyYTEtOWFjYTdiZDhlYzBm
LzEvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJS8nbpu
YSxASSlsZQbLFIRvPLGz5PVwGsVHx6cHatEvjXKBtPP346tI1dpQcGHYzGQ08ZA/
k/8JOuXKGdHnkePewuR6Q0KlrLX4TUqmUa9VOEGO33pAEvY5FQgVhuJdNQbaETi6
nsNxN+7TER7HB5ieNVtAqqIPVwc6ctC8RzB6M0Kmm8e4TMLOuPrCV2oUenJzKPMY
AVUv7Sxj1pnA3qkqDwakD6N3vUEzSz617lZxaNujTdjyNkL8A6gb3P+GQ+nQWJoI
GeLuDZZO3o6bXpwI7DIjtg7FRX4G6YrITFLR1BawV58qW8j05APvzRTgh3ZzoHyX
VgciM2AN7rE0Fg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:25 2025 by rpki-client