Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File: VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier: HmBOJ2U0blBMBHvJ3V+F2mwe2lv0YocwHQtKQdn0tM4=
Subject key identifier: CA:52:E2:B4:A4:83:0E:05:45:CA:E8:4D:83:D1:68:DF:9F:7F:49:BA
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 0197A575EF624217D1AB223FFFE9D18F3231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number: 149D
Signing time: Wed 25 Jun 2025 05:00:59 +0000
Manifest this update: Wed 25 Jun 2025 05:00:59 +0000
Manifest next update: Thu 26 Jun 2025 05:00:59 +0000
Files and hashes: 1: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: +WAFprryL6dzoAtUWhcPWjCx9rwUF3VTt6wop3nJBZM=)
2: lHEeEjAFgroJTrIY5QbVeDEWoOw.roa (hash: G19flkrxL/ZRMKit7ghVRFp+zXGRyFjawVYgeh3VOTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:75:ef:62:42:17:d1:ab:22:3f:ff:e9:d1:8f:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: Jun 25 05:00:59 2025 GMT
Not After : Jun 26 05:00:59 2025 GMT
Subject: CN=ca52e2b4a4830e0545cae84d83d168df9f7f49ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:13:68:be:c3:ae:81:d1:48:9d:85:66:79:
11:cd:c4:21:8b:a5:50:82:89:fe:90:a7:07:f1:3b:
11:71:0d:35:1d:94:5e:5e:49:00:02:0e:70:07:3d:
6c:aa:ee:59:48:d2:2e:af:eb:9d:3e:96:a3:e1:65:
1c:ac:e2:c3:e2:cb:68:91:cc:17:55:fa:d8:ca:58:
1b:79:2d:32:ad:71:33:41:0f:fe:60:9c:75:f8:a2:
ae:6f:d8:1f:67:a5:9d:9a:38:a5:50:90:2e:71:29:
34:3f:b2:a1:9f:9e:24:19:35:42:01:03:76:9e:74:
6f:10:d9:d0:ce:ac:b6:30:64:52:d2:95:0a:be:13:
50:6e:e2:31:7d:b4:54:52:6d:b2:1a:4b:18:12:4d:
36:8b:5c:04:b9:7b:ad:96:07:68:e0:8b:7c:25:2e:
6b:a1:fe:56:3b:4a:b3:bd:26:e0:28:4c:e7:63:fe:
09:e3:b1:91:b3:24:d4:6e:e3:d3:45:76:bc:f4:c7:
29:44:32:f0:34:fa:fe:6a:dd:15:40:09:5a:3a:88:
a5:bd:f8:5a:62:05:82:b8:81:2a:e4:cd:c7:be:43:
27:9d:8d:cb:d3:b8:0a:80:96:b8:13:be:f9:7a:df:
f8:e3:39:53:40:d0:02:d5:81:80:45:2e:cd:74:95:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:E2:B4:A4:83:0E:05:45:CA:E8:4D:83:D1:68:DF:9F:7F:49:BA
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3b:88:b1:e5:4b:08:f3:ae:48:d8:7d:5d:a8:52:b7:2d:a8:
93:58:3e:20:b7:1b:ac:37:78:7f:80:60:a3:02:aa:89:b3:c5:
cf:61:26:d2:69:c9:b6:7b:50:99:ad:f8:4b:cb:82:97:88:8d:
06:e5:a6:21:1a:f6:78:c0:2a:59:6f:3d:ff:3a:91:f1:18:c6:
a2:ff:d3:24:96:9e:1c:7c:6c:8f:63:b9:31:15:3b:e9:a7:e6:
55:72:c5:19:d3:9a:9d:2d:f8:c6:36:1c:76:b1:7b:a8:eb:ff:
83:8d:f9:20:e6:36:82:19:a5:4d:52:bd:91:9f:e3:b1:fa:62:
c6:7b:86:72:3d:3d:91:6d:71:3c:a0:6f:1d:74:cd:6a:8e:48:
79:04:58:e8:a8:d9:31:87:d4:a4:8b:e4:47:ed:99:7b:5c:0e:
0f:a3:45:3e:fb:8f:f7:2d:d4:ee:a0:9d:b7:d9:47:80:9e:8f:
9a:75:61:1b:56:2b:1a:08:d6:79:f9:c5:cd:a3:47:93:b5:5a:
e7:bd:49:11:ab:c0:c8:97:d5:c4:4c:aa:d3:bc:6a:85:02:ef:
e2:8c:6e:14:3c:73:74:7e:44:b7:09:cf:d9:49:63:49:14:86:
fb:ac:37:8e:b8:d3:8f:22:be:fc:88:1f:5d:bd:00:c0:24:13:
06:e7:09:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZelde9iQhfRqyI//+nRjzIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWEzMWE5Zjc0YmI4NTUyZDcxNGEwZDE4NWQxM2M3MDQw
NjQ0ZWUwHhcNMjUwNjI1MDUwMDU5WhcNMjUwNjI2MDUwMDU5WjAzMTEwLwYDVQQD
EyhjYTUyZTJiNGE0ODMwZTA1NDVjYWU4NGQ4M2QxNjhkZjlmN2Y0OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZITaL7DroHRSJ2FZnkRzcQhi6VQ
gon+kKcH8TsRcQ01HZReXkkAAg5wBz1squ5ZSNIur+udPpaj4WUcrOLD4stokcwX
VfrYylgbeS0yrXEzQQ/+YJx1+KKub9gfZ6WdmjilUJAucSk0P7Khn54kGTVCAQN2
nnRvENnQzqy2MGRS0pUKvhNQbuIxfbRUUm2yGksYEk02i1wEuXutlgdo4It8JS5r
of5WO0qzvSbgKEznY/4J47GRsyTUbuPTRXa89McpRDLwNPr+at0VQAlaOoilvfha
YgWCuIEq5M3HvkMnnY3L07gKgJa4E775et/44zlTQNAC1YGARS7NdJWuhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpS4rSkgw4FRcroTYPRaN+ff0m6MB8GA1UdIwQY
MBaAFFSqMan3S7hVLXFKDRhdE8cEBkTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktveHFmZEx1RlV0Y1VvTkdGMFR4d1FHUk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zZGIwOGItMDFhOC00MDE2LWIyNDAt
MDM1MDc4YWQxOWFlLzEvVktveHFmZEx1RlV0Y1VvTkdGMFR4d1FHUk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zZGIwOGItMDFhOC00MDE2LWIyNDAtMDM1MDc4YWQxOWFl
LzEvVktveHFmZEx1RlV0Y1VvTkdGMFR4d1FHUk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzuIseVL
CPOuSNh9XahSty2ok1g+ILcbrDd4f4BgowKqibPFz2Em0mnJtntQma34S8uCl4iN
BuWmIRr2eMAqWW89/zqR8RjGov/TJJaeHHxsj2O5MRU76afmVXLFGdOanS34xjYc
drF7qOv/g435IOY2ghmlTVK9kZ/jsfpixnuGcj09kW1xPKBvHXTNao5IeQRY6KjZ
MYfUpIvkR+2Ze1wOD6NFPvuP9y3U7qCdt9lHgJ6PmnVhG1YrGgjWefnFzaNHk7Va
571JEavAyJfVxEyq07xqhQLv4oxuFDxzdH5EtwnP2UljSRSG+6w3jrjTjyK+/Igf
Xb0AwCQTBucJMw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:39:14 2025 by rpki-client