Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: +4IOTHzjh90E7RX/AdIeIMK/YjzDXLHJsIdhT8xwSvo=
Subject key identifier: 58:A7:66:4D:A9:27:DA:25:F5:98:36:83:EB:3D:D3:69:1B:77:49:CB
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 0194BC04B8CCF77E8A10CFD812BBD09BDD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 3F
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: KpiK1u-7oNlPqaGEOpva5tIqu80.roa (hash: vrDlG9Whj1tbq7/w82axxPtYLIGv7h9QKF7yo9wku/0=)
2: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: DlsCAnn8WlSanGsq2LJEb2SsI2vgXYjUFYu5jjZrssU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:cc:f7:7e:8a:10:cf:d8:12:bb:d0:9b:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=58a7664da927da25f5983683eb3dd3691b7749cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:57:20:74:e5:46:3b:b3:28:2e:c3:0c:fd:
33:6a:65:fb:90:97:b3:8d:71:c4:8e:4d:57:5d:75:
8b:29:0b:4e:f6:40:23:29:d4:4a:83:73:3e:90:5b:
3b:86:24:0e:cf:25:6a:89:ff:05:d3:32:cc:44:e5:
c4:2e:14:0c:95:9b:f7:a0:7a:63:76:b8:88:cb:95:
32:b3:bc:9c:a6:68:f4:f5:4f:aa:ab:92:7f:c3:f1:
a6:d3:ba:a6:7d:06:5c:08:bf:44:94:79:c4:b0:30:
94:0a:a9:7e:9b:a0:b2:37:4a:27:c4:bd:24:6b:31:
7b:50:98:c8:27:0b:bb:05:37:b5:a4:6c:a8:93:57:
6e:61:bd:93:46:b0:dd:7c:ee:59:52:24:ba:23:8a:
f6:e6:76:01:97:52:17:c2:f8:01:26:4e:6f:33:fd:
3e:3d:4a:b7:bb:9c:8c:64:ac:5d:b4:69:4c:59:c3:
1c:87:ef:dd:9c:ff:35:59:a7:12:46:65:9e:53:3c:
09:99:92:0d:ae:9b:4e:ab:25:3a:26:c9:c4:66:e3:
ee:4d:8a:aa:c6:19:e4:95:0e:90:2b:4e:13:fa:86:
ab:47:34:82:c9:5d:33:f4:c5:ff:bf:80:a8:f0:e5:
2f:c3:41:40:54:5a:d6:37:e6:1f:fa:86:09:b5:40:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A7:66:4D:A9:27:DA:25:F5:98:36:83:EB:3D:D3:69:1B:77:49:CB
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b2:22:48:7c:60:8b:b3:27:8d:fe:c4:5b:a0:da:16:4d:ac:
44:39:dd:8e:fc:f8:2e:7a:bd:af:2b:02:1d:ee:66:8f:35:89:
04:3b:39:25:bf:36:f6:52:6c:92:ca:db:a0:09:52:a9:4b:ea:
61:77:92:2e:d4:50:bb:1c:52:c3:d4:d3:60:dd:e3:1c:ed:e0:
1b:76:c1:8a:58:7f:a1:3b:a4:05:73:75:b0:4a:b6:75:36:ef:
a1:aa:b9:21:ea:67:f2:cf:1c:73:b9:6c:e4:70:07:2e:36:2e:
41:d9:c9:a7:7f:cc:73:a1:a7:91:0c:30:90:a2:b7:b1:b4:76:
f3:dc:15:6b:ce:09:3d:21:39:9f:0a:33:b9:b8:55:4a:02:cd:
48:0b:87:66:96:00:0b:41:ba:cf:7b:9f:51:c9:91:e5:7f:49:
8e:93:00:9d:ab:6f:e5:7a:27:99:6b:48:70:a8:04:9d:7b:79:
4d:83:80:1a:99:ff:d6:43:d4:a1:35:ca:44:67:95:bd:59:5e:
57:db:47:cd:4f:45:bb:77:07:27:f4:f4:de:f6:b9:28:4e:43:
76:66:dd:f3:8a:da:75:71:2d:43:c3:03:f5:fc:b0:71:f3:14:
66:1c:9e:4f:10:0c:1f:3e:5e:53:01:35:44:83:57:f0:ec:45:
0f:a8:95:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLjM936KEM/YErvQm92FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTg1MjFlODBmMmYwNzFhMzEzODViY2RmYmMzMWE2MjFj
NjhmOTQwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
Eyg1OGE3NjY0ZGE5MjdkYTI1ZjU5ODM2ODNlYjNkZDM2OTFiNzc0OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj9XIHTlRjuzKC7DDP0zamX7kJez
jXHEjk1XXXWLKQtO9kAjKdRKg3M+kFs7hiQOzyVqif8F0zLMROXELhQMlZv3oHpj
driIy5Uys7ycpmj09U+qq5J/w/Gm07qmfQZcCL9ElHnEsDCUCql+m6CyN0onxL0k
azF7UJjIJwu7BTe1pGyok1duYb2TRrDdfO5ZUiS6I4r25nYBl1IXwvgBJk5vM/0+
PUq3u5yMZKxdtGlMWcMch+/dnP81WacSRmWeUzwJmZINrptOqyU6JsnEZuPuTYqq
xhnklQ6QK04T+oarRzSCyV0z9MX/v4Co8OUvw0FAVFrWN+Yf+oYJtUByfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFinZk2pJ9ol9Zg2g+s902kbd0nLMB8GA1UdIwQY
MBaAFFboUh6A8vBxoxOFvN+8MaYhxo+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMt
MGRhMGYyYWQ0Njg4LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMtMGRhMGYyYWQ0Njg4
LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLIiSHxg
i7Mnjf7EW6DaFk2sRDndjvz4Lnq9rysCHe5mjzWJBDs5Jb829lJsksrboAlSqUvq
YXeSLtRQuxxSw9TTYN3jHO3gG3bBilh/oTukBXN1sEq2dTbvoaq5Iepn8s8cc7ls
5HAHLjYuQdnJp3/Mc6GnkQwwkKK3sbR289wVa84JPSE5nwozubhVSgLNSAuHZpYA
C0G6z3ufUcmR5X9JjpMAnatv5XonmWtIcKgEnXt5TYOAGpn/1kPUoTXKRGeVvVle
V9tHzU9Fu3cHJ/T03va5KE5Ddmbd84radXEtQ8MD9fywcfMUZhyeTxAMHz5eUwE1
RINX8OxFD6iVRg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:13 2025 by rpki-client