Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File: A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier: NUTbyWVyXXL4S1giT/f28l+r6fDMrkryInsDMfDDeYQ=
Subject key identifier: 62:58:9B:D6:1D:DD:F3:B1:96:EC:39:F2:2C:D1:F0:87:50:91:2C:60
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 0194BD854B64F2A87AD1006D9223A063F65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number: 025E
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: lDQDfQeb3lQzL+Wkm4NqbmI6+p/k8xbeeElOdTPLZss=)
2: L8FNNsDYB1Mm4dcsPEPduE7Sp7s.roa (hash: ZqeWwA6iMQz8wB7BBawsH9mt3/kwxAcY8eULL2GkA/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:64:f2:a8:7a:d1:00:6d:92:23:a0:63:f6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=62589bd61dddf3b196ec39f22cd1f08750912c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:50:a9:dc:00:1a:61:6c:47:c0:75:18:6a:
2f:93:88:dd:3c:34:ee:78:52:79:c7:37:8e:8a:7e:
e6:66:00:b7:e6:98:5d:1a:db:dd:2a:82:2c:98:56:
04:2f:f7:7c:2d:26:ee:38:37:52:fa:e7:87:03:4e:
02:97:b1:a4:11:34:e5:08:c1:17:33:d0:85:de:df:
70:e3:ba:6a:8c:f7:bb:03:9f:0f:18:d5:8c:a7:f0:
a5:fc:49:1d:8c:68:f6:f9:c5:88:71:84:88:23:06:
df:8c:6d:59:0f:7b:25:5c:30:e3:ce:2d:09:c7:81:
b9:09:28:2c:a7:82:b4:23:b8:ab:84:0f:56:1e:33:
38:d2:72:19:fe:42:bf:f3:05:b8:9f:fb:49:75:f6:
b6:fe:2d:19:5d:90:1c:8d:a4:e5:ea:48:9d:36:5b:
d6:9d:ab:ab:cf:b4:43:0d:3d:21:98:ce:b1:06:6b:
0c:fb:91:4a:f2:fb:ea:3a:be:5c:73:94:8f:1b:f1:
3c:18:45:42:19:32:ea:d9:63:9e:97:5f:b7:e0:e4:
53:73:b7:92:f5:d7:be:eb:b8:b0:5f:c5:13:4d:30:
ca:b4:5f:ab:6b:bb:4d:e1:13:94:73:bf:a7:7e:53:
60:ad:4d:c3:51:4e:e6:20:77:63:de:6d:bd:33:43:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:9B:D6:1D:DD:F3:B1:96:EC:39:F2:2C:D1:F0:87:50:91:2C:60
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:1f:38:3e:77:0e:5b:ed:d0:aa:a5:f0:c3:7f:b0:46:91:45:
de:8f:84:65:c6:38:0f:9f:16:be:07:5f:b5:02:55:84:e6:1d:
bf:e8:48:95:0d:4e:f3:81:e6:51:32:67:f6:6d:66:4a:a2:ff:
40:eb:09:2c:ca:5e:25:cb:52:e3:16:f6:6d:a8:4b:8d:18:67:
67:d3:03:b3:0b:ec:14:88:5e:f1:14:cd:9f:28:13:51:5f:f6:
e2:b1:22:b1:10:14:09:58:96:d4:53:a9:63:bf:aa:e6:0c:2d:
a9:6d:57:ef:b2:63:a1:9d:67:0c:08:47:9c:3a:78:7a:4b:84:
02:3d:f6:2f:12:cc:d9:19:14:80:e1:8f:7d:d4:90:34:bb:61:
1c:0e:e2:ec:9c:7a:e4:76:2c:f6:98:99:44:10:54:74:df:75:
48:f9:1f:b6:6e:4e:f2:73:af:a4:6d:49:de:1e:48:a4:b1:26:
9a:b8:c5:bf:84:c6:45:e4:ee:66:61:de:7e:0a:2f:36:42:67:
ff:f3:87:ed:b6:b3:5d:50:b9:bd:ae:a0:b4:ca:1a:e9:53:c6:
b6:93:fa:29:55:06:61:d8:7a:0a:a2:ab:4d:a0:4b:51:a5:13:
65:f3:39:17:55:d1:49:3b:bc:b6:e9:fe:ce:8b:ec:53:80:e1:
fb:2a:50:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUtk8qh60QBtkiOgY/ZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTU2MzQ3N2NhMmJkZTY5ZWY3OTQzOTkxZjk1MzMzMDU3
YjNlMzYwHhcNMjUwMTMxMTgwMDE2WhcNMjUwMjAxMTgwMDE2WjAzMTEwLwYDVQQD
Eyg2MjU4OWJkNjFkZGRmM2IxOTZlYzM5ZjIyY2QxZjA4NzUwOTEyYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLZQqdwAGmFsR8B1GGovk4jdPDTu
eFJ5xzeOin7mZgC35phdGtvdKoIsmFYEL/d8LSbuODdS+ueHA04Cl7GkETTlCMEX
M9CF3t9w47pqjPe7A58PGNWMp/Cl/EkdjGj2+cWIcYSIIwbfjG1ZD3slXDDjzi0J
x4G5CSgsp4K0I7irhA9WHjM40nIZ/kK/8wW4n/tJdfa2/i0ZXZAcjaTl6kidNlvW
naurz7RDDT0hmM6xBmsM+5FK8vvqOr5cc5SPG/E8GEVCGTLq2WOel1+34ORTc7eS
9de+67iwX8UTTTDKtF+ra7tN4ROUc7+nflNgrU3DUU7mIHdj3m29M0P7cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJYm9Yd3fOxluw58izR8IdQkSxgMB8GA1UdIwQY
MBaAFAPlY0d8or3mnveUOZH5UzMFez42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83ZWIwNzQtMTMzMS00ZGVhLTllNjAt
MWYxZWM0MDBmYTUwLzEvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83ZWIwNzQtMTMzMS00ZGVhLTllNjAtMWYxZWM0MDBmYTUw
LzEvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3h84PncO
W+3QqqXww3+wRpFF3o+EZcY4D58WvgdftQJVhOYdv+hIlQ1O84HmUTJn9m1mSqL/
QOsJLMpeJctS4xb2bahLjRhnZ9MDswvsFIhe8RTNnygTUV/24rEisRAUCViW1FOp
Y7+q5gwtqW1X77JjoZ1nDAhHnDp4ekuEAj32LxLM2RkUgOGPfdSQNLthHA7i7Jx6
5HYs9piZRBBUdN91SPkftm5O8nOvpG1J3h5IpLEmmrjFv4TGReTuZmHefgovNkJn
//OH7bazXVC5va6gtMoa6VPGtpP6KVUGYdh6CqKrTaBLUaUTZfM5F1XRSTu8tun+
zovsU4Dh+ypQjw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:01 2025 by rpki-client