Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: Q65nUZCTU/dnABmwj4cz7uJwOR/tjFsTODml1XdXVAA=
Subject key identifier: 0E:2B:A9:B7:3C:12:86:22:0D:97:32:32:FC:EF:64:18:D2:26:01:8B
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 0194BD85AA1376AE660CC1A62DA5003D3D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 02A5
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: dHuYvBis0/SFpdMK3XeKUV1vkwwn6Hc0ghLZ5H4aZjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:13:76:ae:66:0c:c1:a6:2d:a5:00:3d:3d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=0e2ba9b73c1286220d973232fcef6418d226018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:89:04:c4:97:64:85:e0:d1:26:5d:77:69:
39:5b:56:00:eb:9f:70:90:83:86:7a:9f:ab:41:e1:
8b:53:ca:17:33:45:b2:36:09:d4:03:c2:48:64:c1:
16:97:4a:7c:88:ef:b0:4b:f3:10:ac:e2:08:ca:51:
1b:39:48:ec:3d:b3:cc:68:72:17:ce:b8:59:7a:30:
bd:49:bb:d2:a2:2d:2b:ea:19:ce:74:9b:34:0d:3e:
0c:fb:05:5b:cd:a7:6c:cf:fb:06:bc:d6:d2:1e:99:
85:3f:7d:30:00:74:fd:9c:49:68:98:aa:0a:01:9b:
9a:dd:10:26:23:d6:24:f6:07:64:b9:e9:ec:8f:3d:
b6:68:43:70:ce:ea:36:6f:0e:5a:82:1b:94:5e:45:
ec:22:aa:9b:fa:b5:4c:38:f1:a2:08:b6:0c:1c:c1:
d3:d9:fd:3d:e3:90:ac:c0:33:44:e7:e0:cc:ef:75:
e6:25:d5:a1:e4:be:58:06:d9:11:78:a4:e0:52:89:
2d:50:09:56:a0:dc:58:cb:54:17:ab:99:68:ad:75:
a9:9e:d4:91:cb:cd:23:9f:eb:1d:4f:1a:52:b1:f7:
10:a8:ac:4a:2a:4c:2d:47:7a:a6:8b:be:75:50:1c:
aa:f5:ec:ce:29:61:1d:ec:9f:60:37:2f:10:03:0b:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:A9:B7:3C:12:86:22:0D:97:32:32:FC:EF:64:18:D2:26:01:8B
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2d:ce:61:74:58:26:96:64:f7:b5:5f:cc:67:28:46:60:e2:
c7:cc:06:52:f6:99:a5:64:ef:2c:10:e2:2d:23:fb:02:34:26:
23:04:3f:42:92:98:8d:6d:75:9b:62:20:13:fc:44:7d:4c:17:
d4:68:48:a1:fa:20:8e:e3:ad:39:0b:a2:83:9c:e7:14:93:71:
65:b9:5c:50:e0:a9:16:7c:7a:2f:7c:e2:54:37:a6:2e:9d:d2:
41:d7:71:7a:46:29:72:e4:da:c1:f7:1b:2c:09:7d:40:fd:33:
a4:5c:fa:8e:65:2c:95:5f:46:ba:03:c5:df:9f:f5:40:55:81:
9f:1c:bc:6f:90:d4:1a:20:d8:5a:6d:85:1c:ee:ca:42:ea:87:
86:91:b7:df:ff:b5:30:8e:92:c6:d2:62:28:be:83:62:05:b0:
0b:d8:82:51:79:41:ea:03:56:3a:aa:dc:9d:d1:74:eb:ef:79:
73:ed:6c:af:6a:8d:d4:d6:54:05:5d:d8:6d:07:bf:c0:1b:9e:
73:c7:99:a7:59:51:09:fa:14:9e:63:21:a4:8c:17:ff:7a:8a:
26:33:f6:49:18:4f:34:85:bf:7c:16:d2:a9:bf:16:3c:7a:65:
4e:6d:79:7b:72:5c:ba:e0:8d:a6:bf:28:88:f5:12:20:d1:01:
94:b8:de:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haoTdq5mDMGmLaUAPT13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh
YWYyZmIwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygwZTJiYTliNzNjMTI4NjIyMGQ5NzMyMzJmY2VmNjQxOGQyMjYwMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwViJBMSXZIXg0SZdd2k5W1YA659w
kIOGep+rQeGLU8oXM0WyNgnUA8JIZMEWl0p8iO+wS/MQrOIIylEbOUjsPbPMaHIX
zrhZejC9SbvSoi0r6hnOdJs0DT4M+wVbzadsz/sGvNbSHpmFP30wAHT9nElomKoK
AZua3RAmI9Yk9gdkuensjz22aENwzuo2bw5aghuUXkXsIqqb+rVMOPGiCLYMHMHT
2f0945CswDNE5+DM73XmJdWh5L5YBtkReKTgUoktUAlWoNxYy1QXq5lorXWpntSR
y80jn+sdTxpSsfcQqKxKKkwtR3qmi751UByq9ezOKWEd7J9gNy8QAwv0FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4rqbc8EoYiDZcyMvzvZBjSJgGLMB8GA1UdIwQY
MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt
ZDgwODQ3MzNlOTgwLzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw
LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC3OYXRY
JpZk97VfzGcoRmDix8wGUvaZpWTvLBDiLSP7AjQmIwQ/QpKYjW11m2IgE/xEfUwX
1GhIofogjuOtOQuig5znFJNxZblcUOCpFnx6L3ziVDemLp3SQddxekYpcuTawfcb
LAl9QP0zpFz6jmUslV9GugPF35/1QFWBnxy8b5DUGiDYWm2FHO7KQuqHhpG33/+1
MI6SxtJiKL6DYgWwC9iCUXlB6gNWOqrcndF06+95c+1sr2qN1NZUBV3YbQe/wBue
c8eZp1lRCfoUnmMhpIwX/3qKJjP2SRhPNIW/fBbSqb8WPHplTm15e3JcuuCNpr8o
iPUSINEBlLje6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:13 2025 by rpki-client