Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: uS5pHTnd3tEgQcRMnAPXx72KcMWf9NHwUDaFui2jZlM=
Subject key identifier: 0C:B3:56:31:5F:FE:8E:7C:7D:04:D5:65:2B:B0:AD:F7:A2:77:22:08
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 0194BC3C3C18FDFBFC8836B247E552253057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 0F00
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: RNOxVEUbvEE2fCGgmotdV+vlSTJUs3bFJoUL4xqG6W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3c:18:fd:fb:fc:88:36:b2:47:e5:52:25:30:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=0cb356315ffe8e7c7d04d5652bb0adf7a2772208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:34:6a:5a:5b:fd:da:29:d3:a5:23:4a:77:
08:24:6a:af:f4:72:25:bf:3b:75:49:16:17:c6:c5:
d5:a6:1b:a0:ad:b0:6b:d7:90:92:e8:56:0a:8a:65:
fc:da:2c:a3:5e:19:cc:e4:4c:96:c3:22:c8:8f:ce:
72:0d:5c:82:80:be:d5:bc:23:c7:68:30:31:db:f4:
24:c1:32:cc:31:21:7f:30:56:0a:a6:4e:12:6f:98:
d1:38:a1:d7:a6:11:fa:97:87:03:9f:6b:e3:5d:83:
8b:dc:aa:45:c6:44:a0:24:06:ce:48:c6:d1:52:ae:
b1:b3:e4:64:52:03:2e:e0:44:a6:f4:72:85:df:b9:
43:2e:59:70:c3:e3:d7:e6:01:34:10:93:fc:cd:de:
42:41:e9:95:20:33:42:eb:56:e0:77:25:fa:c2:2d:
32:39:7c:f8:63:bb:27:b5:63:b9:f5:c4:04:89:b2:
a2:4f:d8:3e:56:e9:0d:f2:b9:27:ee:56:d3:21:1c:
12:e5:01:60:47:e8:f8:e2:48:19:22:d1:f9:e3:80:
e3:be:89:b0:ac:92:f8:d1:cb:e7:10:7f:8e:e4:dc:
77:94:7f:91:b7:05:7d:a7:2a:41:07:2c:e6:70:81:
f2:9c:1f:61:a1:98:79:72:c4:86:a0:89:3b:af:13:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B3:56:31:5F:FE:8E:7C:7D:04:D5:65:2B:B0:AD:F7:A2:77:22:08
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ff:e1:d7:13:3c:c3:72:f1:a3:19:70:88:3e:db:13:47:46:
ea:e9:0c:d1:32:8c:0a:58:d5:ea:00:ec:63:a9:d6:ff:9e:3f:
b2:c0:79:a4:70:07:44:02:36:55:c9:21:79:2b:5b:12:f8:3f:
b8:73:81:63:4b:53:e7:f2:ee:fe:a4:30:7d:b6:d8:c7:3f:9a:
36:17:f7:51:37:0a:3b:63:45:b8:33:68:54:27:69:b1:df:7e:
97:9b:b8:66:e2:ca:10:d4:35:db:d3:b1:93:f9:1d:da:53:f1:
e3:ba:ee:94:fc:ef:48:3e:ae:c5:c0:da:00:28:2d:2a:21:aa:
80:6e:bf:b7:3f:df:81:d6:ec:79:d9:11:8c:7c:04:9a:80:ba:
72:67:4e:8e:50:c9:4a:4c:67:8a:90:bc:95:b8:00:5b:b5:84:
da:64:9b:42:40:ef:66:5c:d1:51:03:44:43:6b:ed:a2:3e:70:
a4:eb:d0:eb:52:9e:20:51:a0:09:a9:2e:47:a0:29:b3:cc:0a:
eb:1d:80:81:df:81:47:91:98:8f:49:d1:46:28:22:51:5b:8e:
d2:3b:d7:e5:85:69:ee:25:1b:4f:41:5b:a1:9e:c8:44:13:df:
a3:00:ce:51:22:14:96:43:9d:1a:0f:3e:bc:9f:de:c0:ae:e0:
1c:dc:06:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDwY/fv8iDayR+VSJTBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjU3NzVhNzA2YWMwMGM4MmZhMjkzMzllMjJlNDMxMDgw
OTllNzkwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EygwY2IzNTYzMTVmZmU4ZTdjN2QwNGQ1NjUyYmIwYWRmN2EyNzcyMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTM0alpb/dop06UjSncIJGqv9HIl
vzt1SRYXxsXVphugrbBr15CS6FYKimX82iyjXhnM5EyWwyLIj85yDVyCgL7VvCPH
aDAx2/QkwTLMMSF/MFYKpk4Sb5jROKHXphH6l4cDn2vjXYOL3KpFxkSgJAbOSMbR
Uq6xs+RkUgMu4ESm9HKF37lDLllww+PX5gE0EJP8zd5CQemVIDNC61bgdyX6wi0y
OXz4Y7sntWO59cQEibKiT9g+VukN8rkn7lbTIRwS5QFgR+j44kgZItH544Djvomw
rJL40cvnEH+O5Nx3lH+RtwV9pypBByzmcIHynB9hoZh5csSGoIk7rxNyGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyzVjFf/o58fQTVZSuwrfeidyIIMB8GA1UdIwQY
MBaAFFUld1pwasAMgvopM54i5DEICZ55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjkt
Nzk1NGVkMzhjOGJhLzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjktNzk1NGVkMzhjOGJh
LzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsf/h1xM8
w3LxoxlwiD7bE0dG6ukM0TKMCljV6gDsY6nW/54/ssB5pHAHRAI2VckheStbEvg/
uHOBY0tT5/Lu/qQwfbbYxz+aNhf3UTcKO2NFuDNoVCdpsd9+l5u4ZuLKENQ129Ox
k/kd2lPx47rulPzvSD6uxcDaACgtKiGqgG6/tz/fgdbsedkRjHwEmoC6cmdOjlDJ
SkxnipC8lbgAW7WE2mSbQkDvZlzRUQNEQ2vtoj5wpOvQ61KeIFGgCakuR6Aps8wK
6x2Agd+BR5GYj0nRRigiUVuO0jvX5YVp7iUbT0FboZ7IRBPfowDOUSIUlkOdGg8+
vJ/ewK7gHNwGYQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:34 2025 by rpki-client