Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: qBojhOkeLBKiHG70612n+gz0Phhr6puaUsxI11boXho=
Subject key identifier: 9F:58:2B:11:18:FF:CB:31:AA:61:A4:32:E2:35:91:33:37:DF:63:FD
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 0194BC3C7F8745E82F771187734BB46AD776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=)
2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: TaWe3qrbk7CyYPzk/o9Y6svwhWbYNyWuzPFYSsvjR0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:87:45:e8:2f:77:11:87:73:4b:b4:6a:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=9f582b1118ffcb31aa61a432e235913337df63fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:e3:8c:ab:88:8d:11:76:f6:89:e7:12:eb:
67:d0:b0:c4:f6:0d:ae:21:4b:3f:ea:3b:fa:c2:53:
ec:67:b3:f6:69:73:ed:69:56:16:5b:09:a8:4d:4f:
a2:8a:d3:f4:24:87:a0:39:db:7a:ca:19:4b:f0:70:
63:10:76:d8:22:11:17:3c:89:e4:aa:f9:8d:8b:4a:
fb:d6:80:09:57:92:c8:5a:12:56:37:4c:01:48:04:
10:f1:5c:88:ab:31:b1:e0:71:e3:4c:cf:a8:ca:34:
e5:18:53:f8:d2:d7:80:5d:10:99:82:22:24:9c:cd:
2b:71:15:fe:1f:66:17:26:1a:9e:f0:de:11:60:b8:
62:65:93:64:d3:49:94:54:c4:87:5f:f4:94:de:ca:
61:b3:e9:7e:71:8f:fb:f4:70:4e:f2:38:48:18:19:
34:38:be:d7:ce:9d:e9:0a:06:2c:59:e5:47:92:35:
7d:60:62:f2:3e:7c:d3:b2:aa:b3:3d:52:c2:f4:bd:
49:4e:25:81:da:ce:97:ac:00:69:7e:f1:d7:64:60:
51:cc:80:1c:8e:22:42:b1:1d:ec:48:fd:e7:a1:6e:
48:01:4d:dc:63:d4:1c:ef:dc:6b:b2:5c:3b:18:4f:
7b:0a:91:21:e5:ec:bc:af:8b:e1:f4:36:02:a4:c6:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:58:2B:11:18:FF:CB:31:AA:61:A4:32:E2:35:91:33:37:DF:63:FD
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:91:ea:0d:2c:d3:ca:fc:4d:1d:d1:76:39:6e:64:37:a7:1d:
46:58:b3:dd:75:2a:15:0d:7a:bb:4c:32:a2:85:d1:d6:5a:7b:
d5:c6:99:6a:5a:02:fa:fd:f0:c6:ed:3e:c9:80:83:a2:a3:e3:
54:28:3a:fb:0c:1a:02:68:26:31:9c:26:89:1d:3c:70:23:d0:
ce:92:00:72:04:da:22:e2:8a:6f:5a:01:d0:4f:bf:eb:de:28:
f4:f1:ce:fc:29:01:8f:7d:cc:00:f2:1c:2a:e2:98:4f:b6:e4:
2d:3e:a8:26:ba:65:f8:ae:89:94:e8:b0:e6:f1:07:42:02:05:
85:3f:a8:7c:9c:ab:c0:80:26:2b:68:4a:2e:dc:bf:ff:7f:28:
99:60:33:20:3b:df:30:96:61:b9:b3:38:97:5a:57:a2:aa:36:
4f:d4:df:39:e9:cc:3c:60:55:49:37:89:6e:8b:99:96:11:7a:
99:c9:82:9d:7f:96:db:46:1f:77:10:b5:bc:c8:73:70:4f:28:
1d:1c:c4:22:8e:99:e9:a8:cd:42:74:9e:bd:13:18:ce:fb:ef:
c1:84:1c:0b:83:c3:2e:5a:36:ce:15:91:6d:66:f2:2a:3f:a1:
28:5b:46:d3:b2:42:16:e0:cf:bc:b6:67:1c:8c:a5:a7:70:1e:
e2:0f:57:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PH+HRegvdxGHc0u0atd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl
NDE2YzIwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg5ZjU4MmIxMTE4ZmZjYjMxYWE2MWE0MzJlMjM1OTEzMzM3ZGY2M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dXjjKuIjRF29onnEutn0LDE9g2u
IUs/6jv6wlPsZ7P2aXPtaVYWWwmoTU+iitP0JIegOdt6yhlL8HBjEHbYIhEXPInk
qvmNi0r71oAJV5LIWhJWN0wBSAQQ8VyIqzGx4HHjTM+oyjTlGFP40teAXRCZgiIk
nM0rcRX+H2YXJhqe8N4RYLhiZZNk00mUVMSHX/SU3sphs+l+cY/79HBO8jhIGBk0
OL7Xzp3pCgYsWeVHkjV9YGLyPnzTsqqzPVLC9L1JTiWB2s6XrABpfvHXZGBRzIAc
jiJCsR3sSP3noW5IAU3cY9Qc79xrslw7GE97CpEh5ey8r4vh9DYCpMbDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9YKxEY/8sxqmGkMuI1kTM332P9MB8GA1UdIwQY
MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct
ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1
LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJHqDSzT
yvxNHdF2OW5kN6cdRliz3XUqFQ16u0wyooXR1lp71caZaloC+v3wxu0+yYCDoqPj
VCg6+wwaAmgmMZwmiR08cCPQzpIAcgTaIuKKb1oB0E+/694o9PHO/CkBj33MAPIc
KuKYT7bkLT6oJrpl+K6JlOiw5vEHQgIFhT+ofJyrwIAmK2hKLty//38omWAzIDvf
MJZhubM4l1pXoqo2T9TfOenMPGBVSTeJbouZlhF6mcmCnX+W20YfdxC1vMhzcE8o
HRzEIo6Z6ajNQnSevRMYzvvvwYQcC4PDLlo2zhWRbWbyKj+hKFtG07JCFuDPvLZn
HIylp3Ae4g9XrA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:33 2025 by rpki-client