Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: P5bBKCGeN6E9+25dGAWqo3nSa3R1Jzd3QgSjlsJHkUw=
Subject key identifier: 0C:15:2E:F5:FC:A3:BD:38:84:8B:3B:97:79:D7:9C:61:F3:1E:B9:97
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0194BCE0A472C3EDD85BBCC7FF781DDE7671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 0F08
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: soi8RaLx0jZBz5ZViYtwe+7wp64sAeDHP5Vakw/IyuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a4:72:c3:ed:d8:5b:bc:c7:ff:78:1d:de:76:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=0c152ef5fca3bd38848b3b9779d79c61f31eb997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:85:d7:56:92:2d:a9:71:bc:14:a6:1f:93:
7a:28:50:e4:21:94:ef:38:79:dd:ff:0f:6b:f0:4f:
e8:a1:86:85:40:03:99:33:e3:d2:eb:f9:df:78:28:
0b:f3:4f:05:e7:78:f2:5c:f7:3a:3c:68:c2:7a:af:
fb:ac:5c:1e:1c:63:04:2b:58:80:b6:da:e6:9e:ed:
82:cb:fe:97:71:d5:64:d8:b1:81:62:f3:90:60:89:
f5:b4:82:c6:a6:44:55:08:1c:32:36:da:f5:05:eb:
61:c3:a2:44:75:0a:de:24:e2:26:40:0c:83:be:13:
63:10:e1:bb:b0:19:6d:8c:46:c4:ac:68:36:60:29:
81:2a:fd:e3:92:36:b9:74:93:01:c4:b1:99:e9:8d:
bc:12:93:b6:40:c2:d1:9f:a3:cf:4e:59:d3:b6:5a:
9f:57:73:4a:01:03:0d:ff:ca:45:a8:24:8d:47:bc:
82:9e:6b:49:cd:75:36:f3:ee:6f:f9:65:9a:41:70:
29:4b:b3:80:ca:0b:fd:6e:db:24:5f:7b:af:15:25:
31:5c:a3:6c:3c:85:d2:63:cf:58:3e:ec:dc:9b:51:
4b:b0:0b:9d:ac:31:b1:75:2f:d3:02:29:56:02:b0:
8d:a5:74:f7:ca:2b:e5:9c:bb:99:74:5f:07:58:e3:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:2E:F5:FC:A3:BD:38:84:8B:3B:97:79:D7:9C:61:F3:1E:B9:97
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:38:46:e8:e7:55:aa:38:c2:a2:88:d3:06:d2:5e:1f:9a:
59:cd:b9:e3:dd:13:42:71:27:a9:43:f0:8b:b5:55:bf:c2:31:
66:6e:5a:91:17:83:84:be:67:42:f1:d8:44:2d:90:54:03:18:
9d:1f:e4:0a:7d:7f:5a:94:1b:61:2a:85:f5:91:c4:cf:cb:38:
0a:d9:40:b8:0c:3e:16:62:06:fe:16:ad:0b:0a:e0:46:d8:ce:
5c:f7:90:fc:5f:a0:a5:e6:d3:fc:92:27:c2:08:04:a5:df:09:
9e:56:cb:05:89:bb:22:9d:94:5c:29:20:23:35:4f:a3:39:f3:
6a:bd:5d:e9:5d:3c:c2:7b:bc:93:c4:15:41:a0:6e:07:d2:f9:
6a:fb:47:60:e4:5e:21:9b:d5:7a:c9:ed:1a:87:2a:a8:e4:6d:
11:bb:c5:86:ab:c2:ef:17:12:d5:a5:84:9e:7d:de:62:c4:2f:
00:6a:58:13:37:e8:01:d7:0b:82:a7:d3:38:91:ca:6b:dd:77:
09:ab:49:c5:7b:e0:e1:b6:11:59:ed:86:65:20:4d:37:90:af:
4c:05:e1:3c:08:d9:fb:47:9a:f2:75:17:2b:eb:13:a9:ea:26:
a6:d3:7d:06:bb:57:7e:31:88:43:91:2a:b5:1f:2c:93:3f:c2:
25:67:f4:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KRyw+3YW7zH/3gd3nZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjUwMTMxMTUwMDI2WhcNMjUwMjAxMTUwMDI2WjAzMTEwLwYDVQQD
EygwYzE1MmVmNWZjYTNiZDM4ODQ4YjNiOTc3OWQ3OWM2MWYzMWViOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwqF11aSLalxvBSmH5N6KFDkIZTv
OHnd/w9r8E/ooYaFQAOZM+PS6/nfeCgL808F53jyXPc6PGjCeq/7rFweHGMEK1iA
ttrmnu2Cy/6XcdVk2LGBYvOQYIn1tILGpkRVCBwyNtr1Bethw6JEdQreJOImQAyD
vhNjEOG7sBltjEbErGg2YCmBKv3jkja5dJMBxLGZ6Y28EpO2QMLRn6PPTlnTtlqf
V3NKAQMN/8pFqCSNR7yCnmtJzXU28+5v+WWaQXApS7OAygv9btskX3uvFSUxXKNs
PIXSY89YPuzcm1FLsAudrDGxdS/TAilWArCNpXT3yivlnLuZdF8HWOOnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwVLvX8o704hIs7l3nXnGHzHrmXMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkM4Rujn
Vao4wqKI0wbSXh+aWc25490TQnEnqUPwi7VVv8IxZm5akReDhL5nQvHYRC2QVAMY
nR/kCn1/WpQbYSqF9ZHEz8s4CtlAuAw+FmIG/hatCwrgRtjOXPeQ/F+gpebT/JIn
wggEpd8JnlbLBYm7Ip2UXCkgIzVPoznzar1d6V08wnu8k8QVQaBuB9L5avtHYORe
IZvVesntGocqqORtEbvFhqvC7xcS1aWEnn3eYsQvAGpYEzfoAdcLgqfTOJHKa913
CatJxXvg4bYRWe2GZSBNN5CvTAXhPAjZ+0ea8nUXK+sTqeomptN9BrtXfjGIQ5Eq
tR8skz/CJWf0KQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:31 2025 by rpki-client