Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: TwfVpZu94TAoY8WAlbzx9thIyAe2c8gnojtZBspkI3I=
Subject key identifier: 8E:D4:99:22:F1:43:DC:D3:F4:AA:BD:C6:51:6E:32:CE:DC:8C:37:66
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 0194BC727E70D99FE4EA9D2D625A6B41E9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 10A5
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: n6M9wlStbW36+3K+utqEC0xTOKYWP55+cxsJF92dcJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:70:d9:9f:e4:ea:9d:2d:62:5a:6b:41:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=8ed49922f143dcd3f4aabdc6516e32cedc8c3766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:7e:6a:e4:0e:b9:23:50:35:b0:ac:42:3a:
34:bc:c2:61:9e:77:f4:ca:a8:01:1e:46:f2:50:7a:
92:33:a2:3e:01:7d:12:0b:87:be:e7:81:d2:0c:f4:
34:16:63:51:d1:b3:b8:71:33:5e:64:a1:00:55:3c:
e1:f8:22:b2:b6:05:b7:ae:af:0f:fb:22:d8:b0:3e:
34:29:54:65:b9:86:21:92:6b:02:5c:5c:2e:52:6b:
c2:e8:31:47:d5:a2:4d:d1:fa:8a:53:39:6e:0f:ff:
a6:83:bd:71:21:d6:62:9f:c6:f1:be:7c:ec:a1:00:
e0:54:14:08:80:7e:1b:1e:d1:a1:28:6b:a6:c6:b0:
23:a2:43:90:85:a8:3d:04:d7:98:73:8e:a5:f0:30:
d9:74:8a:2c:54:71:f3:7d:74:31:49:b0:57:78:e5:
a2:1f:bc:3a:09:b2:b3:57:51:ec:da:a5:0f:ad:4f:
7c:e7:77:f3:3a:7c:f3:68:8b:d4:e8:97:47:ed:21:
94:96:e6:61:c7:b0:28:fa:74:57:fc:c9:eb:08:75:
3c:98:e2:5e:12:72:cc:61:1a:0d:0b:d9:1b:43:f6:
52:ac:57:6b:7f:da:78:6e:ba:47:cd:47:8c:78:78:
6e:fa:99:1d:68:30:22:84:64:d4:fd:0a:ee:f4:2f:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:99:22:F1:43:DC:D3:F4:AA:BD:C6:51:6E:32:CE:DC:8C:37:66
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c1:01:3d:3c:84:39:a9:64:d1:28:53:3e:8e:72:6b:65:39:
6a:27:9b:2a:9b:66:35:4d:ad:48:af:25:f6:16:94:79:a3:e8:
e5:94:1e:4f:60:9f:c0:62:87:37:90:22:41:72:e0:27:f5:c9:
5a:66:7a:52:a6:ac:03:6c:b4:f7:08:59:0d:f1:89:4e:89:12:
c2:63:b8:ac:45:af:41:06:f5:3d:af:3a:25:f4:c3:af:01:02:
ad:3e:d1:dd:f2:69:a9:5f:15:e5:19:24:88:e3:60:18:65:b1:
66:14:31:26:e7:f7:81:a9:95:2a:6c:98:c9:4c:e3:b5:97:64:
6b:fa:f9:03:08:c2:23:51:35:fa:89:f5:7d:57:2c:72:c9:30:
7b:d6:e3:4e:5f:2b:2d:f2:d7:ac:e5:d5:d9:72:06:ba:61:99:
89:2a:a0:c0:47:fa:43:44:3f:41:f3:2c:d8:3d:79:3f:bc:c5:
0c:37:18:63:e3:60:48:de:b4:cc:26:3a:a4:5c:16:a1:82:da:
20:3a:c4:17:3c:ea:a4:65:cd:ff:05:bd:8a:0a:fb:46:73:dd:
54:5b:3f:96:d6:cd:ec:ba:7a:c9:fa:cf:84:7c:63:00:aa:71:
1d:d9:65:36:b4:80:f2:4b:f3:71:1e:89:bc:9a:6e:83:9e:30:
96:ad:19:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cn5w2Z/k6p0tYlprQemuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTY3OGMzN2ExZjkzMzQzMTRmZWVhNTgzMjVlYTc5NDBh
ZjBmNWQwHhcNMjUwMTMxMTMwMDA3WhcNMjUwMjAxMTMwMDA3WjAzMTEwLwYDVQQD
Eyg4ZWQ0OTkyMmYxNDNkY2QzZjRhYWJkYzY1MTZlMzJjZWRjOGMzNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vt+auQOuSNQNbCsQjo0vMJhnnf0
yqgBHkbyUHqSM6I+AX0SC4e+54HSDPQ0FmNR0bO4cTNeZKEAVTzh+CKytgW3rq8P
+yLYsD40KVRluYYhkmsCXFwuUmvC6DFH1aJN0fqKUzluD/+mg71xIdZin8bxvnzs
oQDgVBQIgH4bHtGhKGumxrAjokOQhag9BNeYc46l8DDZdIosVHHzfXQxSbBXeOWi
H7w6CbKzV1Hs2qUPrU9853fzOnzzaIvU6JdH7SGUluZhx7Ao+nRX/MnrCHU8mOJe
EnLMYRoNC9kbQ/ZSrFdrf9p4brpHzUeMeHhu+pkdaDAihGTU/Qru9C/KkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7UmSLxQ9zT9Kq9xlFuMs7cjDdmMB8GA1UdIwQY
MBaAFFQWeMN6H5M0MU/upYMl6nlArw9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJaNHczb2ZrelF4VC02bGd5WHFlVUN2RDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MTZmMDMtNDI0ZS00OTEwLWFiZTEt
MDM4OGEyNjYxNjBiLzEvVkJaNHczb2ZrelF4VC02bGd5WHFlVUN2RDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MTZmMDMtNDI0ZS00OTEwLWFiZTEtMDM4OGEyNjYxNjBi
LzEvVkJaNHczb2ZrelF4VC02bGd5WHFlVUN2RDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8EBPTyE
Oalk0ShTPo5ya2U5aiebKptmNU2tSK8l9haUeaPo5ZQeT2CfwGKHN5AiQXLgJ/XJ
WmZ6UqasA2y09whZDfGJTokSwmO4rEWvQQb1Pa86JfTDrwECrT7R3fJpqV8V5Rkk
iONgGGWxZhQxJuf3gamVKmyYyUzjtZdka/r5AwjCI1E1+on1fVcscskwe9bjTl8r
LfLXrOXV2XIGumGZiSqgwEf6Q0Q/QfMs2D15P7zFDDcYY+NgSN60zCY6pFwWoYLa
IDrEFzzqpGXN/wW9igr7RnPdVFs/ltbN7Lp6yfrPhHxjAKpxHdllNrSA8kvzcR6J
vJpug54wlq0Zxg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client