Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File: VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier: OkMme6JfU2kwUItl3y5oHPdya7o1XIz169nOR0Dif4o=
Subject key identifier: 53:CF:32:49:BC:24:40:A3:1D:FB:7A:C2:46:09:C9:49:07:5D:20:CD
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer: /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial: 0194BC3C4501AD8E99BD34BF94F7B8D0ABFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number: 0296
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: XBOtwgJLokvYd/LQUvi8XCsSeV535XaBIkp3JhtxA2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:01:ad:8e:99:bd:34:bf:94:f7:b8:d0:ab:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=53cf3249bc2440a31dfb7ac24609c949075d20cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:a2:15:a9:03:84:ec:3d:7b:df:9b:19:33:
d2:4f:f8:7c:03:a2:c3:26:0d:d2:21:2a:5f:61:6b:
87:d8:79:f6:ab:f0:5f:54:bf:49:d1:b1:2a:62:99:
b9:c0:ff:93:b4:27:2d:b4:70:46:24:02:c4:51:a1:
f3:b7:15:7a:e7:e1:d6:c2:3d:d3:a9:29:7c:cc:a4:
2b:39:83:c0:ce:bd:28:21:7c:95:61:20:2b:bd:f6:
73:7a:70:f0:81:75:0c:ba:bf:bb:ba:d6:b9:79:f1:
f1:a9:5a:2e:f8:bd:94:9e:29:50:20:c3:41:49:dd:
88:98:98:f6:b0:25:e6:29:95:84:af:2a:a2:9c:63:
4c:e3:44:18:11:56:59:39:9d:f7:86:33:33:e8:97:
82:d9:3f:ad:72:2b:ef:19:2b:fb:5f:6d:e9:69:f5:
0d:d9:87:2b:d5:95:c4:32:87:f9:ff:9f:9d:80:e3:
1e:88:60:c9:c8:97:94:4e:19:53:b8:0c:b3:66:88:
4d:d6:71:4c:d3:3f:0d:ea:97:39:df:c7:6a:c4:9d:
21:44:5f:29:11:e6:ea:ff:31:d4:37:7e:ab:c6:26:
96:a0:65:24:e8:f2:40:4f:5e:ff:5c:37:4e:f4:a0:
b9:e1:75:a4:ba:7c:e9:b2:67:0a:43:69:88:34:c8:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:32:49:BC:24:40:A3:1D:FB:7A:C2:46:09:C9:49:07:5D:20:CD
X509v3 Authority Key Identifier:
keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:87:f2:cf:6e:05:25:0b:95:2e:90:a1:68:ef:ce:b8:3f:
c3:8b:8c:7b:87:73:3a:4f:27:78:44:e8:2a:19:cc:40:c0:1c:
66:f4:1c:dd:92:d2:f6:71:b3:74:e2:5d:3f:8c:6f:ae:71:6b:
7c:fe:a0:e8:d4:c3:c9:30:9a:d8:06:f4:ab:50:75:0b:b2:aa:
eb:b1:ba:3a:fb:eb:62:66:10:fa:88:04:f6:8a:c9:c8:20:cc:
96:2e:ca:ba:a9:7c:25:e4:59:7b:6a:de:76:ae:3a:76:00:f9:
35:e6:ff:cc:e2:41:86:3a:06:d0:f8:07:f0:ea:a9:e4:68:c4:
6a:22:af:45:7c:95:6a:18:5c:aa:b8:e5:45:25:32:b2:0b:03:
7c:00:62:50:e2:97:c5:78:5b:24:02:b0:cf:a2:1b:0a:7a:d9:
c9:da:7d:91:46:18:2d:fc:72:d7:01:c6:96:cf:9d:2d:f8:98:
79:50:8d:c5:a7:1e:16:f4:ab:fc:1f:de:f1:fa:26:d1:dc:a0:
00:91:fa:6a:7a:98:2f:53:c2:ae:0c:6e:15:2a:c6:e0:eb:c4:
f5:9f:94:15:9f:f9:2f:53:a5:c4:86:01:72:b7:fe:82:c2:22:
28:cc:e8:b6:5d:95:cd:4e:87:96:48:c0:d5:bf:7c:82:2b:5c:
45:3f:d4:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEUBrY6ZvTS/lPe40Kv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Zjg2ODFlZmIyZmE5ZGNkNDhjN2M0ZmFmM2Q3OGMzYTFh
ZDJkZDEwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
Eyg1M2NmMzI0OWJjMjQ0MGEzMWRmYjdhYzI0NjA5Yzk0OTA3NWQyMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuriiFakDhOw9e9+bGTPST/h8A6LD
Jg3SISpfYWuH2Hn2q/BfVL9J0bEqYpm5wP+TtCcttHBGJALEUaHztxV65+HWwj3T
qSl8zKQrOYPAzr0oIXyVYSArvfZzenDwgXUMur+7uta5efHxqVou+L2UnilQIMNB
Sd2ImJj2sCXmKZWEryqinGNM40QYEVZZOZ33hjMz6JeC2T+tcivvGSv7X23pafUN
2Ycr1ZXEMof5/5+dgOMeiGDJyJeUThlTuAyzZohN1nFM0z8N6pc538dqxJ0hRF8p
Eebq/zHUN36rxiaWoGUk6PJAT17/XDdO9KC54XWkunzpsmcKQ2mINMiLLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPPMkm8JECjHft6wkYJyUkHXSDNMB8GA1UdIwQY
MBaAFFb4aB77L6nc1Ix8T689eMOhrS3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzkt
ODNhOTM1MTVjYTYzLzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzktODNhOTM1MTVjYTYz
LzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhGH8s9u
BSULlS6QoWjvzrg/w4uMe4dzOk8neEToKhnMQMAcZvQc3ZLS9nGzdOJdP4xvrnFr
fP6g6NTDyTCa2Ab0q1B1C7Kq67G6OvvrYmYQ+ogE9orJyCDMli7Kuql8JeRZe2re
dq46dgD5Neb/zOJBhjoG0PgH8Oqp5GjEaiKvRXyVahhcqrjlRSUysgsDfABiUOKX
xXhbJAKwz6IbCnrZydp9kUYYLfxy1wHGls+dLfiYeVCNxaceFvSr/B/e8fom0dyg
AJH6anqYL1PCrgxuFSrG4OvE9Z+UFZ/5L1OlxIYBcrf+gsIiKMzotl2VzU6HlkjA
1b98gitcRT/Ugg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:28 2025 by rpki-client