Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: SVMdKDg1eW3WW6nAYxMXmXJKVGLqrtLXMxdlOW4e3LA=
Subject key identifier: 47:9F:AF:5A:D8:53:0E:36:C4:28:9E:ED:C7:B5:B9:7D:89:01:11:A0
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 0194BBCE02E993A80308F199F611186D1E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: WROOw0rkbSGbOqAIOJedFjHG750hGUUdf7eZY2PcAzU=)
2: u5o61NHYqb9zvWGtzBZuF5M5RPI.roa (hash: QUfZge2NwNEyq5T77dMAINVgz9WIkvB5rSQcXwRMvkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:e9:93:a8:03:08:f1:99:f6:11:18:6d:1e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=479faf5ad8530e36c4289eedc7b5b97d890111a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:14:08:3f:ce:5a:a1:d2:a4:78:a8:c0:b7:
17:84:fe:f6:a5:56:ef:69:d3:4b:5e:e3:81:b4:15:
92:80:2f:c4:9d:b0:f2:66:57:6d:f3:0b:31:4b:db:
26:9b:8a:cb:fe:92:48:5d:ea:10:ca:1b:c5:73:09:
51:d9:08:7f:a5:6a:97:d0:1f:e8:43:01:79:7f:d1:
d3:4d:3f:c6:f7:9a:ed:75:79:0a:06:3d:23:d5:a0:
ce:3e:7f:84:82:bd:10:95:6c:11:c3:2f:1d:8f:89:
02:95:0b:a5:00:8f:be:51:55:09:ed:86:cf:4d:19:
fd:80:da:3d:8f:d2:b7:e2:56:19:88:f9:1b:eb:53:
a6:f8:f1:bd:4b:6c:bb:5f:ed:2a:34:b3:0c:7c:01:
1c:c5:ea:a7:69:20:23:b8:03:51:aa:68:47:d3:eb:
70:46:a4:e5:d4:96:e1:07:ef:26:e4:06:b5:64:df:
19:e8:de:64:23:5c:00:f9:02:9e:0d:c1:3e:0e:42:
6e:2c:6a:33:fc:27:85:03:61:dc:63:4e:6a:d3:b4:
9b:b1:9e:79:7f:0e:8b:ed:94:b7:93:8b:0c:86:db:
ae:1d:ad:b7:e8:8b:e5:c1:68:e9:a6:a5:25:bf:0a:
23:5a:7d:b0:b4:50:f1:4d:ca:1b:2a:32:91:0f:62:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:AF:5A:D8:53:0E:36:C4:28:9E:ED:C7:B5:B9:7D:89:01:11:A0
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a4:01:0e:ce:97:d2:1c:ee:56:cd:4a:e4:5d:41:eb:3b:31:
21:74:eb:5b:c9:a4:39:1e:eb:aa:f1:0b:e4:56:29:53:9d:df:
9d:4c:f1:a7:79:f7:eb:15:fb:34:ee:d2:aa:6f:a5:ae:b0:7d:
ed:b3:a0:b4:fb:46:9f:7f:b0:fa:de:f4:23:3b:32:e4:d5:0a:
8f:93:47:33:f2:95:53:08:f0:c9:01:54:0c:08:f1:e4:2b:ba:
4b:4d:6b:52:1c:1d:2b:f9:64:5a:8c:62:9e:d8:e7:22:f4:37:
49:a0:96:8a:cc:6b:e6:8a:58:ee:0c:0d:af:80:dc:9b:be:79:
b5:7b:97:28:7a:46:9e:71:13:7c:59:87:9a:12:6c:f8:c2:37:
2f:e2:a2:21:23:be:09:50:2f:ee:f8:0d:f3:7c:79:bb:ae:bc:
45:73:c7:95:10:0b:b1:be:87:49:e8:56:d9:52:ad:c1:a8:a8:
61:53:bd:64:e7:0c:53:48:eb:36:e3:61:c9:eb:87:d3:0c:29:
7c:ae:c8:9a:42:0b:84:65:bc:04:9b:93:a5:be:d8:1d:10:b1:
ba:a9:7f:a4:fc:09:8c:1e:02:8e:58:38:63:1c:ea:13:f3:5d:
1d:fc:d7:5b:c0:2d:e4:f4:20:b6:3d:30:8a:4d:09:79:f2:d7:
24:9c:a1:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgLpk6gDCPGZ9hEYbR5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw
MDUyZjMwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
Eyg0NzlmYWY1YWQ4NTMwZTM2YzQyODllZWRjN2I1Yjk3ZDg5MDExMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo30UCD/OWqHSpHiowLcXhP72pVbv
adNLXuOBtBWSgC/EnbDyZldt8wsxS9smm4rL/pJIXeoQyhvFcwlR2Qh/pWqX0B/o
QwF5f9HTTT/G95rtdXkKBj0j1aDOPn+Egr0QlWwRwy8dj4kClQulAI++UVUJ7YbP
TRn9gNo9j9K34lYZiPkb61Om+PG9S2y7X+0qNLMMfAEcxeqnaSAjuANRqmhH0+tw
RqTl1JbhB+8m5Aa1ZN8Z6N5kI1wA+QKeDcE+DkJuLGoz/CeFA2HcY05q07SbsZ55
fw6L7ZS3k4sMhtuuHa236IvlwWjppqUlvwojWn2wtFDxTcobKjKRD2L3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEefr1rYUw42xCie7ce1uX2JARGgMB8GA1UdIwQY
MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt
ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1
LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqQBDs6X
0hzuVs1K5F1B6zsxIXTrW8mkOR7rqvEL5FYpU53fnUzxp3n36xX7NO7Sqm+lrrB9
7bOgtPtGn3+w+t70Izsy5NUKj5NHM/KVUwjwyQFUDAjx5Cu6S01rUhwdK/lkWoxi
ntjnIvQ3SaCWisxr5opY7gwNr4Dcm755tXuXKHpGnnETfFmHmhJs+MI3L+KiISO+
CVAv7vgN83x5u668RXPHlRALsb6HSehW2VKtwaioYVO9ZOcMU0jrNuNhyeuH0wwp
fK7ImkILhGW8BJuTpb7YHRCxuql/pPwJjB4Cjlg4YxzqE/NdHfzXW8At5PQgtj0w
ik0JefLXJJyhPA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:47 2025 by rpki-client