Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
File: vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft (raw, json)
Hash identifier: TslEXwJL8Sqb/ig5OnglHnczZIx1A7usan5YYJHInQk=
Subject key identifier: 6C:F1:0B:94:71:B8:EB:45:72:64:A6:57:20:04:51:17:78:EA:67:B5
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 0194BC0527D947452B1547153EF409857792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: FnExCvLDVdYuTR08kgWAavX-Pk0.roa (hash: AIJMjDttEuZdQI2f5T19fqAfcHk4SoNhDhOU5X3/Gj8=)
2: SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa (hash: OAmumDrq2brGzOON0ZBpmY/Uom5WD7nl6vre292Hhmg=)
3: db5zCybt_34-4-i-989NlftPaAE.roa (hash: t4OVx3KTrCCGv9kMRVOWKBYVAK6vdDRT4hnb6yO9KXg=)
4: vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl (hash: vqFzrRF0h+YxP+2Pm033C7rTNZnvpkIMA7fTxfDKmgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:d9:47:45:2b:15:47:15:3e:f4:09:85:77:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=6cf10b9471b8eb457264a6572004511778ea67b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:a3:0b:47:3d:3d:5b:9f:f2:b0:50:28:33:
08:58:86:de:b2:4a:f3:33:70:d5:c7:7c:b2:1d:26:
5a:91:33:7c:f4:ca:b7:6b:b0:26:56:9d:7a:04:3f:
dd:d5:c7:04:22:1c:1d:fb:cc:ff:e5:61:8f:1e:c0:
23:1c:b9:ab:e9:49:a5:70:ca:ce:47:fa:a6:c3:ec:
b9:12:b0:46:27:50:6a:0a:7b:ca:bb:40:9e:51:3d:
8f:01:04:25:a9:4f:f2:17:39:54:37:d4:07:47:04:
c1:70:ba:0b:c5:08:cd:4d:d7:b3:17:e5:2c:90:9f:
e1:27:bb:43:97:5f:84:61:3c:8b:dc:c5:f2:6d:6a:
d1:ac:f2:9a:b5:73:f1:90:f9:dc:72:66:b7:70:0b:
78:b3:0d:fa:13:4b:2d:84:a7:2e:ee:df:39:a4:18:
27:73:9f:e7:79:ea:d2:c7:87:11:83:34:3c:db:9b:
57:4c:83:17:e4:89:3a:df:ad:a6:37:ed:bb:c7:4a:
4e:7b:04:85:73:b9:cf:cc:2a:52:2b:63:dd:aa:08:
1e:4f:bf:94:c2:e0:69:78:e8:86:33:91:41:e4:3f:
ea:6b:d1:41:29:58:15:3f:4e:30:f1:94:2b:55:3f:
22:e5:b3:ad:7a:71:e0:50:15:85:c4:8d:3a:ff:b1:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:0B:94:71:B8:EB:45:72:64:A6:57:20:04:51:17:78:EA:67:B5
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ef:6f:1b:00:2c:95:b8:b3:fc:33:6e:8a:70:32:c8:2f:30:
2c:4b:27:a6:ec:26:d9:e3:4e:65:0a:94:9e:23:94:3c:38:02:
82:97:b3:97:b5:c0:7e:23:c6:a5:31:9d:33:ed:47:06:b9:92:
65:66:6d:58:22:8f:87:23:a8:b7:7f:44:48:38:84:2d:b3:d6:
ca:5a:a2:2a:d8:24:67:8b:7a:bb:4e:9b:11:71:8c:49:c6:9a:
d4:0c:ea:a5:6d:f7:c3:2b:c8:c6:66:04:18:f0:3e:60:2e:11:
86:27:32:3b:de:5c:fc:c1:8f:4c:e9:f0:aa:e5:2d:04:47:dd:
71:35:ae:be:c1:5b:80:df:0d:3d:fd:57:2f:08:83:ff:cf:c0:
65:b0:e6:27:1d:da:52:ad:9a:35:a3:86:a7:d7:41:af:ad:ae:
99:2a:f6:50:f1:c7:2c:37:ac:ed:bf:6d:93:35:a8:6e:94:65:
4e:57:a2:ef:7a:95:31:c7:82:1c:70:30:d4:95:4b:f7:73:fb:
fe:dc:a3:f7:39:95:7a:11:25:62:91:c9:11:96:72:cd:ca:ee:
1c:69:f3:bf:60:43:ff:22:70:00:3b:68:be:30:c7:b6:f8:4f:
e3:06:6b:20:81:22:cd:b4:05:c6:80:35:28:9e:0e:0f:50:4b:
bb:e8:96:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSfZR0UrFUcVPvQJhXeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOGYxMzNkMTA5NWNkMzEyMDVjN2EzNDYyMjQ4Y2M5OTQx
MjAzYWMwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
Eyg2Y2YxMGI5NDcxYjhlYjQ1NzI2NGE2NTcyMDA0NTExNzc4ZWE2N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5CjC0c9PVuf8rBQKDMIWIbeskrz
M3DVx3yyHSZakTN89Mq3a7AmVp16BD/d1ccEIhwd+8z/5WGPHsAjHLmr6UmlcMrO
R/qmw+y5ErBGJ1BqCnvKu0CeUT2PAQQlqU/yFzlUN9QHRwTBcLoLxQjNTdezF+Us
kJ/hJ7tDl1+EYTyL3MXybWrRrPKatXPxkPnccma3cAt4sw36E0sthKcu7t85pBgn
c5/neerSx4cRgzQ825tXTIMX5Ik6362mN+27x0pOewSFc7nPzCpSK2PdqggeT7+U
wuBpeOiGM5FB5D/qa9FBKVgVP04w8ZQrVT8i5bOtenHgUBWFxI06/7FXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzxC5RxuOtFcmSmVyAEURd46me1MB8GA1UdIwQY
MBaAFL2PEz0Qlc0xIFx6NGIkjMmUEgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zYjdjNDMtNDI0MS00NGQ0LTg1MzQt
NDA5ZDBmOWM4YTA0LzEvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zYjdjNDMtNDI0MS00NGQ0LTg1MzQtNDA5ZDBmOWM4YTA0
LzEvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO9vGwAs
lbiz/DNuinAyyC8wLEsnpuwm2eNOZQqUniOUPDgCgpezl7XAfiPGpTGdM+1HBrmS
ZWZtWCKPhyOot39ESDiELbPWylqiKtgkZ4t6u06bEXGMScaa1AzqpW33wyvIxmYE
GPA+YC4RhicyO95c/MGPTOnwquUtBEfdcTWuvsFbgN8NPf1XLwiD/8/AZbDmJx3a
Uq2aNaOGp9dBr62umSr2UPHHLDes7b9tkzWobpRlTlei73qVMceCHHAw1JVL93P7
/tyj9zmVehElYpHJEZZyzcruHGnzv2BD/yJwADtovjDHtvhP4wZrIIEizbQFxoA1
KJ4OD1BLu+iWXw==
-----END CERTIFICATE-----
Generated at Tue May 6 04:41:16 2025 by rpki-client