Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: O+Z1edgj0BoEdxngZbElAl3bKmXGVlx41tExLlEEoRM=
Subject key identifier: F2:CC:2D:FD:A3:6B:27:30:0D:64:6B:E0:05:D9:EB:B8:5F:46:44:17
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 0194BD4E5433B39698CE5D902E2D8F0040C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0539
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: BNmXUP6ntJsAcoaMIgdkW2QwxXRW1mVt+E9g0DKfOXI=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:33:b3:96:98:ce:5d:90:2e:2d:8f:00:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=f2cc2dfda36b27300d646be005d9ebb85f464417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:82:3a:d7:fe:90:87:c9:81:31:cd:6b:da:
eb:4c:cf:d1:61:80:c9:15:a6:48:6e:28:15:15:a7:
0c:41:e8:be:cf:7c:8a:cf:63:92:10:69:39:fb:3d:
8a:f6:82:9b:69:72:21:a1:c6:70:3e:ca:7f:dc:3e:
dd:dc:1e:95:bf:67:f2:9b:a5:f3:b7:de:13:7e:55:
e9:9f:42:38:d6:f5:9e:c8:bc:96:31:e4:ed:78:56:
24:fa:09:d4:8f:10:71:41:b0:b6:47:9d:31:1b:8f:
3b:54:db:aa:1b:ee:2e:8d:09:fc:fc:63:5e:a1:61:
77:29:d0:27:a3:83:9b:42:34:08:a3:9c:ac:30:16:
f8:e3:2a:7d:2c:31:c5:61:3e:34:ae:92:8a:c2:4b:
26:45:b8:f9:e2:fe:4c:e7:93:e3:f4:6e:5f:c1:d0:
a6:6a:cf:62:7a:8a:59:67:d9:36:f8:5b:57:54:90:
e4:b1:83:21:57:11:c4:9b:bc:38:4c:fb:e0:4a:92:
a1:ba:0e:00:3b:2c:6f:39:5e:c7:1f:e0:5a:61:62:
41:18:1e:03:d6:7a:7a:04:6f:e4:a5:9f:81:6a:7b:
02:6a:c5:d4:7e:9a:14:6a:1e:fd:ab:26:18:a7:7e:
08:dd:20:59:6f:9a:c7:b2:3c:e5:20:fb:d4:58:a6:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:2D:FD:A3:6B:27:30:0D:64:6B:E0:05:D9:EB:B8:5F:46:44:17
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:04:ab:85:8c:fe:3b:09:9c:42:48:e2:97:c6:4d:62:5a:
3f:70:cb:2c:fa:09:b2:ff:52:18:9b:c9:be:7a:62:c3:3a:5a:
fb:38:55:15:55:e8:32:c6:81:ad:04:4f:f4:3b:20:bc:2b:73:
db:f3:3b:2b:6b:84:3f:ae:27:e2:c8:ef:9c:fe:60:08:84:15:
f0:67:d3:0c:63:cd:1c:b7:bb:d4:ab:47:1c:0b:8b:1e:ef:fe:
ce:22:9f:23:cd:2d:49:d9:14:4e:54:5f:c2:1c:a5:54:65:b6:
66:46:89:a8:36:bb:aa:78:87:84:94:ab:b8:83:3e:26:55:bf:
af:1a:73:ff:9c:77:33:98:df:92:d9:79:ba:e1:58:0c:88:1e:
66:4f:35:ff:3b:a3:9f:23:37:ae:a9:25:36:4e:19:bb:60:5a:
fe:32:df:15:ff:ec:2b:38:a6:82:79:15:db:6c:60:99:b4:c9:
ad:ef:7c:84:22:cf:6f:86:fd:f0:3c:71:f5:c8:e5:6e:8d:a1:
c3:15:fc:dd:b6:4c:08:a2:8f:64:9c:ac:21:48:10:73:b3:5a:
f2:f7:94:41:d9:9f:ae:4a:62:4b:2c:96:ef:c1:a5:03:00:fe:
bb:a0:36:4b:51:76:24:55:aa:67:50:70:92:c0:e3:22:d9:d2:
50:9c:a1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlQzs5aYzl2QLi2PAEDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi
ZDk3ZTQwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
EyhmMmNjMmRmZGEzNmIyNzMwMGQ2NDZiZTAwNWQ5ZWJiODVmNDY0NDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr86COtf+kIfJgTHNa9rrTM/RYYDJ
FaZIbigVFacMQei+z3yKz2OSEGk5+z2K9oKbaXIhocZwPsp/3D7d3B6Vv2fym6Xz
t94TflXpn0I41vWeyLyWMeTteFYk+gnUjxBxQbC2R50xG487VNuqG+4ujQn8/GNe
oWF3KdAno4ObQjQIo5ysMBb44yp9LDHFYT40rpKKwksmRbj54v5M55Pj9G5fwdCm
as9ieopZZ9k2+FtXVJDksYMhVxHEm7w4TPvgSpKhug4AOyxvOV7HH+BaYWJBGB4D
1np6BG/kpZ+BansCasXUfpoUah79qyYYp34I3SBZb5rHsjzlIPvUWKY9fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLMLf2jaycwDWRr4AXZ67hfRkQXMB8GA1UdIwQY
MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct
NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi
LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUYEq4WM
/jsJnEJI4pfGTWJaP3DLLPoJsv9SGJvJvnpiwzpa+zhVFVXoMsaBrQRP9DsgvCtz
2/M7K2uEP64n4sjvnP5gCIQV8GfTDGPNHLe71KtHHAuLHu/+ziKfI80tSdkUTlRf
whylVGW2ZkaJqDa7qniHhJSruIM+JlW/rxpz/5x3M5jfktl5uuFYDIgeZk81/zuj
nyM3rqklNk4Zu2Ba/jLfFf/sKzimgnkV22xgmbTJre98hCLPb4b98Dxx9cjlbo2h
wxX83bZMCKKPZJysIUgQc7Na8veUQdmfrkpiSyyW78GlAwD+u6A2S1F2JFWqZ1Bw
ksDjItnSUJyhVw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:05 2025 by rpki-client