Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier: Bs1Mcyg841TqjOG6GXwTXvlKkxhjRJnC6HT70RtmTWA=
Subject key identifier: 56:8F:77:CB:27:B4:24:A6:CC:BE:52:D1:C3:5E:2A:7B:DE:E6:4D:57
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial: 0194BD8572F687092C8B8C8D636DA2425537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number: 0921
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: u+mzPDu5oki+SDZcwii2shrz3vuMxS0kbxNSuco/VtU=)
2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:f6:87:09:2c:8b:8c:8d:63:6d:a2:42:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=568f77cb27b424a6ccbe52d1c35e2a7bdee64d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:3f:ba:b4:16:fa:db:49:85:63:f3:ff:04:
f8:71:7a:87:55:a4:b6:2a:4c:51:53:96:6d:22:33:
7d:79:96:28:5f:ce:54:01:1b:11:d2:22:01:5e:b1:
2c:09:e7:1a:ed:f4:dd:94:c5:85:9b:f8:e7:e5:0e:
e3:4c:cf:eb:7d:33:0f:90:fb:68:58:16:56:69:96:
76:8d:0e:d1:d4:75:49:9e:5d:2d:8a:bc:c2:00:97:
d3:48:0f:f1:6c:2e:b5:f3:8d:f9:d9:6d:61:75:51:
f6:e3:d5:db:0a:1e:78:de:61:b1:13:18:7e:2a:6d:
9f:e9:b2:4c:86:b2:14:8b:15:74:fd:c5:f6:98:d9:
b9:8d:ce:25:d9:91:40:81:6c:36:e4:14:ad:47:71:
5c:7c:da:13:0c:f5:cf:80:a9:38:2d:8d:b3:8d:f7:
e2:4d:9d:8c:0a:c5:89:78:ae:03:9f:fe:aa:3b:0e:
c4:a0:f1:36:d9:34:28:4f:79:7c:b8:e3:09:96:ac:
63:b5:42:39:3c:ba:ba:a9:0a:df:f7:d9:36:1f:fa:
d9:b3:8a:7a:56:05:95:10:8d:05:f6:48:bd:24:38:
55:8e:60:4b:09:41:00:6b:96:0f:a1:8e:26:2b:ea:
12:a2:c9:4a:b1:2a:bc:f5:12:88:4d:c7:46:81:48:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:77:CB:27:B4:24:A6:CC:BE:52:D1:C3:5E:2A:7B:DE:E6:4D:57
X509v3 Authority Key Identifier:
keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7e:b5:ff:89:c7:8a:84:de:29:4e:87:62:f2:bf:6a:d8:22:
61:b9:0c:21:b1:97:8f:a6:29:33:13:42:1c:2f:36:03:32:b5:
56:2c:32:7c:6e:ab:9c:d0:8a:47:f1:8b:cc:f4:41:af:3a:37:
00:e0:17:b7:9b:41:01:60:75:1e:a4:c7:af:51:71:14:7d:e5:
ba:d2:74:59:6b:f0:4f:bc:ca:ba:c9:a4:30:fe:95:79:fe:9d:
07:3c:50:46:55:1a:a3:b4:3b:74:00:43:80:a3:7f:d2:cc:dc:
0f:0b:f2:23:06:76:95:30:6a:c4:24:26:5b:dd:b6:30:d2:38:
08:93:87:33:73:0e:b5:d8:0e:71:54:90:96:70:a8:88:0f:f4:
bf:95:95:ff:41:f7:b5:97:3e:52:43:d5:2c:17:9f:4e:60:a5:
6c:e3:fb:9d:a2:7a:e9:ef:67:c0:c3:ff:4f:c1:e4:66:8b:14:
b3:eb:49:58:41:91:b0:dc:19:15:b9:cb:20:bc:43:02:44:a4:
dc:62:1a:f8:90:02:84:9d:ec:e0:82:bf:0a:38:f2:f7:a7:ad:
84:dd:42:17:c4:f5:bf:34:ad:da:11:5f:f2:9f:a2:bd:36:8a:
37:10:ed:b2:84:db:4e:22:be:1e:fd:99:87:ba:95:73:65:98:
8f:e1:18:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXL2hwksi4yNY22iQlU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGNkZDE3MzJlNTY0M2ExNWVlZDllZTc3ZTEzOTRiODAy
NDI1NDgwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
Eyg1NjhmNzdjYjI3YjQyNGE2Y2NiZTUyZDFjMzVlMmE3YmRlZTY0ZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti0/urQW+ttJhWPz/wT4cXqHVaS2
KkxRU5ZtIjN9eZYoX85UARsR0iIBXrEsCeca7fTdlMWFm/jn5Q7jTM/rfTMPkPto
WBZWaZZ2jQ7R1HVJnl0tirzCAJfTSA/xbC6184352W1hdVH249XbCh543mGxExh+
Km2f6bJMhrIUixV0/cX2mNm5jc4l2ZFAgWw25BStR3FcfNoTDPXPgKk4LY2zjffi
TZ2MCsWJeK4Dn/6qOw7EoPE22TQoT3l8uOMJlqxjtUI5PLq6qQrf99k2H/rZs4p6
VgWVEI0F9ki9JDhVjmBLCUEAa5YPoY4mK+oSoslKsSq89RKITcdGgUgudQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaPd8sntCSmzL5S0cNeKnve5k1XMB8GA1UdIwQY
MBaAFFcM3Rcy5WQ6Fe7Z7nfhOUuAJCVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEt
MzhhNWM5MTA1Y2M1LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEtMzhhNWM5MTA1Y2M1
LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuH61/4nH
ioTeKU6HYvK/atgiYbkMIbGXj6YpMxNCHC82AzK1ViwyfG6rnNCKR/GLzPRBrzo3
AOAXt5tBAWB1HqTHr1FxFH3lutJ0WWvwT7zKusmkMP6Vef6dBzxQRlUao7Q7dABD
gKN/0szcDwvyIwZ2lTBqxCQmW922MNI4CJOHM3MOtdgOcVSQlnCoiA/0v5WV/0H3
tZc+UkPVLBefTmClbOP7naJ66e9nwMP/T8HkZosUs+tJWEGRsNwZFbnLILxDAkSk
3GIa+JAChJ3s4IK/Cjjy96ethN1CF8T1vzSt2hFf8p+ivTaKNxDtsoTbTiK+Hv2Z
h7qVc2WYj+EYiA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:19 2025 by rpki-client