Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: OJT02we6Jjhl4Yp9IOp8NIezMCRP7Px4vnw3sLRTo3Q=
Subject key identifier: 60:2E:B4:C4:17:4D:58:B3:63:43:A0:F4:AC:67:D9:DE:5E:9C:04:3C
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 0194BC728216271C455E77F909DE225B53DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: U7I/u8Z4o5aTtrEsACfbJXez6ahoLui02MMuZj4nNx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:82:16:27:1c:45:5e:77:f9:09:de:22:5b:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=602eb4c4174d58b36343a0f4ac67d9de5e9c043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:72:ed:26:72:a0:a1:bc:62:8b:3f:01:9a:
72:5f:ce:ae:f8:3c:c3:81:0e:c7:9d:87:89:73:c0:
1d:65:f2:c3:83:58:16:3a:98:d1:01:d4:b0:ca:42:
92:14:ba:36:2b:39:e2:ff:ad:eb:10:05:c4:8a:75:
ac:60:8f:af:37:79:3a:4e:22:e3:a0:de:7e:7c:25:
55:7b:2b:54:dc:dc:f7:cd:2d:c7:df:26:fc:d3:a4:
e9:3d:ed:da:cc:11:8b:05:fe:ea:07:e9:3c:fc:3a:
ae:57:44:98:34:80:2c:54:dd:47:3e:37:7a:63:5c:
38:f5:76:ef:df:c4:68:0f:5c:10:d2:f9:c9:71:7a:
84:97:9f:2c:d3:2a:11:33:22:4d:45:01:43:2c:d4:
f9:4a:82:74:27:84:22:9d:46:ec:33:89:b3:df:81:
d5:9c:4d:8f:44:97:2a:58:f6:55:4b:da:59:10:7e:
42:c6:71:07:0c:9d:ad:ab:ce:7a:97:b5:e4:26:d0:
54:30:30:c0:b1:39:d3:12:36:c7:a7:fc:c3:9f:ed:
fb:c2:c5:91:8b:5c:0e:9c:fb:64:62:5e:74:62:db:
9d:c1:ad:eb:a6:06:d1:d2:8e:bb:03:dd:45:a3:71:
92:d8:7f:ec:73:2d:bc:df:5a:14:cd:01:06:44:68:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:B4:C4:17:4D:58:B3:63:43:A0:F4:AC:67:D9:DE:5E:9C:04:3C
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:77:2f:bc:7e:6b:d1:b6:64:5d:8d:6c:22:ed:ec:b1:4a:28:
a0:34:83:55:7f:37:0a:86:42:4c:34:04:ee:62:f6:f7:a8:41:
5d:53:ce:51:b6:d8:26:45:fa:c6:d8:8a:8e:de:0d:55:be:96:
62:67:08:91:7d:a8:47:92:d0:04:78:49:bc:1c:dd:93:6c:24:
0f:c3:c0:b5:b8:96:de:82:f0:00:f8:e6:31:29:e0:c6:10:98:
ff:43:c4:42:dd:c1:27:f7:a3:77:05:b6:17:7a:1a:dd:f1:0c:
1a:94:59:8f:69:10:76:72:39:57:3d:a3:b8:18:08:c8:09:1b:
1b:bb:0b:52:49:59:37:76:8a:50:f1:b2:2b:73:0d:43:51:7e:
1e:f1:d8:66:39:b8:55:3b:f3:1c:f3:3c:17:c7:af:07:16:52:
05:93:49:ce:b0:db:8a:35:14:d9:92:d0:b0:d1:0b:5b:b7:0e:
dc:08:0c:d9:03:90:ba:98:f4:9c:fc:4a:c3:36:ed:c7:df:e4:
8d:ce:5c:a7:e3:aa:3f:50:f6:33:78:bf:13:c2:26:7d:19:a3:
f7:1f:77:92:9e:db:8f:b6:c6:01:17:85:e1:d6:6c:bd:53:bb:
1a:2c:03:86:39:3c:0b:c8:d4:1e:cc:4b:5c:c5:a9:98:42:98:
ca:b3:92:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coIWJxxFXnf5Cd4iW1PaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM1NDJkZDYzZmVkMjUwZGU1Y2I2NWY2ZWNhNDg3ZTdm
NDc4NDcwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
Eyg2MDJlYjRjNDE3NGQ1OGIzNjM0M2EwZjRhYzY3ZDlkZTVlOWMwNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuRy7SZyoKG8Yos/AZpyX86u+DzD
gQ7HnYeJc8AdZfLDg1gWOpjRAdSwykKSFLo2Kzni/63rEAXEinWsYI+vN3k6TiLj
oN5+fCVVeytU3Nz3zS3H3yb806TpPe3azBGLBf7qB+k8/DquV0SYNIAsVN1HPjd6
Y1w49Xbv38RoD1wQ0vnJcXqEl58s0yoRMyJNRQFDLNT5SoJ0J4QinUbsM4mz34HV
nE2PRJcqWPZVS9pZEH5CxnEHDJ2tq856l7XkJtBUMDDAsTnTEjbHp/zDn+37wsWR
i1wOnPtkYl50Ytudwa3rpgbR0o67A91Fo3GS2H/scy2831oUzQEGRGgq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAutMQXTVizY0Og9Kxn2d5enAQ8MB8GA1UdIwQY
MBaAFL/jVC3WP+0lDeXLZfbspIfn9HhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEt
OGQzYTZkMTY1ZGEzLzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEtOGQzYTZkMTY1ZGEz
LzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3cvvH5r
0bZkXY1sIu3ssUoooDSDVX83CoZCTDQE7mL296hBXVPOUbbYJkX6xtiKjt4NVb6W
YmcIkX2oR5LQBHhJvBzdk2wkD8PAtbiW3oLwAPjmMSngxhCY/0PEQt3BJ/ejdwW2
F3oa3fEMGpRZj2kQdnI5Vz2juBgIyAkbG7sLUklZN3aKUPGyK3MNQ1F+HvHYZjm4
VTvzHPM8F8evBxZSBZNJzrDbijUU2ZLQsNELW7cO3AgM2QOQupj0nPxKwzbtx9/k
jc5cp+OqP1D2M3i/E8ImfRmj9x93kp7bj7bGAReF4dZsvVO7GiwDhjk8C8jUHsxL
XMWpmEKYyrOSLw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:25 2025 by rpki-client