Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File: VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier: Dz929SMLeMwMk3aa3iSuCKj2OO+6VKZWTCoRoQWKW64=
Subject key identifier: 61:88:B3:C6:24:1D:16:78:1A:D5:E6:60:C7:46:C6:FC:72:76:57:52
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial: 0194BC04CC36C57CDB00514757316629E691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number: 109A
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: icVlmno23fuz9caMN8FCma/FcsWYhcmqylDqKwC2V9k=)
2: zAJ4z_rLfNTVDiMWL6ncN_yYa24.roa (hash: EtILhqnqDOPzVUQWUC5GlrRe7wnUPr/w8yX9c4PVZr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cc:36:c5:7c:db:00:51:47:57:31:66:29:e6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=6188b3c6241d16781ad5e660c746c6fc72765752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:af:d6:b2:9a:b6:aa:be:86:90:f8:45:3b:
56:25:ac:c6:8f:38:57:09:04:ef:17:8b:89:a5:ac:
80:e9:9e:e4:50:2a:99:b7:50:b9:d4:21:e2:30:d0:
79:c2:e6:67:a7:5e:5e:fa:8d:f5:37:37:92:98:53:
a4:62:04:12:eb:ae:0c:67:0d:0e:7a:0b:e4:f5:a5:
ef:a8:7a:ea:b7:3e:74:23:c7:1b:80:1d:02:da:5c:
60:f0:7d:c9:cd:b3:51:a4:f4:cb:50:50:cb:d2:d1:
a3:bc:c4:09:a2:11:e4:fe:0f:e3:14:f8:97:e2:50:
4a:59:e8:1f:72:ec:5b:08:81:2e:b3:4a:1b:ac:99:
36:7d:f4:57:42:1b:3a:ab:18:5c:03:14:f6:1c:48:
4f:17:0a:13:73:8a:9e:72:ee:24:08:a5:9a:48:32:
ef:f7:21:aa:af:c1:6f:6c:25:ba:f9:f1:c2:91:a4:
f2:b7:cb:d0:09:28:b4:5f:5a:c9:97:8e:4c:d2:1a:
fb:66:24:63:35:51:83:5e:5a:6d:b3:ee:54:6b:94:
bb:70:1b:99:4a:a0:8d:aa:4f:ec:e4:9f:e2:76:fe:
83:17:ef:13:fe:99:fb:4f:dc:5c:ec:79:62:5f:f8:
4b:2e:db:ff:34:57:5d:d6:30:65:69:67:5e:c1:c3:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:B3:C6:24:1D:16:78:1A:D5:E6:60:C7:46:C6:FC:72:76:57:52
X509v3 Authority Key Identifier:
keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:31:80:a2:6e:46:3f:4b:82:02:2c:34:71:49:c2:b9:b4:0f:
6b:31:08:df:77:08:e0:c7:6a:3d:ad:83:7a:e0:6d:cb:04:ec:
09:c6:26:ea:c5:51:5f:f2:8b:54:91:1c:2e:ac:4d:f1:74:e1:
f8:b3:6b:8d:42:09:26:40:1d:59:b0:f0:70:29:6f:eb:6f:87:
50:ac:ef:0f:fe:cd:55:13:2a:96:a9:b1:76:e3:66:3a:21:d0:
e7:d0:04:5d:68:99:ac:1d:7c:4d:dd:c8:0d:f3:8b:e8:b2:5e:
56:28:2e:e6:ed:19:92:0c:0e:f8:1d:26:6b:25:48:8e:dd:4a:
4d:c8:56:54:cc:78:6e:a1:5a:f1:99:85:a6:8b:d7:4d:25:8a:
6c:40:48:78:e0:0f:61:fa:f0:ea:14:1b:e6:73:6a:bc:3f:45:
41:e8:f5:87:b4:1a:d8:f8:f9:b8:4d:9f:90:ab:d5:dc:f4:94:
0e:34:8f:ef:e9:e3:01:e6:60:da:e3:b2:28:e5:97:84:40:71:
e7:c0:19:da:25:f1:2e:aa:47:91:d4:8b:f0:3f:62:ec:12:b7:
14:32:0c:e5:da:da:fb:3b:4b:a5:9c:72:66:d4:e1:d3:5b:52:
81:f0:ff:0d:44:d9:ae:0f:e6:27:d5:94:31:9a:1b:ce:a1:fb:
98:8c:5e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMw2xXzbAFFHVzFmKeaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTQzYmVlN2E3Y2NmNDc4MDJmNTVlYWU1NTdiYTVmY2Y5
Zjc5NWUwHhcNMjUwMTMxMTEwMDE4WhcNMjUwMjAxMTEwMDE4WjAzMTEwLwYDVQQD
Eyg2MTg4YjNjNjI0MWQxNjc4MWFkNWU2NjBjNzQ2YzZmYzcyNzY1NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycqv1rKatqq+hpD4RTtWJazGjzhX
CQTvF4uJpayA6Z7kUCqZt1C51CHiMNB5wuZnp15e+o31NzeSmFOkYgQS664MZw0O
egvk9aXvqHrqtz50I8cbgB0C2lxg8H3JzbNRpPTLUFDL0tGjvMQJohHk/g/jFPiX
4lBKWegfcuxbCIEus0obrJk2ffRXQhs6qxhcAxT2HEhPFwoTc4qecu4kCKWaSDLv
9yGqr8FvbCW6+fHCkaTyt8vQCSi0X1rJl45M0hr7ZiRjNVGDXlpts+5Ua5S7cBuZ
SqCNqk/s5J/idv6DF+8T/pn7T9xc7HliX/hLLtv/NFdd1jBlaWdewcOF+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGIs8YkHRZ4GtXmYMdGxvxydldSMB8GA1UdIwQY
MBaAFFQUO+56fM9HgC9V6uVXul/Pn3leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEt
Yjc1YjVmMzdkYjA5LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEtYjc1YjVmMzdkYjA5
LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjGAom5G
P0uCAiw0cUnCubQPazEI33cI4MdqPa2DeuBtywTsCcYm6sVRX/KLVJEcLqxN8XTh
+LNrjUIJJkAdWbDwcClv62+HUKzvD/7NVRMqlqmxduNmOiHQ59AEXWiZrB18Td3I
DfOL6LJeVigu5u0ZkgwO+B0mayVIjt1KTchWVMx4bqFa8ZmFpovXTSWKbEBIeOAP
Yfrw6hQb5nNqvD9FQej1h7Qa2Pj5uE2fkKvV3PSUDjSP7+njAeZg2uOyKOWXhEBx
58AZ2iXxLqpHkdSL8D9i7BK3FDIM5dra+ztLpZxyZtTh01tSgfD/DUTZrg/mJ9WU
MZobzqH7mIxe2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client