Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: T1a7rO+Dedxi89BvpccF2RdxAjlr0xgLB7T1QecCX7g=
Subject key identifier: B2:37:1B:F3:6A:59:C4:EC:45:A3:C0:6B:1F:8E:BF:F0:49:FB:7C:D7
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 0194BC053087BB9E91C49F1BA06AA4C445E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: JNfzExP9lZIiAovjfI3BXmRERiMcf/LQmRVyBBm/fts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:30:87:bb:9e:91:c4:9f:1b:a0:6a:a4:c4:45:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=b2371bf36a59c4ec45a3c06b1f8ebff049fb7cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:86:b9:c2:6c:be:ee:3a:83:75:7b:29:76:
89:b7:f5:8d:bf:1d:f9:23:38:68:d2:d2:bf:9c:c1:
e3:1c:8f:42:3c:1b:0a:b1:96:fd:e3:b8:6a:4d:21:
28:66:47:80:55:38:c2:19:0c:4a:bd:34:9f:41:9e:
49:08:6f:7a:a3:8f:20:ab:38:03:ce:b3:5d:f8:7b:
51:29:80:d0:18:8a:84:ec:86:06:e1:b2:bf:78:95:
57:88:57:d4:3e:02:5b:de:61:0a:08:97:00:3d:0f:
29:8d:13:e9:c1:e3:6f:40:e7:a7:be:c6:1e:77:28:
ef:36:8d:a9:41:36:58:8c:3d:b9:ec:2b:c3:74:ff:
32:b4:84:54:99:b6:d3:d0:4e:fc:1c:6f:bd:fc:4a:
cd:d2:ed:02:2b:87:77:14:b0:a2:d3:80:69:a3:71:
64:d4:6a:d4:1a:f3:c6:4a:88:13:9a:48:d0:28:15:
e8:a9:38:af:e4:64:fd:89:58:46:9e:5e:88:6f:6f:
ab:cb:df:38:8b:ab:2c:ad:17:95:e1:16:df:93:59:
c7:e7:ac:bc:50:6f:e3:9d:c8:8c:00:99:1c:a2:5e:
6e:5b:18:46:29:4d:6c:75:68:1c:ea:3d:48:6e:69:
16:2a:c4:58:c1:51:bc:0b:fa:fa:14:6c:a5:26:a7:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:1B:F3:6A:59:C4:EC:45:A3:C0:6B:1F:8E:BF:F0:49:FB:7C:D7
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:8f:48:27:83:2c:1c:7c:2a:9c:8b:68:65:54:83:98:85:
42:e8:09:66:83:77:84:83:d7:2d:ad:c6:2c:0f:e7:03:37:b6:
38:4c:68:48:a7:32:f6:27:9d:73:2c:0a:74:f5:c9:8a:de:ac:
31:85:1f:ca:cc:62:7c:45:1a:f5:b7:4d:d0:f5:e3:65:41:63:
25:aa:33:b2:42:2e:8c:57:f1:02:59:38:73:44:bc:b5:6f:db:
6b:cc:1b:4e:03:6e:53:41:04:3e:ce:02:99:ab:8e:1a:af:82:
1b:c2:cf:49:74:fd:4b:e0:7d:e5:a4:d7:59:aa:7e:1d:bd:f6:
93:fb:e7:e7:31:75:75:98:4f:ea:ae:7c:59:cd:e8:ca:d7:6c:
64:87:10:1c:d8:15:2e:27:a5:df:c9:ae:be:f8:56:31:67:db:
61:0b:3e:5a:af:16:a5:37:93:f4:3b:7d:83:95:5f:12:fb:54:
b6:3e:e4:d2:ae:a2:37:9c:22:8e:67:a2:21:a6:8f:3f:22:b4:
00:12:ea:4d:c4:6e:e4:78:d9:b4:b9:77:95:58:a9:79:40:f5:
e9:f7:b9:bd:68:7a:ca:92:78:fc:55:3a:be:77:cf:cf:34:61:
30:65:ad:64:0b:4b:3b:db:69:ed:fd:c7:6b:0f:d9:26:ba:46:
56:e0:3e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BTCHu56RxJ8boGqkxEXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDhjYzM1NDg4YmQ5ZTZmMzEyYjIwZmM3NmExMDI3MmYw
Y2RlZGEwHhcNMjUwMTMxMTEwMDQ0WhcNMjUwMjAxMTEwMDQ0WjAzMTEwLwYDVQQD
EyhiMjM3MWJmMzZhNTljNGVjNDVhM2MwNmIxZjhlYmZmMDQ5ZmI3Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T2GucJsvu46g3V7KXaJt/WNvx35
Izho0tK/nMHjHI9CPBsKsZb947hqTSEoZkeAVTjCGQxKvTSfQZ5JCG96o48gqzgD
zrNd+HtRKYDQGIqE7IYG4bK/eJVXiFfUPgJb3mEKCJcAPQ8pjRPpweNvQOenvsYe
dyjvNo2pQTZYjD257CvDdP8ytIRUmbbT0E78HG+9/ErN0u0CK4d3FLCi04Bpo3Fk
1GrUGvPGSogTmkjQKBXoqTiv5GT9iVhGnl6Ib2+ry984i6ssrReV4Rbfk1nH56y8
UG/jnciMAJkcol5uWxhGKU1sdWgc6j1IbmkWKsRYwVG8C/r6FGylJqdrlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI3G/NqWcTsRaPAax+Ov/BJ+3zXMB8GA1UdIwQY
MBaAFL5IzDVIi9nm8xKyD8dqECcvDN7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQt
NDliYzQzNjYwYzk3LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQtNDliYzQzNjYwYzk3
LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX+PSCeD
LBx8KpyLaGVUg5iFQugJZoN3hIPXLa3GLA/nAze2OExoSKcy9iedcywKdPXJit6s
MYUfysxifEUa9bdN0PXjZUFjJaozskIujFfxAlk4c0S8tW/ba8wbTgNuU0EEPs4C
mauOGq+CG8LPSXT9S+B95aTXWap+Hb32k/vn5zF1dZhP6q58Wc3oytdsZIcQHNgV
Liel38muvvhWMWfbYQs+Wq8WpTeT9Dt9g5VfEvtUtj7k0q6iN5wijmeiIaaPPyK0
ABLqTcRu5HjZtLl3lVipeUD16fe5vWh6ypJ4/FU6vnfPzzRhMGWtZAtLO9tp7f3H
aw/ZJrpGVuA+Fw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:38 2025 by rpki-client