Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: 2kwKoICjFPZidgKKR0sbOhunrWOgV2XNx0w25Bb2aaQ=
Subject key identifier: D9:0B:18:2F:EB:9C:4E:0C:5F:F7:49:E4:8D:CC:F0:FF:AE:0C:E7:99
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 0194BC3C3B36CA18A2FE3D03F7190D933592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: BQQUt3M7UOEgxY8TpEQViaGwDcfbsT1b8wmIwxBHhUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:36:ca:18:a2:fe:3d:03:f7:19:0d:93:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=d90b182feb9c4e0c5ff749e48dccf0ffae0ce799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:6b:6a:b5:1b:45:3a:fe:ca:fc:33:7f:e9:
79:0e:ca:11:9b:5a:40:a2:69:dd:09:b1:c7:3b:b8:
81:05:8d:ed:bf:25:30:85:b6:f6:1a:3c:db:23:f7:
39:0b:c2:67:2c:db:55:ee:2e:f4:3e:17:4a:3f:23:
78:0c:85:66:86:ec:38:1f:60:f6:f1:06:90:cf:04:
03:cc:88:d9:75:41:93:46:90:ae:d3:48:c2:c1:87:
e8:15:88:81:49:d5:e2:86:9d:d5:07:0e:8a:bf:9d:
f5:79:97:3c:a3:41:15:5a:d5:a0:3b:d0:07:90:3e:
ab:bf:68:0b:28:86:0e:ab:b2:b5:69:f2:70:47:e8:
f8:52:cd:44:40:60:69:b2:90:a0:e2:84:23:23:b6:
69:0e:3b:9f:38:16:00:0a:a0:eb:63:1a:3e:aa:09:
b7:54:a9:cc:6f:bd:42:ac:15:e4:e6:b7:a7:24:6b:
a0:65:db:c3:30:f6:49:ac:cc:af:b5:36:85:ab:d3:
05:e0:f2:27:4a:3a:6c:ac:53:d8:8f:94:0f:1f:bf:
bf:5b:8f:a8:fb:80:34:26:97:c7:a9:89:8c:b4:96:
a8:ba:c4:cc:98:b5:41:43:11:81:2e:39:db:ff:bb:
4e:45:98:41:7c:e7:8a:e2:01:26:d2:8e:8a:f7:29:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:18:2F:EB:9C:4E:0C:5F:F7:49:E4:8D:CC:F0:FF:AE:0C:E7:99
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fd:20:63:5c:7c:78:e7:2a:98:cc:93:a8:8b:dd:02:e0:11:
80:ae:13:a7:4c:d5:29:08:cd:3f:70:50:00:98:26:0b:79:c4:
56:07:9a:da:4a:83:d2:4b:55:10:17:42:ec:67:cc:99:af:54:
6f:f4:1c:e8:ac:02:c6:57:4e:f9:fc:24:bd:cc:e8:7a:f2:96:
e2:d2:64:59:80:f5:7b:df:52:d0:6a:ee:c7:07:2e:cd:29:3d:
e8:e3:44:f7:e6:65:ec:92:be:d0:29:e9:a0:76:3a:52:35:a6:
9d:50:e3:7a:04:fa:48:a0:f9:6f:c0:25:77:75:62:d9:67:5b:
b2:e8:db:bc:ab:7f:61:d9:da:7a:22:bf:b5:92:ed:b5:19:60:
63:bc:f2:ab:ef:ce:ad:a1:4f:66:46:8e:3d:12:33:61:72:f5:
44:bc:9f:e7:93:17:49:f6:d9:8a:c0:7f:5a:56:e4:31:69:bd:
ee:79:f8:e2:74:28:cd:4b:47:cf:42:c2:a0:a6:72:fc:52:fe:
e7:5a:11:ff:a9:c7:fd:46:d6:f9:c4:47:50:4f:67:ed:cb:38:
8e:03:e2:69:fc:01:d1:b1:c2:01:78:24:97:e0:69:53:23:33:
1a:23:4e:56:1c:26:a4:7c:d4:1a:31:a9:a0:16:86:77:4c:03:
b1:c1:9a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDs2yhii/j0D9xkNkzWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjQyM2VkOTA1MDAwZjY5YWQ5M2VlZmM2NjZiYjliMWFk
ZGNiMzcwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EyhkOTBiMTgyZmViOWM0ZTBjNWZmNzQ5ZTQ4ZGNjZjBmZmFlMGNlNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTdrarUbRTr+yvwzf+l5DsoRm1pA
omndCbHHO7iBBY3tvyUwhbb2GjzbI/c5C8JnLNtV7i70PhdKPyN4DIVmhuw4H2D2
8QaQzwQDzIjZdUGTRpCu00jCwYfoFYiBSdXihp3VBw6Kv531eZc8o0EVWtWgO9AH
kD6rv2gLKIYOq7K1afJwR+j4Us1EQGBpspCg4oQjI7ZpDjufOBYACqDrYxo+qgm3
VKnMb71CrBXk5renJGugZdvDMPZJrMyvtTaFq9MF4PInSjpsrFPYj5QPH7+/W4+o
+4A0JpfHqYmMtJaousTMmLVBQxGBLjnb/7tORZhBfOeK4gEm0o6K9ymiZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkLGC/rnE4MX/dJ5I3M8P+uDOeZMB8GA1UdIwQY
MBaAFFUkI+2QUAD2mtk+78Zmu5sa3cs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUt
ZTk1MWE3NDM0NmY5LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUtZTk1MWE3NDM0NmY5
LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP0gY1x8
eOcqmMyTqIvdAuARgK4Tp0zVKQjNP3BQAJgmC3nEVgea2kqD0ktVEBdC7GfMma9U
b/Qc6KwCxldO+fwkvczoevKW4tJkWYD1e99S0GruxwcuzSk96ONE9+Zl7JK+0Cnp
oHY6UjWmnVDjegT6SKD5b8Ald3Vi2WdbsujbvKt/YdnaeiK/tZLttRlgY7zyq+/O
raFPZkaOPRIzYXL1RLyf55MXSfbZisB/WlbkMWm97nn44nQozUtHz0LCoKZy/FL+
51oR/6nH/UbW+cRHUE9n7cs4jgPiafwB0bHCAXgkl+BpUyMzGiNOVhwmpHzUGjGp
oBaGd0wDscGaJQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client