Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: xRDgYzOJBIyi/J7258P0AoEamqcGWkX1MpY3MRaxNXc=
Subject key identifier: 5B:59:A0:63:6C:46:63:A4:8C:CC:1F:68:25:E6:77:A1:54:FB:0C:F2
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 0194BCA9C4EED3E71C0214D37DA66AC287B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 0F32
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: 6PtZzF5IJXQ++iIoWMjetYTboG9rpECZzJHcbdLsuUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:ee:d3:e7:1c:02:14:d3:7d:a6:6a:c2:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=5b59a0636c4663a48ccc1f6825e677a154fb0cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:6b:13:ed:fa:2b:ee:c0:5d:f4:b5:80:72:
46:47:13:12:73:19:3e:1f:2e:a3:13:e8:0d:23:0f:
93:ba:35:51:92:0c:3a:14:3c:18:70:7d:f7:b1:26:
5c:8e:2b:9c:c4:2f:ec:e9:fa:1c:b5:22:f1:a2:7f:
fe:98:f4:39:90:64:7f:12:95:36:fc:c2:3c:e0:1c:
77:16:31:48:be:27:7c:2c:6b:c8:52:12:21:74:38:
9a:3f:cb:19:d2:03:0c:77:80:e6:66:13:87:28:cc:
39:8f:80:a5:1b:41:ee:61:75:ab:72:39:33:7b:7d:
b4:de:cd:03:56:61:89:62:10:9d:76:2a:42:f4:5a:
11:b2:98:6d:7f:4b:74:76:6b:5b:5b:88:7e:8b:a7:
05:32:ac:e9:a0:11:0c:da:fd:f6:04:b3:2a:43:88:
12:8f:12:8f:c9:72:b7:58:19:2c:75:c4:d9:b0:85:
a5:95:0f:82:7f:ff:f8:36:9c:76:9a:09:4f:23:d4:
86:f2:c5:d5:75:6c:4f:e6:50:cc:48:3d:90:29:1e:
8e:a2:39:69:71:9e:64:cd:2e:69:70:67:92:4d:c1:
9f:ec:16:9d:2f:c9:7a:c2:2f:5a:76:5f:c6:ed:57:
0f:ed:6d:06:d7:37:0e:e3:54:9c:4f:ec:76:5e:26:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:A0:63:6C:46:63:A4:8C:CC:1F:68:25:E6:77:A1:54:FB:0C:F2
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:87:24:4c:f8:2f:5e:d7:69:14:ea:7e:2c:30:6e:b9:2b:
82:a8:e8:4a:0d:c2:62:8b:b2:c9:ed:94:2d:61:d2:6d:4b:c3:
b7:36:d0:0b:bc:a8:c3:9f:13:3b:34:04:e9:53:d0:e2:ff:b3:
4f:c1:eb:12:5b:18:e2:9f:d9:7b:66:cb:33:a7:90:54:5f:65:
1c:0d:e9:1e:2e:73:56:03:7c:b6:d5:e5:66:cd:77:47:98:80:
8f:73:5b:63:c0:32:db:b0:9d:c9:3c:1b:55:03:85:9a:93:d3:
13:0d:b8:1b:2d:d6:62:0a:2a:f6:46:42:eb:99:75:a7:d6:86:
bd:da:e2:24:e9:32:01:0b:21:d7:26:f4:26:bf:d5:3f:7e:2c:
f1:bf:59:d6:8c:d7:59:fc:48:bb:b0:9e:06:03:11:92:32:95:
4d:2d:48:2a:18:45:10:a0:b3:3e:88:66:3f:ab:62:5b:c3:0a:
80:f2:a6:b4:29:fc:35:19:1f:59:8e:12:f5:f0:64:45:6b:14:
46:5b:4c:ca:15:01:eb:37:ce:2a:6c:90:49:4f:c9:8a:f2:1b:
bd:1a:4a:30:04:41:67:29:0d:15:f2:9f:cc:8e:cb:cc:e4:0c:
82:b3:c5:c4:1d:eb:8a:63:87:d4:e9:c1:e6:da:e8:14:2a:ed:
9a:1e:60:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcTu0+ccAhTTfaZqwoeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh
NGI2ZDkwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
Eyg1YjU5YTA2MzZjNDY2M2E0OGNjYzFmNjgyNWU2NzdhMTU0ZmIwY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBJrE+36K+7AXfS1gHJGRxMScxk+
Hy6jE+gNIw+TujVRkgw6FDwYcH33sSZcjiucxC/s6foctSLxon/+mPQ5kGR/EpU2
/MI84Bx3FjFIvid8LGvIUhIhdDiaP8sZ0gMMd4DmZhOHKMw5j4ClG0HuYXWrcjkz
e3203s0DVmGJYhCddipC9FoRsphtf0t0dmtbW4h+i6cFMqzpoBEM2v32BLMqQ4gS
jxKPyXK3WBksdcTZsIWllQ+Cf//4Npx2mglPI9SG8sXVdWxP5lDMSD2QKR6Oojlp
cZ5kzS5pcGeSTcGf7BadL8l6wi9adl/G7VcP7W0G1zcO41ScT+x2Xia+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtZoGNsRmOkjMwfaCXmd6FU+wzyMB8GA1UdIwQY
MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt
OWYwMGM3MjYyMGY2LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2
LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWmHJEz4
L17XaRTqfiwwbrkrgqjoSg3CYouyye2ULWHSbUvDtzbQC7yow58TOzQE6VPQ4v+z
T8HrElsY4p/Ze2bLM6eQVF9lHA3pHi5zVgN8ttXlZs13R5iAj3NbY8Ay27CdyTwb
VQOFmpPTEw24Gy3WYgoq9kZC65l1p9aGvdriJOkyAQsh1yb0Jr/VP34s8b9Z1ozX
WfxIu7CeBgMRkjKVTS1IKhhFEKCzPohmP6tiW8MKgPKmtCn8NRkfWY4S9fBkRWsU
RltMyhUB6zfOKmyQSU/JivIbvRpKMARBZykNFfKfzI7LzOQMgrPFxB3rimOH1OnB
5troFCrtmh5gEA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client