Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: Nd9YjiVhI8ZpR8eH4JMyS+fNx6XAC/RDSOBgAkZ2LlE=
Subject key identifier: 97:24:CD:EB:60:23:8A:0A:CE:42:2F:EE:25:B4:6D:B9:AC:3D:D8:A2
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 0194BC3BBA72C9067DED5B8EA40250445A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0A83
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: 4qsNA46NpRj7jxWpM5JmYfEQgruCYErpaSOIuchTDys=)
2: xc-UZLTq46CsoQwfrFH96loErL8.roa (hash: imTueTgO4U1HucCZCJDX7it/v879nWtNhBcC9zIM6Z8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:72:c9:06:7d:ed:5b:8e:a4:02:50:44:5a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=9724cdeb60238a0ace422fee25b46db9ac3dd8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:4a:58:b5:e0:6d:4e:c1:8b:8c:ee:7a:d4:
77:e6:7f:f6:fe:2f:b0:c0:2c:ad:2f:29:d7:66:9f:
bb:ec:38:c1:9d:cb:77:70:ab:4a:67:e5:e2:34:a9:
f9:2c:50:df:a7:ac:a7:24:73:f3:ff:6f:1a:cc:56:
61:16:91:55:17:9d:f7:fb:2a:bd:cf:44:aa:55:69:
66:a3:d1:e8:d9:f7:00:e6:18:92:76:18:02:81:90:
4a:42:20:11:0c:74:de:04:92:ca:fd:5b:da:2e:6e:
da:33:16:dd:24:d0:26:51:f9:65:01:51:da:9a:99:
b8:a0:eb:d6:93:07:51:7e:84:1d:c0:25:bf:0a:ab:
7a:75:a8:c3:2e:b1:58:42:b9:32:d5:93:c6:ab:ca:
c5:c4:52:54:99:70:cb:c6:85:c6:a5:ec:b2:bf:60:
25:de:40:78:1e:08:11:59:e0:40:62:5e:eb:d1:d9:
72:98:1e:5c:6f:3c:0f:4f:46:26:09:6a:54:6f:8c:
7f:9d:ae:26:dc:a4:88:fe:a2:d3:e4:f9:2e:7b:71:
09:b6:51:86:e3:ea:88:1d:66:90:96:2c:9f:43:91:
63:38:e3:f2:82:d6:57:7d:c4:30:a3:17:55:aa:32:
1e:22:e0:97:14:1b:79:ab:2e:93:bf:78:03:2b:3c:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:CD:EB:60:23:8A:0A:CE:42:2F:EE:25:B4:6D:B9:AC:3D:D8:A2
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:4d:4d:bb:92:13:11:7c:e5:4f:8a:a5:6a:98:bd:81:ea:
b2:f8:23:27:c9:ec:56:0c:bc:98:c8:9a:6f:75:2c:29:86:6a:
ea:c7:b0:2d:d1:f2:51:ad:dc:da:2b:8a:9b:09:c5:0f:15:88:
b8:e2:86:b1:63:f7:ee:c4:c7:e8:cb:c5:2d:36:aa:1c:10:ec:
28:88:7a:39:20:9e:b1:13:d7:0f:51:49:da:ba:f7:d3:91:db:
5d:31:ac:5c:82:8c:04:67:d1:36:6a:fc:5e:0d:8e:0f:36:64:
f0:d4:c3:85:05:1e:68:7e:14:dc:ab:1e:e7:98:91:14:46:1d:
6d:64:59:7d:95:33:d6:ea:f2:d3:b7:e1:87:28:0d:19:b9:3f:
c6:5c:7a:11:18:60:dc:2a:10:fc:34:85:da:44:9b:8d:da:c9:
ab:af:40:89:8c:5b:98:3a:4e:8f:bd:a0:89:ac:cb:3c:f3:86:
3e:fa:23:b2:42:a6:47:aa:64:11:b5:4c:d5:9f:f7:8d:dc:ee:
a7:e5:39:86:52:ec:05:35:86:17:cc:e3:6a:c6:a6:56:6f:ee:
50:35:dc:ea:70:09:58:90:3c:8a:3f:c1:99:e3:c9:aa:48:99:
e5:8c:e8:dc:25:89:ee:df:7f:12:94:91:66:35:31:00:eb:75:
9d:86:69:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7pyyQZ97VuOpAJQRFpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2
MDc5NWYwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
Eyg5NzI0Y2RlYjYwMjM4YTBhY2U0MjJmZWUyNWI0NmRiOWFjM2RkOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO5KWLXgbU7Bi4zuetR35n/2/i+w
wCytLynXZp+77DjBnct3cKtKZ+XiNKn5LFDfp6ynJHPz/28azFZhFpFVF533+yq9
z0SqVWlmo9Ho2fcA5hiSdhgCgZBKQiARDHTeBJLK/VvaLm7aMxbdJNAmUfllAVHa
mpm4oOvWkwdRfoQdwCW/Cqt6dajDLrFYQrky1ZPGq8rFxFJUmXDLxoXGpeyyv2Al
3kB4HggRWeBAYl7r0dlymB5cbzwPT0YmCWpUb4x/na4m3KSI/qLT5Pkue3EJtlGG
4+qIHWaQliyfQ5FjOOPygtZXfcQwoxdVqjIeIuCXFBt5qy6Tv3gDKzxzkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJckzetgI4oKzkIv7iW0bbmsPdiiMB8GA1UdIwQY
MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt
YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0
LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/dNTbuS
ExF85U+KpWqYvYHqsvgjJ8nsVgy8mMiab3UsKYZq6sewLdHyUa3c2iuKmwnFDxWI
uOKGsWP37sTH6MvFLTaqHBDsKIh6OSCesRPXD1FJ2rr305HbXTGsXIKMBGfRNmr8
Xg2ODzZk8NTDhQUeaH4U3Kse55iRFEYdbWRZfZUz1ury07fhhygNGbk/xlx6ERhg
3CoQ/DSF2kSbjdrJq69AiYxbmDpOj72giazLPPOGPvojskKmR6pkEbVM1Z/3jdzu
p+U5hlLsBTWGF8zjasamVm/uUDXc6nAJWJA8ij/BmePJqkiZ5Yzo3CWJ7t9/EpSR
ZjUxAOt1nYZpjA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:23 2025 by rpki-client