Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: 9n0YSrlc+19XsRqKpqr4ehS2tI/yNa8X6y5TpysCYAM=
Subject key identifier: C5:45:86:DF:2C:FE:5B:C5:43:BF:29:89:47:54:27:A2:DE:87:5C:26
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 0194BBCE2CF319C4B5AFCCE7327E1982C7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0910
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: HecgptLS9x9Rg0cIJZCnGkDfaqQcSH7x15/FTXs7afQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:f3:19:c4:b5:af:cc:e7:32:7e:19:82:c7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=c54586df2cfe5bc543bf2989475427a2de875c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:9c:7c:6a:9c:72:1c:81:0b:24:6e:51:bb:
68:cd:32:91:7a:cf:ec:c1:1d:fc:a9:e7:ef:69:9a:
aa:54:e2:ec:3b:85:af:cb:24:53:44:f3:2c:71:1d:
0a:b1:04:a6:9c:3b:6a:44:eb:f0:fb:7c:45:9c:13:
e4:12:3b:e1:84:54:cf:61:65:12:fb:5c:52:15:1f:
7f:cd:b0:27:9e:6c:b7:88:50:e6:2e:82:98:0e:0c:
29:fd:74:75:0e:b8:65:40:6a:a0:fd:b4:27:89:43:
a4:e5:73:8b:98:b5:93:7a:93:03:59:54:3d:40:c3:
28:21:c1:10:ec:0e:0f:d4:12:b8:b9:fc:65:75:2b:
74:1b:39:d0:c1:51:fb:d2:f9:9b:35:04:1a:b7:0a:
70:83:5f:d5:eb:ec:7c:b0:dd:21:c3:66:f7:1a:dc:
67:58:29:17:f7:56:8f:b2:f7:4c:5c:6b:35:27:15:
e1:cf:eb:d2:76:6e:48:67:cf:4f:9a:81:fb:a9:79:
7e:73:6c:19:dc:5e:62:ef:8e:b2:1b:0a:ab:c3:5e:
b0:8b:12:d6:5a:56:cf:5f:8a:07:79:55:dc:c1:f7:
26:eb:ef:f2:7e:c9:83:ce:f7:71:62:3d:a4:39:5b:
e7:bc:df:af:f5:7e:bc:e8:c3:c3:22:ed:d9:12:24:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:86:DF:2C:FE:5B:C5:43:BF:29:89:47:54:27:A2:DE:87:5C:26
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b0:ad:22:87:7e:9d:46:78:9b:7c:25:89:aa:b2:60:7c:7f:
56:8f:02:48:8f:64:54:ee:16:bd:bd:3c:6b:4b:55:6f:ff:4f:
c8:57:b1:6a:c4:9c:bd:f8:73:b2:81:39:f9:3b:1b:67:ea:5a:
41:cb:a0:48:a8:57:22:3e:3e:6c:2c:20:7d:84:96:1d:c7:1a:
06:3e:95:51:aa:65:a7:d8:aa:9e:32:ec:fd:be:fc:6f:cb:d5:
6a:6d:c3:eb:b4:0a:7b:f5:14:16:ee:1e:c0:0e:57:a6:cf:22:
d8:78:89:5e:cd:0b:dd:9a:30:5d:da:1e:38:18:d0:c7:18:ab:
d8:27:b9:16:42:23:ef:0e:fa:06:da:d4:f5:4e:df:62:eb:72:
8d:b2:37:79:ae:d7:f3:de:e9:54:f3:e7:bf:5e:11:b8:cb:19:
4f:73:3a:77:4d:5a:f7:59:54:6a:67:9e:a7:ef:6a:19:55:9a:
9e:79:37:ec:01:7b:2b:ef:34:c8:c9:65:18:4b:bd:fa:51:0f:
0a:c4:23:5f:87:b3:45:e3:b3:a1:d2:d0:c6:8f:2f:f8:b0:33:
6e:93:a8:b7:c8:2d:30:5b:13:8f:90:bf:25:eb:b9:eb:0f:b1:
62:75:80:5a:4f:d1:51:90:09:e9:68:f5:a9:b2:34:d6:04:52:
dc:3f:0c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zizzGcS1r8znMn4ZgsfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTQ3ZWJiNWMwNTZmNzAyOTZlNDA4NjIxMjYxZjNjNGUy
ZDQyMzkwHhcNMjUwMTMxMTAwMDM4WhcNMjUwMjAxMTAwMDM4WjAzMTEwLwYDVQQD
EyhjNTQ1ODZkZjJjZmU1YmM1NDNiZjI5ODk0NzU0MjdhMmRlODc1YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEecfGqcchyBCyRuUbtozTKRes/s
wR38qefvaZqqVOLsO4WvyyRTRPMscR0KsQSmnDtqROvw+3xFnBPkEjvhhFTPYWUS
+1xSFR9/zbAnnmy3iFDmLoKYDgwp/XR1DrhlQGqg/bQniUOk5XOLmLWTepMDWVQ9
QMMoIcEQ7A4P1BK4ufxldSt0GznQwVH70vmbNQQatwpwg1/V6+x8sN0hw2b3Gtxn
WCkX91aPsvdMXGs1JxXhz+vSdm5IZ89PmoH7qXl+c2wZ3F5i746yGwqrw16wixLW
WlbPX4oHeVXcwfcm6+/yfsmDzvdxYj2kOVvnvN+v9X686MPDIu3ZEiSQdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVFht8s/lvFQ78piUdUJ6Leh1wmMB8GA1UdIwQY
MBaAFL5UfrtcBW9wKW5AhiEmHzxOLUI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDkt
ZDBiOWRjM2FjYTIzLzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDktZDBiOWRjM2FjYTIz
LzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLCtIod+
nUZ4m3wliaqyYHx/Vo8CSI9kVO4Wvb08a0tVb/9PyFexasScvfhzsoE5+TsbZ+pa
QcugSKhXIj4+bCwgfYSWHccaBj6VUaplp9iqnjLs/b78b8vVam3D67QKe/UUFu4e
wA5Xps8i2HiJXs0L3ZowXdoeOBjQxxir2Ce5FkIj7w76BtrU9U7fYutyjbI3ea7X
897pVPPnv14RuMsZT3M6d01a91lUameep+9qGVWannk37AF7K+80yMllGEu9+lEP
CsQjX4ezReOzodLQxo8v+LAzbpOot8gtMFsTj5C/Jeu56w+xYnWAWk/RUZAJ6Wj1
qbI01gRS3D8MxA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:47 2025 by rpki-client