Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: PF7kBhNzfykSLdD3vX4qsBbB3j7OA3o7m7+I690kql8=
Subject key identifier: B9:CF:60:54:AF:D6:85:AF:89:B0:10:B6:B2:C3:46:02:59:40:E6:42
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 0194BD17E8851F97F82B4C64D041FE7076D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: 2gkl+PFRRAmyboi3B5M1A3XzIP48dRENh/Umt6xxCLg=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:85:1f:97:f8:2b:4c:64:d0:41:fe:70:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=b9cf6054afd685af89b010b6b2c346025940e642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:1e:c3:c5:e2:99:db:ae:5f:36:35:d3:93:
6a:b5:7f:6e:3f:58:85:2c:95:50:0c:d9:ce:46:78:
ca:1a:d1:39:60:21:ea:ba:85:7f:f6:ab:2a:a0:d4:
a4:84:e9:2f:3b:b8:f4:8e:47:43:22:fd:94:7b:56:
07:f9:0e:81:0e:18:5d:ad:d3:9d:3e:ba:90:16:7d:
6e:0b:21:98:74:f7:b4:5f:ae:4a:a2:95:5a:63:31:
95:40:a8:ae:c9:1e:0d:0e:4e:d7:e2:dd:62:c3:c7:
58:64:27:21:77:7e:65:fd:6c:e3:8d:ae:a6:46:d0:
9c:45:75:75:da:a5:bc:fa:f0:8c:8f:4c:b2:b3:37:
c5:92:73:f2:86:7c:7d:74:60:02:80:b6:63:60:d4:
32:52:93:56:c1:da:9b:1e:09:6f:95:3b:99:ee:33:
97:2b:69:11:5c:59:e1:24:5c:26:65:0b:b3:13:ec:
e1:9a:d8:35:ec:7c:9f:09:95:53:6b:fe:2f:d0:31:
1d:ea:3e:9d:c0:ff:d2:ca:cf:82:36:3e:31:51:9c:
10:de:5e:2f:76:5e:80:71:d7:52:ac:84:9b:83:de:
07:57:98:9d:81:b4:42:c6:39:3e:89:6e:83:bf:5c:
c5:57:cc:a8:f6:20:a1:eb:03:fc:ec:c3:86:a2:c1:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:60:54:AF:D6:85:AF:89:B0:10:B6:B2:C3:46:02:59:40:E6:42
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:99:af:f8:4b:49:a6:53:48:b1:5b:6e:91:03:3d:65:fb:16:
34:06:c4:77:a4:e3:39:d6:f1:ae:08:ca:24:f9:2d:6d:43:72:
c1:4e:ed:5a:8d:e1:b2:a9:1c:b5:33:9d:92:a3:a0:72:99:34:
e3:07:68:4d:a6:cc:73:4f:61:06:9d:74:0f:ca:73:30:fa:e4:
50:b5:8c:be:96:7b:71:aa:39:ea:29:18:0c:b3:f8:61:a0:f6:
58:be:28:8e:64:12:0d:7f:da:f1:e7:ad:29:70:5a:b3:a1:85:
67:52:0f:80:b0:35:f0:97:4a:23:fe:33:26:1b:ee:3a:f9:99:
28:9c:b8:81:a4:58:04:5b:27:1d:25:76:02:db:4d:55:23:ea:
22:a9:46:0c:0b:66:3d:2f:7b:e0:c2:9e:b0:e9:98:0b:74:c5:
b1:81:0a:6b:cf:f2:05:65:ed:4b:2f:18:9d:7a:ce:ab:55:c7:
05:53:db:16:4f:47:5a:42:e5:b3:00:08:b1:b1:b3:34:77:1e:
01:17:2b:fd:02:4d:82:3e:f2:52:db:13:db:35:33:34:43:60:
e9:28:d0:2d:ac:db:91:b4:62:43:45:70:e9:90:2a:e8:5a:c0:
97:5b:bb:57:e4:f3:fa:8b:61:2c:57:e4:e5:04:05:97:77:ed:
fc:e6:65:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+iFH5f4K0xk0EH+cHbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm
ZjU5NjQwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
EyhiOWNmNjA1NGFmZDY4NWFmODliMDEwYjZiMmMzNDYwMjU5NDBlNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEAew8XimduuXzY105NqtX9uP1iF
LJVQDNnORnjKGtE5YCHquoV/9qsqoNSkhOkvO7j0jkdDIv2Ue1YH+Q6BDhhdrdOd
PrqQFn1uCyGYdPe0X65KopVaYzGVQKiuyR4NDk7X4t1iw8dYZCchd35l/Wzjja6m
RtCcRXV12qW8+vCMj0yyszfFknPyhnx9dGACgLZjYNQyUpNWwdqbHglvlTuZ7jOX
K2kRXFnhJFwmZQuzE+zhmtg17HyfCZVTa/4v0DEd6j6dwP/Sys+CNj4xUZwQ3l4v
dl6AcddSrISbg94HV5idgbRCxjk+iW6Dv1zFV8yo9iCh6wP87MOGosHIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnPYFSv1oWvibAQtrLDRgJZQOZCMB8GA1UdIwQY
MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt
ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw
LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJmv+EtJ
plNIsVtukQM9ZfsWNAbEd6TjOdbxrgjKJPktbUNywU7tWo3hsqkctTOdkqOgcpk0
4wdoTabMc09hBp10D8pzMPrkULWMvpZ7cao56ikYDLP4YaD2WL4ojmQSDX/a8eet
KXBas6GFZ1IPgLA18JdKI/4zJhvuOvmZKJy4gaRYBFsnHSV2AttNVSPqIqlGDAtm
PS974MKesOmYC3TFsYEKa8/yBWXtSy8YnXrOq1XHBVPbFk9HWkLlswAIsbGzNHce
ARcr/QJNgj7yUtsT2zUzNENg6SjQLazbkbRiQ0Vw6ZAq6FrAl1u7V+Tz+othLFfk
5QQFl3ft/OZlUw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:42 2025 by rpki-client