Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: ZhK0XIhztz6+jPETEcBaOHFvSQqNH3jGrDSaWf4vREU=
Subject key identifier: A8:6B:15:6E:09:B9:72:D8:23:75:CC:6D:CE:54:53:2E:20:7C:90:AD
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 0194BBCE0D3D25B44B364674A36A7445CCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: c2M2flpcTtcqttEkVwEZSuBm/hnQ39YOnXRxwXGDAMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:3d:25:b4:4b:36:46:74:a3:6a:74:45:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=a86b156e09b972d82375cc6dce54532e207c90ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:43:c6:92:e2:57:85:7c:87:47:e3:11:42:
4e:e1:a3:7b:d7:98:9e:37:43:39:27:40:99:af:85:
eb:4c:be:1f:c8:23:d3:b3:0c:35:bf:0a:61:80:93:
52:66:3c:28:5a:ee:b2:2c:24:e2:7f:f4:74:cb:31:
68:ea:9e:76:a5:50:42:be:b9:f3:fa:44:82:3a:16:
d7:8d:8e:25:3e:b1:e9:fb:2a:e7:0f:db:d9:04:c2:
2c:77:34:38:8a:72:a2:b7:7c:c3:e1:f4:6f:cd:14:
0c:1b:de:dd:92:2d:2a:c8:29:e3:b9:45:3e:e1:62:
7b:6d:3a:36:d8:79:ee:2c:86:e3:25:3d:34:1e:3e:
15:f7:7b:cc:f7:c9:ef:7c:e8:f2:23:b3:c6:91:14:
7b:8e:1d:69:f3:0a:9b:3b:c6:66:39:d1:f2:a8:b2:
7c:c9:58:09:9d:eb:15:7e:23:ef:cc:11:33:6c:97:
c9:ff:bd:4b:40:de:c5:1c:83:73:d4:51:f0:d6:d8:
8a:17:cc:33:ae:a4:8c:24:10:00:bc:e3:7f:96:c2:
d2:ea:ac:26:ce:e7:03:d7:97:50:96:52:a0:c7:e7:
d0:03:0d:97:ef:02:94:1e:9b:00:51:8d:22:26:39:
ba:cb:2e:bb:88:24:aa:05:20:0d:66:0d:42:da:91:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:15:6E:09:B9:72:D8:23:75:CC:6D:CE:54:53:2E:20:7C:90:AD
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:a2:5f:3a:12:ab:f6:75:b3:fc:6c:0f:1a:46:93:44:c1:
03:4b:e2:59:14:b7:6b:f9:09:69:3f:57:c5:b6:cc:f2:bd:6e:
ba:5a:47:9e:f5:b5:6f:f0:a7:58:7b:af:c2:88:70:5d:bc:3c:
3b:f5:ea:94:f3:0d:4a:aa:b9:b8:f4:d4:f1:d1:59:25:e7:03:
84:c6:e1:b5:54:92:44:50:7c:db:b5:3d:20:02:f9:7d:f7:84:
e2:4c:93:3b:19:82:f8:cc:a6:9b:57:62:46:0f:ce:a4:42:c5:
49:d8:23:af:c6:a5:e0:b8:bf:76:b9:7e:ff:7a:36:08:cd:4a:
63:2a:fc:06:1e:48:24:56:96:a6:dd:28:89:5c:d7:54:42:d0:
6c:4e:0b:8e:3e:e4:67:da:50:11:e7:6a:d7:19:c7:e4:e0:fb:
23:85:63:d5:30:5a:a7:ef:04:8a:3a:f6:47:7d:a7:d3:e6:31:
68:c7:4f:62:a9:0a:9c:b3:43:aa:23:9c:d1:dc:fb:94:fe:b8:
8f:4d:5c:7a:86:51:d3:cf:bf:d4:73:df:18:3b:89:97:ec:c6:
63:cd:39:9a:55:1b:7b:86:a3:17:60:d8:c9:bb:f2:19:78:79:
64:87:fb:75:74:b8:dd:f5:a4:f2:7f:0f:ba:a7:36:71:61:32:
4e:f8:bb:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg09JbRLNkZ0o2p0RczOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODNjMjg0M2MxNjQ5YjAwNTRjOTExMjRmZWUwMzExNDA5
NWUxNjMwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
EyhhODZiMTU2ZTA5Yjk3MmQ4MjM3NWNjNmRjZTU0NTMyZTIwN2M5MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgFDxpLiV4V8h0fjEUJO4aN715ie
N0M5J0CZr4XrTL4fyCPTsww1vwphgJNSZjwoWu6yLCTif/R0yzFo6p52pVBCvrnz
+kSCOhbXjY4lPrHp+yrnD9vZBMIsdzQ4inKit3zD4fRvzRQMG97dki0qyCnjuUU+
4WJ7bTo22HnuLIbjJT00Hj4V93vM98nvfOjyI7PGkRR7jh1p8wqbO8ZmOdHyqLJ8
yVgJnesVfiPvzBEzbJfJ/71LQN7FHINz1FHw1tiKF8wzrqSMJBAAvON/lsLS6qwm
zucD15dQllKgx+fQAw2X7wKUHpsAUY0iJjm6yy67iCSqBSANZg1C2pE4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhrFW4JuXLYI3XMbc5UUy4gfJCtMB8GA1UdIwQY
MBaAFLyDwoQ8FkmwBUyREk/uAxFAleFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUt
NTI5NWY1YjNmMTliLzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUtNTI5NWY1YjNmMTli
LzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq6iXzoS
q/Z1s/xsDxpGk0TBA0viWRS3a/kJaT9XxbbM8r1uulpHnvW1b/CnWHuvwohwXbw8
O/XqlPMNSqq5uPTU8dFZJecDhMbhtVSSRFB827U9IAL5ffeE4kyTOxmC+Mymm1di
Rg/OpELFSdgjr8al4Li/drl+/3o2CM1KYyr8Bh5IJFaWpt0oiVzXVELQbE4Ljj7k
Z9pQEedq1xnH5OD7I4Vj1TBap+8Eijr2R32n0+YxaMdPYqkKnLNDqiOc0dz7lP64
j01ceoZR08+/1HPfGDuJl+zGY805mlUbe4ajF2DYybvyGXh5ZIf7dXS43fWk8n8P
uqc2cWEyTvi7/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:17 2025 by rpki-client