Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: /MhAIsth6fPLH8LK5hjesE3K1p5F3vE0PNqdfzAyqvk=
Subject key identifier: A2:C5:5C:8A:6F:28:B7:39:5F:F9:23:11:1F:52:09:F3:0F:69:4E:58
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 0194BBCE5352C2DDCD5987F472D285AA970A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 0F52
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: CSZhp53lweKNYKNgscWLEuRxe0D+M1z1VOg+8k8xlTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:52:c2:dd:cd:59:87:f4:72:d2:85:aa:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=a2c55c8a6f28b7395ff923111f5209f30f694e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:3b:5f:e6:1e:72:2b:1f:71:e5:27:bb:6d:
c6:c6:04:c1:2d:a5:64:98:93:5b:42:b0:b9:12:a3:
ac:5e:89:45:e4:6b:e6:52:a1:20:c1:d1:bb:f0:bf:
3d:20:6f:10:0d:46:cd:ba:3b:d9:2e:21:14:68:b4:
34:3d:6a:95:2d:39:6e:24:72:6c:4e:db:1a:5f:8e:
fe:af:1c:64:05:a0:8b:f5:62:08:b8:9f:54:99:53:
99:9a:78:a8:66:40:2c:ed:d7:bc:49:d4:64:de:48:
93:6b:0e:eb:58:3d:9b:93:f9:91:d5:ed:05:a2:01:
ff:0a:81:d0:0f:fe:e2:55:db:8a:97:c3:a0:e8:a6:
67:6e:97:19:39:7f:10:5e:6b:62:10:43:07:f3:dd:
0c:54:77:49:fd:80:00:a6:10:88:57:07:ff:ce:29:
c4:13:14:71:d1:5c:a5:2f:7d:6a:74:1e:a4:3d:e2:
16:dd:9e:22:dd:e3:ad:a6:58:8c:d2:ae:74:e6:3f:
95:49:2a:fd:c1:eb:12:6a:86:7e:50:43:4c:7f:8e:
47:90:2f:b2:85:6f:37:ea:ed:bf:f0:3b:0f:07:6d:
ee:3e:83:c1:13:00:e6:9b:96:43:8d:ca:cc:6c:4a:
7d:61:1a:6e:46:86:b8:6d:a1:9d:97:0c:cd:66:42:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:5C:8A:6F:28:B7:39:5F:F9:23:11:1F:52:09:F3:0F:69:4E:58
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:53:ff:17:c9:33:1c:39:15:42:b9:e7:7d:0f:fb:5c:88:b6:
d8:92:4d:c9:03:0b:ba:35:da:75:76:79:67:01:f8:7c:f7:4d:
e8:14:2f:82:6e:d1:b0:04:79:ac:e3:b0:fc:62:a5:bd:53:1a:
7c:bc:7a:f9:35:cd:4d:46:66:4f:ba:0a:cf:c9:6f:c6:88:ae:
a6:2a:5f:89:9f:47:43:a3:e1:3d:95:bb:bd:62:b4:5a:51:0d:
68:85:76:bb:0d:a3:a8:12:c9:02:1b:4d:4e:d9:8d:9c:67:7a:
c3:d5:22:77:73:10:56:fa:6a:b2:bd:d0:01:c9:16:d3:98:aa:
92:f0:65:8f:6d:20:e2:da:12:cc:94:11:d5:a7:a8:f2:1c:03:
de:ac:e4:9b:b0:e6:21:79:22:9d:e5:42:39:e2:f0:83:1c:f4:
21:1f:e7:17:d4:15:fd:ad:da:63:c1:1b:68:1d:4d:d8:26:d4:
00:66:f5:23:c1:2d:e0:3c:a2:23:58:86:4f:62:e8:7d:22:6b:
68:f6:c2:dc:60:5e:d5:97:f3:2d:b0:90:63:f5:35:35:37:24:
6c:fe:df:cd:37:79:b1:bd:9e:6f:00:63:cb:fd:17:73:98:47:
63:5a:bc:f1:b5:47:77:c2:68:d5:f6:63:98:12:4f:cb:fa:4a:
42:78:39:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlNSwt3NWYf0ctKFqpcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTRmMmM3YzY0NmVjMzFhMDQ5NWUwNTFkNmE0ZGUxYWJm
MGM3NGUwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
EyhhMmM1NWM4YTZmMjhiNzM5NWZmOTIzMTExZjUyMDlmMzBmNjk0ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xQ7X+YecisfceUnu23GxgTBLaVk
mJNbQrC5EqOsXolF5GvmUqEgwdG78L89IG8QDUbNujvZLiEUaLQ0PWqVLTluJHJs
TtsaX47+rxxkBaCL9WIIuJ9UmVOZmnioZkAs7de8SdRk3kiTaw7rWD2bk/mR1e0F
ogH/CoHQD/7iVduKl8Og6KZnbpcZOX8QXmtiEEMH890MVHdJ/YAAphCIVwf/zinE
ExRx0VylL31qdB6kPeIW3Z4i3eOtpliM0q505j+VSSr9wesSaoZ+UENMf45HkC+y
hW836u2/8DsPB23uPoPBEwDmm5ZDjcrMbEp9YRpuRoa4baGdlwzNZkKwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLFXIpvKLc5X/kjER9SCfMPaU5YMB8GA1UdIwQY
MBaAFFUU8sfGRuwxoEleBR1qTeGr8MdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYt
Mjc4MGQ2ZjE2MTJjLzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYtMjc4MGQ2ZjE2MTJj
LzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz1P/F8kz
HDkVQrnnfQ/7XIi22JJNyQMLujXadXZ5ZwH4fPdN6BQvgm7RsAR5rOOw/GKlvVMa
fLx6+TXNTUZmT7oKz8lvxoiupipfiZ9HQ6PhPZW7vWK0WlENaIV2uw2jqBLJAhtN
TtmNnGd6w9Uid3MQVvpqsr3QAckW05iqkvBlj20g4toSzJQR1aeo8hwD3qzkm7Dm
IXkineVCOeLwgxz0IR/nF9QV/a3aY8EbaB1N2CbUAGb1I8Et4DyiI1iGT2LofSJr
aPbC3GBe1ZfzLbCQY/U1NTckbP7fzTd5sb2ebwBjy/0Xc5hHY1q88bVHd8Jo1fZj
mBJPy/pKQng57Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:19 2025 by rpki-client