Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: W4K6F+ZhczNi1hPxc27VvEw9lu27cy3q66TMgvbppnw=
Subject key identifier: 99:F5:99:43:8D:23:FD:D1:BC:5B:54:34:4B:B4:2D:3E:40:D0:CA:F8
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 0194BC3C5C2C4974320DDFC1F406406556BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 12E8
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: FDscKJiQFiMK36bD0w4RgSl0AdcphSt2gPiqU0S9Iz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5c:2c:49:74:32:0d:df:c1:f4:06:40:65:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=99f599438d23fdd1bc5b54344bb42d3e40d0caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:5b:55:54:17:b1:5a:1b:f5:4f:53:5a:eb:
38:9f:4f:6e:43:74:41:91:55:59:dd:bb:24:ca:84:
9f:16:57:83:e5:27:5f:34:78:b4:6a:e3:95:48:d4:
14:fe:7b:64:0c:2f:85:27:c6:51:28:3d:64:d1:da:
a0:b6:56:10:d1:51:9c:05:a5:3c:00:1d:d8:ea:66:
e5:61:02:30:4e:cc:76:d7:70:22:21:b0:c1:9a:d5:
fe:3c:5c:23:7e:a2:a1:c7:9a:61:e9:69:62:75:a2:
10:fd:c0:61:05:c9:8b:21:28:42:82:7c:0d:3e:f2:
04:9b:8d:95:ba:70:a1:41:34:db:b0:c0:8d:91:cb:
3b:81:07:b8:66:f7:c9:03:11:3b:c2:57:8d:d0:04:
28:4f:0a:61:96:44:fe:a4:86:bc:6b:f2:90:08:69:
94:0d:b3:15:16:1f:44:07:5a:3c:30:d8:31:7a:03:
4f:e2:ec:87:da:63:05:53:2a:d0:95:a8:03:11:20:
87:f5:56:e9:3d:6f:e2:12:5a:4f:34:39:17:0c:fb:
04:6c:b0:7e:e7:26:44:28:8e:ed:9c:2e:a5:f1:f4:
2f:5a:36:d8:56:98:c3:4a:63:7f:2c:c6:07:bf:54:
74:1a:c3:7c:07:87:94:9c:a7:f2:c6:fe:e2:24:4d:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:99:43:8D:23:FD:D1:BC:5B:54:34:4B:B4:2D:3E:40:D0:CA:F8
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:4d:7a:ef:52:09:a8:41:75:bf:83:dc:7e:bf:33:df:22:
5c:9d:53:fe:c9:4d:55:fe:dd:68:51:2f:ac:d8:fd:85:83:41:
a3:5c:7f:77:b4:5d:de:81:ab:36:22:81:77:6c:0b:1c:63:e1:
fb:7b:4c:ae:a7:ca:fd:83:c8:ff:0d:a8:ab:ba:22:ce:12:3e:
bc:cc:98:65:8e:09:66:70:ae:d7:19:59:68:2e:75:fa:1a:a7:
ab:5d:8c:21:91:94:b1:0c:cd:7e:29:90:21:0f:c1:03:00:b7:
ff:ea:d7:c3:2e:d7:f4:72:f5:a8:b1:12:ab:ec:ef:c6:5c:e1:
e5:69:37:86:c3:d5:39:b7:01:a6:50:fc:a1:e7:7a:d3:e1:4c:
ac:48:ff:e1:1b:6d:19:ba:ee:3c:26:3d:95:30:fa:74:a2:9c:
86:c0:04:fc:0b:07:9f:82:87:bf:be:74:50:79:ab:10:57:d4:
ec:3e:bc:a0:b0:f6:31:12:ae:a6:8e:e1:3b:73:86:a4:ae:39:
4e:3c:ec:7e:c2:03:3e:03:2e:e4:56:0d:cc:2d:37:da:d7:82:
33:b8:d9:75:c5:a8:a3:89:ac:8e:bd:40:22:a5:be:0f:d8:67:
23:9b:0f:6d:bd:29:00:52:dc:78:80:d3:8a:0f:1e:aa:25:61:
f3:f4:9c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFwsSXQyDd/B9AZAZVa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0
NjU4NzAwHhcNMjUwMTMxMTIwMDU5WhcNMjUwMjAxMTIwMDU5WjAzMTEwLwYDVQQD
Eyg5OWY1OTk0MzhkMjNmZGQxYmM1YjU0MzQ0YmI0MmQzZTQwZDBjYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza5bVVQXsVob9U9TWus4n09uQ3RB
kVVZ3bskyoSfFleD5SdfNHi0auOVSNQU/ntkDC+FJ8ZRKD1k0dqgtlYQ0VGcBaU8
AB3Y6mblYQIwTsx213AiIbDBmtX+PFwjfqKhx5ph6WlidaIQ/cBhBcmLIShCgnwN
PvIEm42VunChQTTbsMCNkcs7gQe4ZvfJAxE7wleN0AQoTwphlkT+pIa8a/KQCGmU
DbMVFh9EB1o8MNgxegNP4uyH2mMFUyrQlagDESCH9VbpPW/iElpPNDkXDPsEbLB+
5yZEKI7tnC6l8fQvWjbYVpjDSmN/LMYHv1R0GsN8B4eUnKfyxv7iJE1/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn1mUONI/3RvFtUNEu0LT5A0Mr4MB8GA1UdIwQY
MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt
YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2
LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGFNeu9S
CahBdb+D3H6/M98iXJ1T/slNVf7daFEvrNj9hYNBo1x/d7Rd3oGrNiKBd2wLHGPh
+3tMrqfK/YPI/w2oq7oizhI+vMyYZY4JZnCu1xlZaC51+hqnq12MIZGUsQzNfimQ
IQ/BAwC3/+rXwy7X9HL1qLESq+zvxlzh5Wk3hsPVObcBplD8oed60+FMrEj/4Rtt
GbruPCY9lTD6dKKchsAE/AsHn4KHv750UHmrEFfU7D68oLD2MRKupo7hO3OGpK45
TjzsfsIDPgMu5FYNzC032teCM7jZdcWoo4msjr1AIqW+D9hnI5sPbb0pAFLceIDT
ig8eqiVh8/Sc7w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:12 2025 by rpki-client