Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
File: VKzhXkXvtaAGDAZeJ06o46-wJes.mft (raw, json)
Hash identifier: N89kWiYu9iDh2G+h3rSGrxUoj2g0WRd9RNjF9Kh6//8=
Subject key identifier: 1A:4C:91:2E:C6:B0:E4:E3:D5:8D:F6:56:BC:F5:28:95:CF:DC:E7:DF
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 0194BC3BC614C26F654CCA710390EBA05812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: VKzhXkXvtaAGDAZeJ06o46-wJes.crl (hash: yoW8JbybUkWsbCSDuGuTDR2w9MQ8GMwkpzWZEJH/B94=)
2: agadNAkdL8gZSJjhebbq78b-GQQ.roa (hash: AWs3/nEl7KZJPMZNEu10pqsOCcoVUqcD7DcXZsQJMg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c6:14:c2:6f:65:4c:ca:71:03:90:eb:a0:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=1a4c912ec6b0e4e3d58df656bcf52895cfdce7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:48:3f:ab:b4:fd:f5:f8:7b:d0:6e:cb:74:
98:45:c3:9f:d7:15:81:22:17:95:87:51:3d:52:9b:
bc:5b:75:2b:5e:53:a7:d7:e6:06:48:2c:88:35:97:
71:25:c2:6e:26:34:e6:49:1f:58:ab:e8:04:ad:ff:
d3:2a:fa:0e:bf:7a:d5:65:03:e7:5e:0d:a0:bd:d8:
db:d5:ee:df:34:51:24:08:5d:ce:fc:80:b5:3c:d1:
01:b2:1a:6c:72:ee:3b:73:82:cb:7f:75:57:52:0f:
a0:61:ed:08:07:58:7c:d9:0e:e3:19:38:f9:bb:d1:
27:2e:46:cc:d7:52:3b:81:a2:20:c7:7a:a4:91:32:
ca:c5:f2:76:2b:f7:8a:fa:c1:9e:7f:a8:33:34:c8:
c8:88:79:63:d8:20:3e:0d:90:ca:41:f3:a9:14:c8:
b1:83:d5:38:67:c9:f7:65:ab:6a:32:d5:a2:7a:0c:
e1:10:ff:aa:3d:36:a5:f4:11:95:57:dd:c4:83:fe:
ac:4f:7b:42:57:be:a7:50:38:eb:ad:10:70:e0:3f:
9c:7d:aa:03:bb:5f:39:1d:7d:5f:3a:3a:30:59:0b:
67:0b:a6:32:72:33:11:a2:54:3f:fd:72:b7:a7:c6:
e6:27:e4:d5:6f:84:67:5b:89:ce:b6:2b:6c:7d:9e:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:91:2E:C6:B0:E4:E3:D5:8D:F6:56:BC:F5:28:95:CF:DC:E7:DF
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ae:de:c1:a5:54:83:3f:48:e9:63:df:12:40:e6:f6:35:57:
f7:6f:cb:0e:ad:a0:44:8d:a9:89:9a:a6:8d:ce:0f:b2:2c:df:
da:2e:1a:fc:2b:4f:62:7d:f0:c9:e9:8d:35:67:0f:99:aa:d7:
b9:35:ac:fb:34:6a:a1:22:6d:94:24:20:8b:20:5b:05:29:d3:
12:72:12:76:b1:2b:99:82:d0:e6:ec:82:0d:9f:e9:f0:0e:64:
7e:f4:42:5b:80:d4:60:9e:23:da:3e:c4:53:99:9a:c4:e5:80:
45:b7:08:ed:11:b1:99:c5:8c:c7:f0:5d:48:37:41:a4:50:3c:
97:c7:9c:24:f2:63:c1:73:f8:8b:c9:3d:e0:b7:9f:1d:fa:b3:
7a:02:dc:68:c8:51:1b:99:5c:d3:6f:a7:fd:f2:66:09:58:0a:
a4:fd:ad:63:f0:1d:23:af:be:8e:7c:b3:24:f5:82:f4:38:52:
e4:0e:71:21:2c:e3:76:31:0d:2e:28:38:97:6f:c5:90:de:97:
d6:ee:96:9a:39:ef:b7:14:a6:2f:ac:dd:45:1c:b1:5b:74:02:
3c:66:83:8f:63:b5:be:08:22:23:04:86:0e:61:ab:75:c6:a3:
ee:41:2c:ae:05:4a:14:6f:41:2a:28:67:67:ee:cd:d1:80:7e:
ba:7f:39:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8YUwm9lTMpxA5DroFgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWNlMTVlNDVlZmI1YTAwNjBjMDY1ZTI3NGVhOGUzYWZi
MDI1ZWIwHhcNMjUwMTMxMTIwMDIxWhcNMjUwMjAxMTIwMDIxWjAzMTEwLwYDVQQD
EygxYTRjOTEyZWM2YjBlNGUzZDU4ZGY2NTZiY2Y1Mjg5NWNmZGNlN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb1IP6u0/fX4e9Buy3SYRcOf1xWB
IheVh1E9Upu8W3UrXlOn1+YGSCyINZdxJcJuJjTmSR9Yq+gErf/TKvoOv3rVZQPn
Xg2gvdjb1e7fNFEkCF3O/IC1PNEBshpscu47c4LLf3VXUg+gYe0IB1h82Q7jGTj5
u9EnLkbM11I7gaIgx3qkkTLKxfJ2K/eK+sGef6gzNMjIiHlj2CA+DZDKQfOpFMix
g9U4Z8n3ZatqMtWiegzhEP+qPTal9BGVV93Eg/6sT3tCV76nUDjrrRBw4D+cfaoD
u185HX1fOjowWQtnC6YycjMRolQ//XK3p8bmJ+TVb4RnW4nOtitsfZ5TTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpMkS7GsOTj1Y32Vrz1KJXP3OffMB8GA1UdIwQY
MBaAFFSs4V5F77WgBgwGXidOqOOvsCXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEt
YWQyYjYxMzgwYmUxLzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEtYWQyYjYxMzgwYmUx
LzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq7ewaVU
gz9I6WPfEkDm9jVX92/LDq2gRI2piZqmjc4Psizf2i4a/CtPYn3wyemNNWcPmarX
uTWs+zRqoSJtlCQgiyBbBSnTEnISdrErmYLQ5uyCDZ/p8A5kfvRCW4DUYJ4j2j7E
U5maxOWARbcI7RGxmcWMx/BdSDdBpFA8l8ecJPJjwXP4i8k94LefHfqzegLcaMhR
G5lc02+n/fJmCVgKpP2tY/AdI6++jnyzJPWC9DhS5A5xISzjdjENLig4l2/FkN6X
1u6WmjnvtxSmL6zdRRyxW3QCPGaDj2O1vggiIwSGDmGrdcaj7kEsrgVKFG9BKihn
Z+7N0YB+un85Eg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:00 2025 by rpki-client