Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.mft
File: vWEeHKvg21ZDpdKUUWD0XthKgHo.mft (raw, json)
Hash identifier: Jjw4i+0T+hGdvf2w7oa5xA3230SyBg1A/YNVPCfoLyA=
Subject key identifier: 9F:52:6F:B6:9A:CD:95:65:F8:5C:E7:67:9A:F9:95:B9:6E:5F:29:BE
Authority key identifier: BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
Certificate issuer: /CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Certificate serial: 019524F25482F40F97B6DA896138F06A33E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.mft
Manifest number: 0166
Signing time: Thu 20 Feb 2025 20:00:15 +0000
Manifest this update: Thu 20 Feb 2025 20:00:15 +0000
Manifest next update: Fri 21 Feb 2025 20:00:15 +0000
Files and hashes: 1: G2f4CqCIPzvHM2D-nOyqsiq937U.roa (hash: V3gXMHQ+s5QfkbINKX1K3jPIckZsWQXdKW/G0Ho8nhc=)
2: iWxLCOsNX0nATWzasVTqchH4wlQ.roa (hash: OsbOZl7xbR2CKYe2B8D1WX/8jD2waa+DZ+ngM3yRSZk=)
3: rNz98diYbuT8xowwxzTzSsYkYYs.roa (hash: dhP2lEJP+/86iE+yXaaW1AMpAdTQWEMHNsHUaWhX+2o=)
4: vWEeHKvg21ZDpdKUUWD0XthKgHo.crl (hash: gjfpyXJzLRCpM7MLuR/K0xr3AwKhT68MSFpmq0FPxfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:f2:54:82:f4:0f:97:b6:da:89:61:38:f0:6a:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Validity
Not Before: Feb 20 20:00:15 2025 GMT
Not After : Feb 21 20:00:15 2025 GMT
Subject: CN=9f526fb69acd9565f85ce7679af995b96e5f29be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:65:c7:de:c2:41:9e:a8:6f:47:6a:7b:45:
38:49:34:ae:56:6f:31:8c:17:99:0c:76:63:d2:f2:
61:23:d3:d5:7b:b4:93:1a:38:28:e0:07:a1:59:46:
10:41:67:9f:6a:1b:97:f3:e4:07:1f:08:57:89:06:
58:09:82:76:25:a0:0d:2d:e3:92:75:bb:2e:99:f0:
43:a6:89:59:e9:f2:43:f8:77:2c:e5:af:6b:14:a4:
a2:24:f1:28:e5:00:29:c3:3a:dc:72:d6:48:53:c0:
74:53:6b:d9:95:60:93:a7:d2:6b:3f:51:58:ce:5a:
4e:59:56:14:f1:09:76:44:e2:86:4b:7d:06:22:b8:
6f:b7:b9:4d:af:ed:bd:f7:f9:ec:94:ac:74:55:e4:
49:37:3a:b9:bd:96:ea:5c:34:f9:bf:7c:11:d3:ab:
df:65:f9:52:38:42:2d:2c:c4:31:f0:e3:93:cf:12:
72:5a:60:2c:79:8f:58:27:aa:f4:9c:22:f0:92:42:
6a:86:66:e6:1d:b7:09:5b:a5:de:90:f6:dc:80:db:
78:3b:b8:52:8f:e6:de:cb:3e:16:8e:47:df:80:84:
74:c8:21:75:88:6c:7e:01:bc:84:10:56:5d:7a:17:
e4:88:f9:e7:7e:1f:54:92:33:6e:59:01:7e:c5:7c:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:6F:B6:9A:CD:95:65:F8:5C:E7:67:9A:F9:95:B9:6E:5F:29:BE
X509v3 Authority Key Identifier:
keyid:BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:39:ed:66:60:73:ac:78:33:ad:e7:56:78:cc:3c:ee:0d:48:
c8:fd:bd:4d:a6:80:cb:a2:e4:14:2d:51:c6:6f:17:26:61:90:
c5:99:53:cd:c6:5c:2a:64:2d:4a:e2:fe:8c:d2:f2:9c:53:70:
a8:40:89:bf:3f:e2:bc:fa:8b:b8:99:db:b0:93:1d:b8:77:31:
8f:c6:83:c4:17:9d:ad:c4:b7:21:36:fe:d0:a0:f3:04:dd:d0:
bb:ac:2e:d5:29:08:d1:26:53:24:50:ba:23:98:00:84:90:3a:
60:8a:67:ce:5b:1c:30:bd:ab:2a:7e:73:f2:84:8f:d5:f3:26:
6c:e3:12:10:4c:c4:23:c8:b3:fd:fd:36:dd:62:33:19:b4:9e:
42:0c:a9:da:fe:a7:9e:14:49:d6:96:2d:8e:28:65:8d:6c:16:
e3:91:2b:d8:25:10:db:86:85:19:34:2c:15:da:48:a2:3f:32:
89:25:e6:0f:84:9b:7d:ce:63:ea:ac:69:41:51:a7:ea:e0:2b:
83:da:ac:59:e7:76:a9:0f:63:b6:e4:ac:a9:d6:6e:2b:34:ed:
51:55:d1:2f:7a:e6:6b:85:97:77:1a:71:57:e4:09:80:12:7e:
17:d3:70:50:8a:a6:c9:c5:9c:a9:f4:13:b2:e3:82:e0:c5:3f:
c0:cf:a8:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUk8lSC9A+XttqJYTjwajPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjExZTFjYWJlMGRiNTY0M2E1ZDI5NDUxNjBmNDVlZDg0
YTgwN2EwHhcNMjUwMjIwMjAwMDE1WhcNMjUwMjIxMjAwMDE1WjAzMTEwLwYDVQQD
Eyg5ZjUyNmZiNjlhY2Q5NTY1Zjg1Y2U3Njc5YWY5OTViOTZlNWYyOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymNlx97CQZ6ob0dqe0U4STSuVm8x
jBeZDHZj0vJhI9PVe7STGjgo4AehWUYQQWefahuX8+QHHwhXiQZYCYJ2JaANLeOS
dbsumfBDpolZ6fJD+Hcs5a9rFKSiJPEo5QApwzrcctZIU8B0U2vZlWCTp9JrP1FY
zlpOWVYU8Ql2ROKGS30GIrhvt7lNr+299/nslKx0VeRJNzq5vZbqXDT5v3wR06vf
ZflSOEItLMQx8OOTzxJyWmAseY9YJ6r0nCLwkkJqhmbmHbcJW6XekPbcgNt4O7hS
j+beyz4WjkffgIR0yCF1iGx+AbyEEFZdehfkiPnnfh9UkjNuWQF+xXwfkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Sb7aazZVl+FznZ5r5lbluXym+MB8GA1UdIwQY
MBaAFL1hHhyr4NtWQ6XSlFFg9F7YSoB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82Y2JmNzAtZmU4Zi00OGM5LTlkZTUt
NTJjZmU2Y2M5MWUzLzEvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82Y2JmNzAtZmU4Zi00OGM5LTlkZTUtNTJjZmU2Y2M5MWUz
LzEvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzntZmBz
rHgzredWeMw87g1IyP29TaaAy6LkFC1Rxm8XJmGQxZlTzcZcKmQtSuL+jNLynFNw
qECJvz/ivPqLuJnbsJMduHcxj8aDxBedrcS3ITb+0KDzBN3Qu6wu1SkI0SZTJFC6
I5gAhJA6YIpnzlscML2rKn5z8oSP1fMmbOMSEEzEI8iz/f023WIzGbSeQgyp2v6n
nhRJ1pYtjihljWwW45Er2CUQ24aFGTQsFdpIoj8yiSXmD4Sbfc5j6qxpQVGn6uAr
g9qsWed2qQ9jtuSsqdZuKzTtUVXRL3rma4WXdxpxV+QJgBJ+F9NwUIqmycWcqfQT
suOC4MU/wM+o0g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:44 2025 by rpki-client