Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: GR91TcWO7OoOnDEEAw9G2/dhPEBR8th0YljYSYEmfU0=
Subject key identifier: B4:E8:53:DD:09:F6:B9:3D:F1:F4:87:EA:2E:E4:96:B7:5B:59:CF:A1
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0195E07D3326537775CE8146FAB0E9B2BFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0AC7
Signing time: Sat 29 Mar 2025 06:00:56 +0000
Manifest this update: Sat 29 Mar 2025 06:00:56 +0000
Manifest next update: Sun 30 Mar 2025 06:00:56 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: 8TbcjoNlYIpu/cziK4yyNmSGQ3vP6pI8BOFfDQ3qFww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:33:26:53:77:75:ce:81:46:fa:b0:e9:b2:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Mar 29 06:00:56 2025 GMT
Not After : Mar 30 06:00:56 2025 GMT
Subject: CN=b4e853dd09f6b93df1f487ea2ee496b75b59cfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:22:63:45:92:41:9c:02:53:e5:d4:d5:c5:
b2:56:82:e4:2d:2d:9b:a2:ef:0d:03:4c:8c:a0:be:
7e:29:b6:4a:ee:f7:14:9a:69:d8:72:30:f2:6e:1f:
75:b5:fb:22:cb:3a:ec:c7:0d:7f:cc:75:52:20:e1:
60:5e:79:b1:55:70:af:6a:59:2a:e0:e6:30:5f:7a:
10:83:98:f2:c0:a4:29:1d:4e:49:e9:20:ad:21:ac:
3b:99:6f:59:11:0d:2c:fc:d0:60:86:b2:44:61:b1:
6c:2d:0d:67:f9:35:ee:e6:77:f9:9b:18:29:ea:2b:
0c:48:37:31:e5:44:bc:73:b8:1c:7e:0c:0d:6a:6e:
1a:43:4d:c0:68:ea:bb:d6:b5:d3:77:eb:ef:db:20:
79:02:4e:a0:8a:80:64:8d:18:99:09:1f:bc:52:6a:
96:ac:dd:48:68:20:08:85:ef:ec:24:3d:e0:4d:fb:
3e:78:52:79:8d:bf:87:f2:0a:e6:d0:91:5f:b7:1f:
44:9f:54:ef:09:a1:0a:08:1a:54:6b:97:37:a2:ca:
4f:74:6e:62:b8:f0:1e:b3:dc:a7:c3:55:9c:a7:7d:
29:29:c1:77:7c:1c:2d:71:91:21:a6:c6:5d:35:ed:
1b:6b:e9:85:2a:a2:01:d1:b1:aa:d7:0e:07:ef:89:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:53:DD:09:F6:B9:3D:F1:F4:87:EA:2E:E4:96:B7:5B:59:CF:A1
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b4:05:3d:ac:35:84:b2:f4:0d:11:13:62:5a:9f:87:a5:60:
a9:ed:23:a9:ee:68:e7:cd:1a:5a:b1:9f:9e:1c:50:0f:d1:8f:
8a:4a:fa:81:b6:64:73:66:cf:23:b2:8b:1f:32:d4:f0:25:32:
0c:11:84:36:52:6e:2b:44:f3:53:b7:57:11:68:5f:a2:b1:f2:
de:86:1c:b6:e4:36:9a:cb:99:da:f9:39:d2:44:87:09:78:f6:
22:14:58:3f:33:d6:6c:f9:fd:08:40:b3:46:82:80:3d:7d:49:
98:79:52:95:c4:01:0e:7f:cb:ee:69:f8:f9:62:95:df:2a:f8:
9b:bf:df:f3:f4:9f:3d:4c:1b:1b:c8:f1:13:57:a8:3a:02:d4:
d4:b2:42:40:3f:7e:a9:f8:d9:d8:65:16:ee:c1:b8:b0:56:28:
31:8b:ac:c4:c9:63:0c:b0:ed:16:70:eb:80:05:47:81:d5:7b:
35:73:b3:33:8f:2d:da:60:b6:a5:03:17:9a:cf:0f:f5:65:c0:
b2:b9:ce:c8:eb:59:e4:59:4b:2b:fc:6b:ce:ec:2f:26:57:5e:
1a:a3:3d:37:ae:91:9b:24:a4:20:52:52:ec:15:b3:79:2c:72:
4a:32:ac:c6:12:d4:cb:ec:96:38:cb:c9:72:20:81:39:62:99:
67:9b:7e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfTMmU3d1zoFG+rDpsr+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2
ZDAxNTQwHhcNMjUwMzI5MDYwMDU2WhcNMjUwMzMwMDYwMDU2WjAzMTEwLwYDVQQD
EyhiNGU4NTNkZDA5ZjZiOTNkZjFmNDg3ZWEyZWU0OTZiNzViNTljZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7AiY0WSQZwCU+XU1cWyVoLkLS2b
ou8NA0yMoL5+KbZK7vcUmmnYcjDybh91tfsiyzrsxw1/zHVSIOFgXnmxVXCvalkq
4OYwX3oQg5jywKQpHU5J6SCtIaw7mW9ZEQ0s/NBghrJEYbFsLQ1n+TXu5nf5mxgp
6isMSDcx5US8c7gcfgwNam4aQ03AaOq71rXTd+vv2yB5Ak6gioBkjRiZCR+8UmqW
rN1IaCAIhe/sJD3gTfs+eFJ5jb+H8grm0JFftx9En1TvCaEKCBpUa5c3ospPdG5i
uPAes9ynw1Wcp30pKcF3fBwtcZEhpsZdNe0ba+mFKqIB0bGq1w4H74nxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLToU90J9rk98fSH6i7klrdbWc+hMB8GA1UdIwQY
MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt
OWJlODY5YTljNjBjLzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj
LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLQFPaw1
hLL0DRETYlqfh6Vgqe0jqe5o580aWrGfnhxQD9GPikr6gbZkc2bPI7KLHzLU8CUy
DBGENlJuK0TzU7dXEWhforHy3oYctuQ2msuZ2vk50kSHCXj2IhRYPzPWbPn9CECz
RoKAPX1JmHlSlcQBDn/L7mn4+WKV3yr4m7/f8/SfPUwbG8jxE1eoOgLU1LJCQD9+
qfjZ2GUW7sG4sFYoMYusxMljDLDtFnDrgAVHgdV7NXOzM48t2mC2pQMXms8P9WXA
srnOyOtZ5FlLK/xrzuwvJldeGqM9N66RmySkIFJS7BWzeSxySjKsxhLUy+yWOMvJ
ciCBOWKZZ5t+iw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:59 2025 by rpki-client