Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: gFswDsDhoviJSbSXSxtpfhXqqoY3z7sp89kP5T+jeFE=
Subject key identifier: 2D:4E:DF:11:33:6B:30:4B:88:6C:10:D5:04:76:29:06:6F:57:D3:E3
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 0194BD858186605AD1D0D7E85573E40CC50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 0F6D
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: /jkjfuxhPbg/cDDdHmEYy6BB6IM9lnDeyHfecg6xXfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:86:60:5a:d1:d0:d7:e8:55:73:e4:0c:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=2d4edf11336b304b886c10d5047629066f57d3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:9e:9e:38:72:c3:c9:72:4e:8d:b8:8f:9d:
e1:01:7c:38:59:1e:48:a4:fc:4b:81:a8:b5:84:54:
6b:a7:e2:72:b2:22:ab:92:68:7e:cc:e0:47:2c:b1:
f0:89:63:81:af:5f:82:4d:43:2b:51:c8:95:4d:d9:
a6:50:c5:47:82:98:af:63:18:04:fb:67:ab:f8:27:
86:7a:40:d8:e7:01:c4:60:96:fe:d7:fe:4c:d1:6b:
90:1a:99:54:11:e8:a7:3c:f9:a6:b2:67:78:9e:31:
cc:06:d5:16:e2:3c:77:40:45:2a:91:83:b4:9e:ac:
f0:03:02:3e:43:1d:6d:76:25:1e:92:60:98:d6:d9:
f0:e4:eb:7a:40:34:3f:56:b8:f5:47:e6:d3:02:91:
c8:78:d4:54:41:48:db:9c:64:12:46:ae:4e:2e:22:
e9:3b:d9:a7:9a:a7:3e:03:88:b0:77:da:cc:2a:89:
dc:89:11:35:d6:2a:e5:78:9e:49:5d:94:27:e9:66:
85:cc:48:40:a6:35:7a:74:93:af:0b:38:13:e5:f5:
8e:b9:ba:21:b1:cd:30:cd:1d:05:d9:ae:c2:4d:59:
6b:0d:92:bd:cc:d8:03:bd:bc:d5:3f:69:e8:00:f2:
c5:ba:58:11:c5:18:a2:62:8f:01:47:19:6a:f8:13:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:DF:11:33:6B:30:4B:88:6C:10:D5:04:76:29:06:6F:57:D3:E3
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1d:4e:a6:24:0b:87:3b:28:44:b8:21:b4:35:44:75:98:60:
61:4e:65:bd:9a:ff:a8:44:4a:80:04:dd:c3:1d:e0:29:41:84:
c3:6f:de:03:7b:e5:6c:64:34:d3:83:4b:9a:ab:80:a9:a3:69:
29:2b:d1:f7:ae:f4:35:e9:ac:2a:4b:73:28:26:e4:9b:1f:3c:
2d:d5:66:e5:eb:84:72:72:a9:02:bf:8c:14:13:89:2f:46:45:
0e:b4:0f:24:a3:4e:65:53:f6:72:b6:f1:f1:45:d3:71:f2:f1:
ac:1a:ca:88:b6:11:e7:3b:72:1a:d2:65:22:ea:ac:b7:68:d9:
59:05:2b:b7:c3:ab:65:70:e7:cd:94:d5:5e:94:f2:45:a2:7b:
87:f4:5d:71:70:bd:69:31:b1:f2:17:55:12:de:83:c9:fb:3f:
b6:ad:45:64:ee:0d:f5:a8:cf:06:83:18:56:91:c0:a3:eb:f3:
e7:55:b0:04:12:ae:e2:ae:2a:f9:21:06:d3:d1:57:46:73:5c:
61:4e:47:6c:c3:a1:43:64:a4:2b:6b:59:06:52:f5:c1:53:7f:
a7:06:da:17:be:3b:14:2a:d0:fd:84:51:eb:ed:2e:04:47:85:
99:53:a5:0a:a4:9a:1b:8c:71:5c:ac:2b:0c:6c:d7:cc:05:7c:
15:de:8e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYGGYFrR0NfoVXPkDMUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmYyY2NmMWJhYTM5MDMzZWM3NmE1ODZmODQ2YTM2MjE4
ZjIwOWQwHhcNMjUwMTMxMTgwMDMwWhcNMjUwMjAxMTgwMDMwWjAzMTEwLwYDVQQD
EygyZDRlZGYxMTMzNmIzMDRiODg2YzEwZDUwNDc2MjkwNjZmNTdkM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWenjhyw8lyTo24j53hAXw4WR5I
pPxLgai1hFRrp+JysiKrkmh+zOBHLLHwiWOBr1+CTUMrUciVTdmmUMVHgpivYxgE
+2er+CeGekDY5wHEYJb+1/5M0WuQGplUEeinPPmmsmd4njHMBtUW4jx3QEUqkYO0
nqzwAwI+Qx1tdiUekmCY1tnw5Ot6QDQ/Vrj1R+bTApHIeNRUQUjbnGQSRq5OLiLp
O9mnmqc+A4iwd9rMKonciRE11irleJ5JXZQn6WaFzEhApjV6dJOvCzgT5fWOuboh
sc0wzR0F2a7CTVlrDZK9zNgDvbzVP2noAPLFulgRxRiiYo8BRxlq+BNhWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1O3xEzazBLiGwQ1QR2KQZvV9PjMB8GA1UdIwQY
MBaAFL4vLM8bqjkDPsdqWG+EajYhjyCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEt
NjQxODdlMzA0MzViLzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEtNjQxODdlMzA0MzVi
LzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPB1OpiQL
hzsoRLghtDVEdZhgYU5lvZr/qERKgATdwx3gKUGEw2/eA3vlbGQ004NLmquAqaNp
KSvR9670NemsKktzKCbkmx88LdVm5euEcnKpAr+MFBOJL0ZFDrQPJKNOZVP2crbx
8UXTcfLxrBrKiLYR5ztyGtJlIuqst2jZWQUrt8OrZXDnzZTVXpTyRaJ7h/RdcXC9
aTGx8hdVEt6Dyfs/tq1FZO4N9ajPBoMYVpHAo+vz51WwBBKu4q4q+SEG09FXRnNc
YU5HbMOhQ2SkK2tZBlL1wVN/pwbaF747FCrQ/YRR6+0uBEeFmVOlCqSaG4xxXKwr
DGzXzAV8Fd6ODA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client