Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: c9OSqjCbRcacTTIJrzpQEATISGowawIgBvDytVaOb6E=
Subject key identifier: F4:48:B6:FE:B8:43:42:8B:CA:A2:DB:D1:0B:EC:CD:44:90:8D:B4:81
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 0194BD857663056790B74C5BBDD34A5D3A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 02E5
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: shkLCAu518DG4Ns/4tdzTJGD1dGv3+9YdJUzA11ttKk=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:76:63:05:67:90:b7:4c:5b:bd:d3:4a:5d:3a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=f448b6feb843428bcaa2dbd10beccd44908db481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:94:6f:61:43:c7:5d:63:e0:2b:60:42:4e:
44:7c:9d:52:3a:35:ba:e0:1e:39:83:c7:3a:01:4a:
a7:68:98:6f:7b:b6:eb:c5:6b:70:7c:92:77:58:5b:
ff:8b:bb:5e:41:3f:91:51:56:6f:fb:7e:5f:db:77:
b7:55:1e:34:82:12:4b:a8:da:30:41:e1:64:28:16:
7d:77:0f:0e:4e:f5:db:b0:95:a0:cf:33:07:13:46:
d2:9f:e2:e4:84:68:24:c2:d4:80:80:0c:45:00:dd:
14:c1:85:7c:24:32:b7:a6:6e:bd:e8:42:4b:6a:b4:
fb:0e:4e:c6:6d:66:a3:64:77:a6:d2:0b:1a:54:da:
ae:44:09:8b:e1:11:bb:f6:44:e9:de:bc:69:25:e4:
15:96:f5:a5:f3:1d:6e:ec:13:c9:51:43:1c:da:42:
de:b5:83:05:f6:1b:e4:1b:ae:85:2d:82:31:3e:42:
e7:d5:ad:01:7f:7c:71:33:c6:f7:42:db:b8:de:17:
b6:5f:b8:16:0b:62:2d:a1:13:a7:49:31:b1:28:be:
54:79:0c:a4:c1:26:12:f3:8a:1f:08:08:8a:dc:67:
73:74:f9:73:c1:b1:d8:27:4b:97:32:f8:94:96:99:
0e:e5:4e:32:95:5e:ec:fb:75:0e:67:1f:3b:99:0c:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:48:B6:FE:B8:43:42:8B:CA:A2:DB:D1:0B:EC:CD:44:90:8D:B4:81
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:24:23:8d:50:0f:33:35:a9:75:60:41:57:c6:54:f1:57:
35:56:15:ee:50:3f:25:94:73:c9:e0:c0:4c:d1:e9:43:8a:55:
e2:29:60:7f:c6:be:b8:55:7e:da:5c:20:87:7a:e6:20:af:14:
28:2b:c7:e7:a9:6a:cd:f0:b7:35:50:2e:e2:ae:59:f9:80:9c:
8f:74:ad:28:64:69:e7:e0:21:89:93:08:08:e7:de:6d:7e:c4:
b9:17:e6:25:9c:94:1e:5f:17:98:e7:cf:f5:56:a7:aa:d2:f0:
1b:be:a6:43:86:e9:0a:57:e6:17:da:61:91:d1:0c:01:e2:ea:
15:f6:f1:a4:d8:8c:97:6a:ac:06:b4:69:a8:bd:96:0b:ba:0b:
8e:25:06:27:c6:61:b7:7c:d1:97:d5:c8:f4:20:22:e6:ae:e3:
c1:08:5a:bd:9d:e0:f5:d0:ff:f1:8a:c2:51:2f:b5:00:f3:b6:
25:80:f9:11:47:24:ac:f3:c6:e7:e5:cc:26:9c:87:56:f5:e3:
3b:a8:33:30:eb:d6:c4:25:79:8f:47:c4:ef:2c:03:23:c5:ae:
c8:b6:f4:6b:2a:d7:ff:35:16:9f:f5:43:57:e4:22:94:69:45:
b5:58:d3:7a:41:32:42:6d:28:70:b4:b3:9c:1a:7f:9b:dc:31:
42:93:8a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXZjBWeQt0xbvdNKXTp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNThhOTM0MTg5Y2YwNTg5MWY4YzRlNTk5ZDBiOTg5NTdl
OTk3MjkwHhcNMjUwMTMxMTgwMDI3WhcNMjUwMjAxMTgwMDI3WjAzMTEwLwYDVQQD
EyhmNDQ4YjZmZWI4NDM0MjhiY2FhMmRiZDEwYmVjY2Q0NDkwOGRiNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGuUb2FDx11j4CtgQk5EfJ1SOjW6
4B45g8c6AUqnaJhve7brxWtwfJJ3WFv/i7teQT+RUVZv+35f23e3VR40ghJLqNow
QeFkKBZ9dw8OTvXbsJWgzzMHE0bSn+LkhGgkwtSAgAxFAN0UwYV8JDK3pm696EJL
arT7Dk7GbWajZHem0gsaVNquRAmL4RG79kTp3rxpJeQVlvWl8x1u7BPJUUMc2kLe
tYMF9hvkG66FLYIxPkLn1a0Bf3xxM8b3Qtu43he2X7gWC2ItoROnSTGxKL5UeQyk
wSYS84ofCAiK3GdzdPlzwbHYJ0uXMviUlpkO5U4ylV7s+3UOZx87mQyegwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRItv64Q0KLyqLb0QvszUSQjbSBMB8GA1UdIwQY
MBaAFDFYqTQYnPBYkfjE5ZnQuYlX6ZcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmIt
ZDM4NmQyMDQ5MDQyLzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmItZDM4NmQyMDQ5MDQy
LzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaokI41Q
DzM1qXVgQVfGVPFXNVYV7lA/JZRzyeDATNHpQ4pV4ilgf8a+uFV+2lwgh3rmIK8U
KCvH56lqzfC3NVAu4q5Z+YCcj3StKGRp5+AhiZMICOfebX7EuRfmJZyUHl8XmOfP
9VanqtLwG76mQ4bpClfmF9phkdEMAeLqFfbxpNiMl2qsBrRpqL2WC7oLjiUGJ8Zh
t3zRl9XI9CAi5q7jwQhavZ3g9dD/8YrCUS+1APO2JYD5EUckrPPG5+XMJpyHVvXj
O6gzMOvWxCV5j0fE7ywDI8WuyLb0ayrX/zUWn/VDV+QilGlFtVjTekEyQm0ocLSz
nBp/m9wxQpOKaQ==
-----END CERTIFICATE-----
Generated at Thu May 1 15:15:51 2025 by rpki-client