Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.mft
File: vPwSxJnOscYSBGJTJvAO2ntSV9A.mft (raw, json)
Hash identifier: CVIbkrxQMWlmojv9QmcjvdLmlYOlNU3TZwrd0tZP3XY=
Subject key identifier: 17:48:10:28:3C:88:25:51:39:49:83:63:D4:93:A0:8C:0F:1B:B0:3E
Authority key identifier: BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
Certificate issuer: /CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Certificate serial: 0188E2F0C0186B89AB5D0ED9DAFE65ADF6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.mft
Manifest number: 07C8
Signing time: Thu 22 Jun 2023 11:50:08 +0000
Manifest this update: Thu 22 Jun 2023 11:50:08 +0000
Manifest next update: Fri 23 Jun 2023 11:50:08 +0000
Files and hashes: 1: mRYiXco0yzWOj8xgbAc1R5D1B_Y.roa (hash: QGQBzQw8tI7IQ0ysvVGKLEJwY9qLBMQI0p/WhF3JttY=)
2: vPwSxJnOscYSBGJTJvAO2ntSV9A.crl (hash: 4Uo1MSRooI+ThzWJt7pS71tnlf5P+r4W/O2c9paW5Zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:f0:c0:18:6b:89:ab:5d:0e:d9:da:fe:65:ad:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Validity
Not Before: Jun 22 11:50:08 2023 GMT
Not After : Jun 23 11:50:08 2023 GMT
Subject: CN=174810283c88255139498363d493a08c0f1bb03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:b8:d8:ee:8d:fe:bb:ea:6d:bb:f7:0c:53:
62:66:d3:ec:23:31:72:bf:39:e8:9c:70:dd:b2:25:
ec:17:79:27:45:53:08:81:68:4e:92:cb:e1:d8:89:
6e:29:c7:25:30:bf:e9:db:e0:57:4b:d3:34:f3:41:
ae:da:b9:c9:33:c9:a6:2c:a5:ca:7e:0a:ec:ad:76:
e6:6e:82:3f:19:f2:cb:1e:84:7a:0d:06:87:5e:e1:
52:7a:15:88:57:db:69:ea:3c:5a:41:c4:47:65:3e:
a6:e8:e4:4f:0c:ea:21:c2:c4:5e:9f:e4:61:3e:6e:
8c:81:20:b8:2d:fb:a3:9c:da:58:9e:8b:88:4b:28:
25:02:62:ab:99:9c:d6:d4:c8:2f:8d:66:44:d2:dc:
48:3a:56:38:11:e9:9a:ac:b7:d3:20:56:71:7c:46:
e7:cb:22:19:21:43:f5:09:1b:b9:69:2e:15:ad:7f:
db:d6:5e:8f:7f:52:4a:fa:63:f7:e4:23:81:bc:f3:
8b:40:6d:ca:e1:cf:44:a9:75:c0:2f:66:a6:f6:5d:
36:61:96:b7:fd:8b:33:49:12:b4:52:c4:d8:a3:03:
c7:4a:df:df:3c:e6:ec:ac:ef:1e:e9:bb:c1:8d:f1:
3a:e3:5b:43:cc:c5:87:90:ec:cf:db:dd:e7:11:50:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:10:28:3C:88:25:51:39:49:83:63:D4:93:A0:8C:0F:1B:B0:3E
X509v3 Authority Key Identifier:
keyid:BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a1:fb:1c:e0:c9:54:87:f7:0c:6a:c3:ba:98:ac:2a:ca:23:
cb:3a:f4:c5:71:61:c5:9e:e7:65:9c:d9:50:04:9d:cc:0a:a1:
1d:36:7d:5d:ba:3d:a1:c7:c3:17:2f:19:12:a0:c7:fc:3d:4b:
4f:46:b9:8c:4f:8c:8c:bf:f2:65:94:02:2f:c0:44:5a:5a:53:
9a:c0:a1:90:a8:f2:1f:53:00:08:f9:8e:2f:06:93:d6:43:fa:
b5:9b:49:9b:87:03:92:c1:b7:58:7a:15:6e:f1:d9:63:58:6f:
0c:36:9b:96:6e:63:32:65:86:bb:42:96:be:14:5e:83:2f:9e:
fa:db:da:a2:d6:46:30:61:9f:85:7e:f8:37:b4:a7:27:d8:2a:
7d:cf:33:d5:cf:62:eb:8e:29:e2:af:02:12:3a:9c:6f:87:7b:
d3:57:c6:3f:c1:02:fc:07:ab:ac:d9:c4:c1:bb:1e:06:bc:7f:
41:fd:a8:9f:ba:14:76:2c:88:74:02:cd:ee:82:2b:ba:78:9d:
f8:b2:ed:93:e3:ca:2e:f8:59:e6:08:75:0b:fd:0d:ed:44:73:
3e:4c:3e:f7:89:2d:08:66:4b:1d:eb:c2:81:e8:da:d9:cb:ec:
09:68:26:f0:7a:89:86:bb:2a:54:1a:32:80:35:bc:f0:3c:aa:
38:5e:b3:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYji8MAYa4mrXQ7Z2v5lrfa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmMxMmM0OTljZWIxYzYxMjA0NjI1MzI2ZjAwZWRhN2I1
MjU3ZDAwHhcNMjMwNjIyMTE1MDA4WhcNMjMwNjIzMTE1MDA4WjAzMTEwLwYDVQQD
EygxNzQ4MTAyODNjODgyNTUxMzk0OTgzNjNkNDkzYTA4YzBmMWJiMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO242O6N/rvqbbv3DFNiZtPsIzFy
vznonHDdsiXsF3knRVMIgWhOksvh2IluKcclML/p2+BXS9M080Gu2rnJM8mmLKXK
fgrsrXbmboI/GfLLHoR6DQaHXuFSehWIV9tp6jxaQcRHZT6m6ORPDOohwsRen+Rh
Pm6MgSC4LfujnNpYnouISyglAmKrmZzW1MgvjWZE0txIOlY4EemarLfTIFZxfEbn
yyIZIUP1CRu5aS4VrX/b1l6Pf1JK+mP35COBvPOLQG3K4c9EqXXAL2am9l02YZa3
/YszSRK0UsTYowPHSt/fPObsrO8e6bvBjfE641tDzMWHkOzP293nEVCvuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdIECg8iCVROUmDY9SToIwPG7A+MB8GA1UdIwQY
MBaAFLz8EsSZzrHGEgRiUybwDtp7UlfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlB3U3hKbk9zY1lTQkdKVEp2QU8ybnRTVjlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82MGI0NTgtMTMxZC00NTgxLWE4NDAt
NmMwM2ZkYmQ4ZDE3LzEvdlB3U3hKbk9zY1lTQkdKVEp2QU8ybnRTVjlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82MGI0NTgtMTMxZC00NTgxLWE4NDAtNmMwM2ZkYmQ4ZDE3
LzEvdlB3U3hKbk9zY1lTQkdKVEp2QU8ybnRTVjlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaH7HODJ
VIf3DGrDupisKsojyzr0xXFhxZ7nZZzZUASdzAqhHTZ9Xbo9ocfDFy8ZEqDH/D1L
T0a5jE+MjL/yZZQCL8BEWlpTmsChkKjyH1MACPmOLwaT1kP6tZtJm4cDksG3WHoV
bvHZY1hvDDablm5jMmWGu0KWvhRegy+e+tvaotZGMGGfhX74N7SnJ9gqfc8z1c9i
644p4q8CEjqcb4d701fGP8EC/AerrNnEwbseBrx/Qf2on7oUdiyIdALN7oIrunid
+LLtk+PKLvhZ5gh1C/0N7URzPkw+94ktCGZLHevCgeja2cvsCWgm8HqJhrsqVBoy
gDW88DyqOF6zBA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 23:45:34 2025 by rpki-client