Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: Kpiyd7PSHlh3BcDV0Wbf3NEm4zqUEi0cNQtWVLeHD6Q=
Subject key identifier: 6B:5D:DE:EF:4F:94:58:75:7B:90:6F:C8:EF:DC:6E:C0:8B:5D:45:62
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 0194BD17C70A41311920A73DAE7F268CF724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0AFB
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: Pa5KV0EOgC1jEHnoETEgQqzLnFmfzVq/eCINTUzxqYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:0a:41:31:19:20:a7:3d:ae:7f:26:8c:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=6b5ddeef4f9458757b906fc8efdc6ec08b5d4562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:e1:2e:48:72:55:8b:a4:c3:98:83:10:cb:
4c:39:33:54:81:e7:ba:60:7b:8b:c3:71:56:b9:59:
32:c3:16:ab:b6:9b:7e:a1:99:8d:6a:7f:35:b5:15:
be:63:c1:57:f1:5e:83:4d:21:64:fd:dd:40:4b:5e:
28:70:8b:af:ce:75:34:a0:27:ae:45:a6:87:86:a4:
20:71:3f:a4:34:59:05:7e:72:b9:f2:ff:68:86:20:
78:3e:5e:58:7c:e6:e1:61:23:c5:89:ae:9c:ec:9c:
77:d7:dd:0d:d1:ce:cd:18:0b:11:7e:c7:1c:45:de:
8d:ec:40:42:0f:c8:ab:69:cd:d1:97:c0:8f:04:7b:
fd:54:e8:0c:cf:35:db:34:8b:11:9d:6d:b5:f8:c5:
de:ce:05:a4:59:a3:09:ed:6e:15:84:be:29:de:14:
13:9f:cf:68:94:bc:f3:95:e0:8b:dd:34:8c:66:52:
76:3f:d7:31:b3:bf:c7:67:4c:73:da:bc:be:51:8f:
42:cb:ff:e4:64:fb:11:1a:fc:1b:4b:71:23:88:d3:
cb:19:ff:f3:9b:e7:7b:95:d2:a2:08:6f:fc:b8:09:
fb:1b:1e:99:ea:73:a3:13:5c:bd:67:87:eb:ef:6a:
2a:a1:54:dc:b9:0b:18:a3:ce:9a:6f:fb:44:7b:55:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:DE:EF:4F:94:58:75:7B:90:6F:C8:EF:DC:6E:C0:8B:5D:45:62
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:b6:12:4c:ed:60:b3:27:b5:49:a3:92:f1:4a:3e:f1:d7:
16:11:07:8b:07:8e:85:af:fd:20:52:53:b2:65:6e:ca:77:f4:
bf:63:87:5a:c9:10:28:31:cb:2d:db:b1:66:73:af:93:d0:1f:
51:b7:c4:ee:e2:15:fa:4f:b1:86:7e:9b:cb:36:51:39:3a:64:
a9:a4:db:c2:2c:26:cc:6c:52:70:dc:51:f1:37:91:12:e8:f9:
dc:0e:3a:50:fe:35:a9:81:da:f7:c7:2b:27:61:52:3d:88:7b:
6d:88:03:25:69:29:75:ff:39:26:b0:43:7e:cd:2f:c0:81:65:
3d:dc:a6:08:a3:d0:94:6a:ba:36:ee:91:82:e9:ed:d2:b8:02:
d7:21:70:ff:f7:98:f9:95:d7:34:cb:ae:85:da:c9:84:02:32:
2b:15:e4:b0:77:88:1d:1b:9f:df:6b:db:13:3a:dd:35:7e:bb:
96:70:b7:f3:fc:a4:86:36:f1:c7:4f:47:f4:56:fe:0e:98:81:
76:05:a4:5c:a0:0d:92:83:c2:37:7d:a7:de:f4:fa:80:6c:51:
19:7e:46:c7:af:bc:f3:cc:9d:61:b1:5f:ad:fc:af:ce:0c:82:
7b:bb:14:57:23:00:21:73:f5:7c:11:b1:a5:82:1a:1f:89:64:
84:75:b6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8cKQTEZIKc9rn8mjPckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMTUzM2M0NzAyYzJjY2I1YTllMGU4N2FiMjdhZDU2YjE1
ZjJjNzYwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
Eyg2YjVkZGVlZjRmOTQ1ODc1N2I5MDZmYzhlZmRjNmVjMDhiNWQ0NTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5fhLkhyVYukw5iDEMtMOTNUgee6
YHuLw3FWuVkywxartpt+oZmNan81tRW+Y8FX8V6DTSFk/d1AS14ocIuvznU0oCeu
RaaHhqQgcT+kNFkFfnK58v9ohiB4Pl5YfObhYSPFia6c7Jx3190N0c7NGAsRfscc
Rd6N7EBCD8irac3Rl8CPBHv9VOgMzzXbNIsRnW21+MXezgWkWaMJ7W4VhL4p3hQT
n89olLzzleCL3TSMZlJ2P9cxs7/HZ0xz2ry+UY9Cy//kZPsRGvwbS3EjiNPLGf/z
m+d7ldKiCG/8uAn7Gx6Z6nOjE1y9Z4fr72oqoVTcuQsYo86ab/tEe1V2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtd3u9PlFh1e5BvyO/cbsCLXUViMB8GA1UdIwQY
MBaAFJ4VM8RwLCzLWp4Oh6snrVaxXyx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/e2Ekzt
YLMntUmjkvFKPvHXFhEHiweOha/9IFJTsmVuynf0v2OHWskQKDHLLduxZnOvk9Af
UbfE7uIV+k+xhn6byzZROTpkqaTbwiwmzGxScNxR8TeREuj53A46UP41qYHa98cr
J2FSPYh7bYgDJWkpdf85JrBDfs0vwIFlPdymCKPQlGq6Nu6Rgunt0rgC1yFw//eY
+ZXXNMuuhdrJhAIyKxXksHeIHRuf32vbEzrdNX67lnC38/ykhjbxx09H9Fb+DpiB
dgWkXKANkoPCN32n3vT6gGxRGX5Gx6+888ydYbFfrfyvzgyCe7sUVyMAIXP1fBGx
pYIaH4lkhHW2yQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:19 2025 by rpki-client