Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File: vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier: 46RDnE6yvNtwsV0oDG6fQ0FO4il0wH0kwVnUPogYXPM=
Subject key identifier: C4:F3:C6:B7:1F:ED:4B:03:EE:6F:CE:E2:38:14:BA:E6:32:17:3D:13
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer: /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial: 0195E00F984AD2982FF4F75EF4DDAD95EB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number: 047D
Signing time: Sat 29 Mar 2025 04:01:13 +0000
Manifest this update: Sat 29 Mar 2025 04:01:13 +0000
Manifest next update: Sun 30 Mar 2025 04:01:13 +0000
Files and hashes: 1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: wRzEjtRjqS9I01ztG/Yyz3LbwaBnBEfllXaGEq2/60Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:98:4a:d2:98:2f:f4:f7:5e:f4:dd:ad:95:eb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Validity
Not Before: Mar 29 04:01:13 2025 GMT
Not After : Mar 30 04:01:13 2025 GMT
Subject: CN=c4f3c6b71fed4b03ee6fcee23814bae632173d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:5f:10:b5:ee:a6:2f:0e:72:13:bf:cb:46:
8e:ee:b3:16:16:2e:77:b4:57:64:d0:0d:12:cd:17:
55:e3:84:69:b6:ad:72:47:b1:87:13:35:08:06:5f:
5c:d6:f2:55:ef:ad:87:6d:61:f0:ca:7f:7a:7a:b4:
26:81:33:fb:1a:36:62:f9:ac:cf:82:c8:55:f8:e3:
98:7f:ba:7b:e0:6a:29:fe:f1:2d:b9:bf:af:d8:97:
3c:e8:a3:03:b1:6d:59:b2:8a:b0:a7:a1:6b:e6:f4:
0b:42:fb:d0:aa:31:82:97:e4:8e:e9:91:c8:84:1c:
e9:25:75:6a:af:3a:58:29:15:6e:9d:27:9c:e8:23:
79:35:a2:a5:53:25:67:7d:6d:11:43:5f:8a:70:92:
57:9a:31:ad:39:61:87:79:dc:8a:f4:7a:66:c6:2f:
05:38:c7:b9:6c:bb:7d:9a:ec:ba:dd:28:87:3f:37:
ad:31:0d:fa:d1:2a:ff:b9:45:f4:bf:4f:3e:47:54:
0e:70:d4:de:0f:39:7b:53:47:cf:21:ec:fe:c9:0d:
04:2d:96:40:86:ba:db:00:15:31:86:87:b2:0c:0b:
28:82:da:89:8d:ef:c7:ba:a1:bf:5c:2b:8c:04:c9:
0b:f7:0c:c1:e3:68:03:b5:8c:b3:bd:ca:64:f0:c5:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:C6:B7:1F:ED:4B:03:EE:6F:CE:E2:38:14:BA:E6:32:17:3D:13
X509v3 Authority Key Identifier:
keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:08:27:79:06:73:fd:ed:38:18:e3:34:91:c4:e9:d3:7b:a8:
d0:c3:7a:4a:f6:a0:3f:d9:39:cd:62:f7:df:45:fe:3e:c1:2b:
e9:57:a1:58:20:e2:bf:35:52:01:02:77:ec:3e:7d:dd:43:36:
bd:cc:b5:d1:aa:8a:47:10:f8:d2:21:7b:b6:cb:07:66:b5:21:
96:1a:68:6b:a1:b2:13:72:a8:3e:91:7c:60:e5:29:8c:52:18:
db:2d:d1:e1:40:3f:f7:40:4d:4f:60:2b:b8:9e:e6:1e:c7:0d:
00:5d:5b:78:75:54:c6:91:0c:98:60:4f:92:f4:5e:41:78:11:
0c:44:7e:2e:90:25:29:83:93:0a:f9:91:34:da:04:7a:3a:0f:
1a:62:0e:f1:02:2f:19:60:0d:11:a6:9f:9a:ff:fe:25:54:ec:
69:bd:31:35:44:1e:bc:56:04:14:37:80:b2:93:6e:c4:ca:9f:
28:87:d2:da:43:81:ba:11:f1:28:fc:27:44:43:40:7c:8c:fa:
14:e3:e0:1e:25:a8:af:5e:45:e4:74:99:0c:06:36:29:40:74:
27:9d:d4:13:87:6b:ab:f7:35:34:2c:54:f7:ed:85:6e:31:c3:
db:01:f9:05:1a:e8:b6:df:0c:3a:8d:29:5f:41:03:00:99:d6:
73:03:59:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5hK0pgv9Pde9N2tlesUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjM2MTcxMDJkZDQ3ZWE0YTNmMmVmMDI3OWNmNjdmMTQ5
MTZhM2MwHhcNMjUwMzI5MDQwMTEzWhcNMjUwMzMwMDQwMTEzWjAzMTEwLwYDVQQD
EyhjNGYzYzZiNzFmZWQ0YjAzZWU2ZmNlZTIzODE0YmFlNjMyMTczZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/hfELXupi8OchO/y0aO7rMWFi53
tFdk0A0SzRdV44Rptq1yR7GHEzUIBl9c1vJV762HbWHwyn96erQmgTP7GjZi+azP
gshV+OOYf7p74Gop/vEtub+v2Jc86KMDsW1Zsoqwp6Fr5vQLQvvQqjGCl+SO6ZHI
hBzpJXVqrzpYKRVunSec6CN5NaKlUyVnfW0RQ1+KcJJXmjGtOWGHedyK9Hpmxi8F
OMe5bLt9muy63SiHPzetMQ360Sr/uUX0v08+R1QOcNTeDzl7U0fPIez+yQ0ELZZA
hrrbABUxhoeyDAsogtqJje/HuqG/XCuMBMkL9wzB42gDtYyzvcpk8MXJSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTzxrcf7UsD7m/O4jgUuuYyFz0TMB8GA1UdIwQY
MBaAFL3zYXEC3UfqSj8u8Cec9n8UkWo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZOaGNRTGRSLXBLUHk3d0o1ejJmeFNSYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kN2RhNTYtOTk2NS00YmYwLThmNGQt
OWY1MmRlMjI3NjIxLzEvdmZOaGNRTGRSLXBLUHk3d0o1ejJmeFNSYWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kN2RhNTYtOTk2NS00YmYwLThmNGQtOWY1MmRlMjI3NjIx
LzEvdmZOaGNRTGRSLXBLUHk3d0o1ejJmeFNSYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQgneQZz
/e04GOM0kcTp03uo0MN6SvagP9k5zWL330X+PsEr6VehWCDivzVSAQJ37D593UM2
vcy10aqKRxD40iF7tssHZrUhlhpoa6GyE3KoPpF8YOUpjFIY2y3R4UA/90BNT2Ar
uJ7mHscNAF1beHVUxpEMmGBPkvReQXgRDER+LpAlKYOTCvmRNNoEejoPGmIO8QIv
GWANEaafmv/+JVTsab0xNUQevFYEFDeAspNuxMqfKIfS2kOBuhHxKPwnRENAfIz6
FOPgHiWor15F5HSZDAY2KUB0J53UE4drq/c1NCxU9+2FbjHD2wH5BRrott8MOo0p
X0EDAJnWcwNZbQ==
-----END CERTIFICATE-----
Generated at Sun May 11 02:28:28 2025 by rpki-client