Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: NfjxnvsbzW9yy0N9P551/N5iSYs8fDXHyh3iz8Ynx6w=
Subject key identifier: 30:FE:94:C7:CF:C8:D0:2E:15:5A:1B:F1:8F:C2:C3:18:CC:2D:68:06
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 0194BC3CAA69BB325D0D0D3A7D7938FD5065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: b8cIMgcsM6EMKIZXlXSuPHSdJ0gNtdHNrNWUYkkHoIo=)
2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:aa:69:bb:32:5d:0d:0d:3a:7d:79:38:fd:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=30fe94c7cfc8d02e155a1bf18fc2c318cc2d6806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:98:58:93:e4:0e:4f:60:de:4a:be:6a:fc:
05:0b:e4:dd:17:41:e4:80:eb:75:8b:70:6c:ad:74:
59:a6:2e:3a:a6:e2:39:58:f6:24:89:27:81:aa:51:
99:02:a0:39:91:21:14:61:a3:6f:6d:68:0c:b9:5b:
2d:07:13:e2:c3:ef:e8:64:20:c8:87:f7:a7:bc:62:
f5:28:f6:96:59:67:aa:dc:70:d3:13:a0:87:8a:53:
51:15:44:09:ba:92:25:bf:56:28:b6:ef:bb:9e:a6:
49:fd:f0:78:02:0f:76:f6:02:15:1f:e7:95:89:f3:
4b:9f:d7:94:c4:e1:0f:e3:42:9d:50:19:a6:1f:c0:
de:f5:5b:cc:06:c9:1d:cd:67:2e:6d:1b:89:ac:55:
1f:83:72:d9:c9:78:d5:44:b4:b0:ab:d6:76:7d:c1:
bf:a9:23:0b:21:b7:8c:12:61:8a:e2:4e:fb:23:b8:
73:9d:cd:4b:5d:cb:f9:ab:d9:00:1b:5c:d2:f6:d2:
86:33:c4:4d:1f:51:cb:15:d9:56:fe:68:75:7a:7c:
a5:99:91:e1:25:df:89:b4:2f:00:06:ab:2a:39:0a:
8c:44:20:95:9f:f0:52:87:a5:f8:43:7d:3c:f4:62:
c2:e8:0a:7b:b4:8e:b9:88:a3:89:05:46:39:c5:1f:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FE:94:C7:CF:C8:D0:2E:15:5A:1B:F1:8F:C2:C3:18:CC:2D:68:06
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c6:09:87:64:ef:c1:0a:38:a6:a1:8c:17:89:6a:7a:26:f9:
d4:b5:89:37:ca:77:7e:51:a4:f5:8f:bc:68:64:dd:c3:dc:87:
8c:1f:32:63:84:5b:54:9f:47:ad:d8:10:a6:fa:79:7c:fe:7a:
3c:55:a7:f6:3c:a6:47:71:97:00:c1:b4:dd:f7:01:d5:95:6b:
37:d6:b6:86:86:e8:86:b3:c7:35:ce:b8:a1:b5:25:6a:c9:14:
5f:a6:47:a0:cd:24:75:e6:f1:cf:b3:cd:9b:4a:44:71:ea:92:
62:df:74:ae:3a:14:76:02:96:8d:71:76:3c:5d:ee:a1:c8:67:
44:ed:f2:36:60:88:bb:3f:e4:77:05:89:b7:63:8d:e6:09:8e:
b2:7b:e7:e2:7c:1a:f3:fd:d6:ea:a4:de:2f:10:09:6c:03:5e:
84:82:79:81:3e:d2:5d:89:9d:c9:b1:92:1f:28:a3:e9:ee:0d:
bc:99:be:c8:e9:f9:d0:43:c6:d2:50:07:ab:29:47:2e:99:aa:
c7:cb:b3:59:e0:1e:ab:8a:f5:de:78:89:dc:9f:7e:40:c8:4a:
26:d4:32:8c:f0:52:ee:41:54:88:26:83:e3:b1:87:f2:99:2e:
a0:7e:28:08:2b:6c:e8:9a:21:27:a9:a6:f6:1f:93:f4:6d:34:
96:61:fc:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKppuzJdDQ06fXk4/VBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTI3MzY4MjA2ZTNlOWE1OTI0MDgxZGY2Mzg4MDI0NmU1
YzU0MWEwHhcNMjUwMTMxMTIwMTE5WhcNMjUwMjAxMTIwMTE5WjAzMTEwLwYDVQQD
EygzMGZlOTRjN2NmYzhkMDJlMTU1YTFiZjE4ZmMyYzMxOGNjMmQ2ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PqYWJPkDk9g3kq+avwFC+TdF0Hk
gOt1i3BsrXRZpi46puI5WPYkiSeBqlGZAqA5kSEUYaNvbWgMuVstBxPiw+/oZCDI
h/envGL1KPaWWWeq3HDTE6CHilNRFUQJupIlv1Yotu+7nqZJ/fB4Ag929gIVH+eV
ifNLn9eUxOEP40KdUBmmH8De9VvMBskdzWcubRuJrFUfg3LZyXjVRLSwq9Z2fcG/
qSMLIbeMEmGK4k77I7hznc1LXcv5q9kAG1zS9tKGM8RNH1HLFdlW/mh1enylmZHh
Jd+JtC8ABqsqOQqMRCCVn/BSh6X4Q3089GLC6Ap7tI65iKOJBUY5xR/lTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD+lMfPyNAuFVob8Y/CwxjMLWgGMB8GA1UdIwQY
MBaAFNlSc2ggbj6aWSQIHfY4gCRuXFQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMt
MTk2MjA2MTU1NzliLzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMtMTk2MjA2MTU1Nzli
LzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8YJh2Tv
wQo4pqGMF4lqeib51LWJN8p3flGk9Y+8aGTdw9yHjB8yY4RbVJ9HrdgQpvp5fP56
PFWn9jymR3GXAMG03fcB1ZVrN9a2hobohrPHNc64obUlaskUX6ZHoM0kdebxz7PN
m0pEceqSYt90rjoUdgKWjXF2PF3uochnRO3yNmCIuz/kdwWJt2ON5gmOsnvn4nwa
8/3W6qTeLxAJbANehIJ5gT7SXYmdybGSHyij6e4NvJm+yOn50EPG0lAHqylHLpmq
x8uzWeAeq4r13niJ3J9+QMhKJtQyjPBS7kFUiCaD47GH8pkuoH4oCCts6JohJ6mm
9h+T9G00lmH87A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:29 2025 by rpki-client