Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File: VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier: cXUcCPEZ7mHYwyb+Il6ii62RdZo9EGw23HzZ7X6bYms=
Subject key identifier: 36:FA:BA:F9:52:AC:6D:AD:B2:2B:FB:BC:C3:3F:0B:E4:90:4E:79:DE
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer: /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial: 0194BC3C43EAC8DC5EA3DA46B9468A5765AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number: 0894
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: TSpEAuz6bW/IiEClxDf/5cb2bTrQWKGmgBo3/IEjUUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:ea:c8:dc:5e:a3:da:46:b9:46:8a:57:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=36fabaf952ac6dadb22bfbbcc33f0be4904e79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:eb:54:13:0e:40:bc:d2:c0:50:ed:02:d3:
88:60:b9:48:bb:84:e9:b8:d4:0a:eb:65:e6:0a:0b:
ec:a7:6f:cc:cd:46:42:38:02:bc:78:47:bb:a4:d8:
b4:1d:4a:e6:bb:b6:64:c9:50:13:a9:89:bc:b6:b4:
fb:5b:89:bc:14:8f:32:35:05:af:8e:48:60:f3:6f:
28:8c:27:43:d4:db:18:90:96:43:f1:e4:06:3b:d3:
e4:e0:5f:12:58:9e:ec:bf:85:e2:cc:43:ed:5b:64:
9b:10:9b:89:cf:76:95:f8:21:c3:6d:5b:13:21:5f:
d5:48:5b:62:1d:57:22:dd:87:6e:23:37:d7:71:2c:
d7:a1:5f:57:37:1b:80:d4:69:dc:6c:d2:57:68:1f:
ee:32:5f:c1:2f:17:3e:00:cc:1c:00:8d:51:1f:72:
01:f8:29:b3:c5:fa:99:32:34:85:b5:8b:39:12:34:
b1:99:37:44:e7:c7:c1:f6:65:0f:79:0f:d0:10:2b:
fb:3e:e0:d4:9a:ba:69:88:61:bb:68:97:9c:f0:db:
f8:06:82:93:fb:c1:5c:f9:fb:4a:2e:f3:1e:ac:f0:
80:74:8b:ac:fd:7d:86:4a:13:37:68:c4:77:61:f3:
1d:00:59:c1:bf:ae:9d:9f:c7:2e:53:b0:ed:95:af:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:BA:F9:52:AC:6D:AD:B2:2B:FB:BC:C3:3F:0B:E4:90:4E:79:DE
X509v3 Authority Key Identifier:
keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:3e:62:80:46:cf:63:5a:c3:83:9f:64:68:76:8d:f9:02:
b9:df:d9:a3:74:04:2e:46:e8:4c:f7:af:55:2c:43:fa:e7:12:
4e:c5:63:4f:0b:64:28:a1:01:68:84:0e:3f:61:d2:14:b4:93:
05:e0:4c:41:b5:79:3a:c8:ad:6d:bf:88:8d:eb:56:aa:70:b1:
4d:60:49:72:fd:6a:88:ce:06:62:23:0c:9b:e8:8b:4f:1d:83:
ec:78:da:d2:80:dc:86:d9:eb:ee:24:75:f3:ce:c8:f9:62:cd:
4f:2f:2b:51:a0:74:9c:6b:38:67:5f:b3:70:9d:74:4b:80:63:
af:2c:b3:fb:e8:e6:79:b6:1c:91:95:61:56:ec:6f:03:f4:cc:
99:78:10:7a:81:07:28:b0:e5:1a:91:de:4a:db:9e:7b:8e:d3:
00:0a:3a:2a:4b:31:20:b4:92:2f:5d:0d:1a:9e:94:9c:e4:d0:
92:c4:b4:22:f3:6d:27:41:7e:67:6f:62:bd:6a:3b:71:eb:b4:
60:36:56:18:6e:99:37:6f:b9:c5:f3:e1:f1:70:ab:54:ec:8f:
45:67:d5:d3:95:41:72:62:df:be:b8:b8:eb:08:4a:70:c2:13:
58:24:1b:05:0e:24:68:47:8f:b0:6a:9f:e8:1e:a8:63:bf:f0:
a4:d7:e3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEPqyNxeo9pGuUaKV2WuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDlhYTAxNGU4Y2YzYmY3OTI0ZTc3NTg3ZDBhN2M4Y2Fh
MWM0OTcwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EygzNmZhYmFmOTUyYWM2ZGFkYjIyYmZiYmNjMzNmMGJlNDkwNGU3OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysnrVBMOQLzSwFDtAtOIYLlIu4Tp
uNQK62XmCgvsp2/MzUZCOAK8eEe7pNi0HUrmu7ZkyVATqYm8trT7W4m8FI8yNQWv
jkhg828ojCdD1NsYkJZD8eQGO9Pk4F8SWJ7sv4XizEPtW2SbEJuJz3aV+CHDbVsT
IV/VSFtiHVci3YduIzfXcSzXoV9XNxuA1GncbNJXaB/uMl/BLxc+AMwcAI1RH3IB
+CmzxfqZMjSFtYs5EjSxmTdE58fB9mUPeQ/QECv7PuDUmrppiGG7aJec8Nv4BoKT
+8Fc+ftKLvMerPCAdIus/X2GShM3aMR3YfMdAFnBv66dn8cuU7Dtla+d7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb6uvlSrG2tsiv7vMM/C+SQTnneMB8GA1UdIwQY
MBaAFFZJqgFOjPO/eSTndYfQp8jKocSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZDI5MDctMGE5Yy00ZTIzLWE4Zjgt
ZTg4NjBkYTEwMDM4LzEvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZDI5MDctMGE5Yy00ZTIzLWE4ZjgtZTg4NjBkYTEwMDM4
LzEvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/g+YoBG
z2Naw4OfZGh2jfkCud/Zo3QELkboTPevVSxD+ucSTsVjTwtkKKEBaIQOP2HSFLST
BeBMQbV5Ositbb+IjetWqnCxTWBJcv1qiM4GYiMMm+iLTx2D7Hja0oDchtnr7iR1
887I+WLNTy8rUaB0nGs4Z1+zcJ10S4Bjryyz++jmebYckZVhVuxvA/TMmXgQeoEH
KLDlGpHeStuee47TAAo6KksxILSSL10NGp6UnOTQksS0IvNtJ0F+Z29ivWo7ceu0
YDZWGG6ZN2+5xfPh8XCrVOyPRWfV05VBcmLfvri46whKcMITWCQbBQ4kaEePsGqf
6B6oY7/wpNfjGA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:10 2025 by rpki-client