Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier: g8GBbasZrpZPs3q0L/z9U4pAe2EycoEFBzZlMRIIpCA=
Subject key identifier: 2E:CF:66:A0:F2:01:CC:A8:65:82:20:75:17:C1:11:81:AB:DE:AA:C4
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial: 0194BBCE169A1F4761568CA3A778346050B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number: 0493
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: 5BHR+RY0YZVjKduAlPcDrm9ZvaEnRpqHzUMdRNnG9l8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:16:9a:1f:47:61:56:8c:a3:a7:78:34:60:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=2ecf66a0f201cca86582207517c11181abdeaac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:3f:60:22:04:40:0b:fe:46:71:67:93:4e:
83:f4:08:51:41:28:c2:7f:8b:5f:05:a3:ce:4d:65:
9f:24:43:f9:0a:19:56:23:b0:19:42:eb:3c:15:e8:
00:ea:b6:0c:8a:3a:54:a1:ac:3e:04:3f:95:10:e0:
70:00:0b:6a:81:5e:da:be:9a:38:8e:13:15:6b:33:
17:b7:e3:f5:85:a5:59:e4:47:74:20:ff:20:b1:e0:
ce:bd:5d:1e:07:6e:6b:a1:0e:95:b9:32:cc:fd:d2:
51:00:04:b5:21:73:ad:c0:b4:cc:0c:1d:5a:fb:7d:
86:dc:af:bd:c0:64:d0:06:52:07:1d:0e:78:3a:67:
32:ac:d8:26:6f:ea:8f:ad:d8:e2:ce:dc:75:e3:08:
db:3b:03:82:4e:b8:f9:9e:c7:ec:af:8f:41:0c:cd:
f0:60:b2:1e:b0:bb:66:82:02:b3:4f:cc:16:a5:fe:
af:cf:2a:cc:95:a8:64:46:00:a1:21:90:5a:c5:20:
15:1e:bb:72:12:e9:fd:23:81:3f:3e:7a:a5:4d:77:
a5:68:74:1c:77:43:83:da:f7:fb:6b:c0:19:5f:76:
8a:cd:68:c4:e9:3e:eb:55:fd:f0:be:bc:9d:2c:33:
cb:45:91:53:a1:ef:27:30:6e:1d:ad:ab:db:86:f0:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CF:66:A0:F2:01:CC:A8:65:82:20:75:17:C1:11:81:AB:DE:AA:C4
X509v3 Authority Key Identifier:
keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:aa:0c:93:ee:15:0f:2f:f7:db:4e:6a:d8:16:58:79:f8:
6a:89:e4:ec:6b:00:fc:d1:f8:68:f9:b5:31:ab:48:ab:ee:d3:
66:a7:d5:31:2b:1a:71:02:c7:da:32:88:58:ac:78:0f:53:06:
70:a8:d8:c7:a1:26:f6:75:aa:e9:d6:a5:78:8f:fc:d8:d4:97:
1e:8c:66:71:c0:ba:db:29:fa:1e:aa:b9:ed:df:48:59:bc:73:
56:02:4d:0c:06:0b:15:52:b8:fc:5e:04:e2:db:83:4b:ec:1f:
75:3d:b2:a9:08:e6:f7:f5:21:df:8c:3c:eb:eb:1a:91:19:5a:
3c:69:a1:62:d2:a9:3c:e8:cb:7c:6b:35:40:ed:55:f2:a5:54:
57:80:d7:df:0c:97:f9:50:42:19:22:08:a7:44:01:ff:d7:c5:
7a:61:15:0f:74:fa:b3:4f:cc:33:eb:53:e9:50:07:b5:db:29:
97:6a:65:10:b1:93:92:d1:1d:f4:5b:ff:3c:b3:94:60:ee:31:
bf:94:8d:3c:21:75:ba:e7:b7:b8:ab:69:58:ba:b7:f7:1f:96:
26:cc:5e:a4:46:2d:f7:15:9b:b0:04:78:9a:d3:93:89:29:8b:
84:e5:be:a4:a1:73:57:f5:7d:45:56:3e:3a:58:9e:4e:b8:7b:
65:9c:22:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhaaH0dhVoyjp3g0YFC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzc4MTgyNTFhMDgxZDFjYzdmMzAxNTMyMGViNjM1MjY3
MDliOTEwHhcNMjUwMTMxMTAwMDMzWhcNMjUwMjAxMTAwMDMzWjAzMTEwLwYDVQQD
EygyZWNmNjZhMGYyMDFjY2E4NjU4MjIwNzUxN2MxMTE4MWFiZGVhYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgU/YCIEQAv+RnFnk06D9AhRQSjC
f4tfBaPOTWWfJEP5ChlWI7AZQus8FegA6rYMijpUoaw+BD+VEOBwAAtqgV7avpo4
jhMVazMXt+P1haVZ5Ed0IP8gseDOvV0eB25roQ6VuTLM/dJRAAS1IXOtwLTMDB1a
+32G3K+9wGTQBlIHHQ54OmcyrNgmb+qPrdjiztx14wjbOwOCTrj5nsfsr49BDM3w
YLIesLtmggKzT8wWpf6vzyrMlahkRgChIZBaxSAVHrtyEun9I4E/PnqlTXelaHQc
d0OD2vf7a8AZX3aKzWjE6T7rVf3wvrydLDPLRZFToe8nMG4dravbhvA9ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7PZqDyAcyoZYIgdRfBEYGr3qrEMB8GA1UdIwQY
MBaAFJ83gYJRoIHRzH8wFTIOtjUmcJuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQt
NmIyZjUyNjA0N2E5LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQtNmIyZjUyNjA0N2E5
LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOaqDJPu
FQ8v99tOatgWWHn4aonk7GsA/NH4aPm1MatIq+7TZqfVMSsacQLH2jKIWKx4D1MG
cKjYx6Em9nWq6daleI/82NSXHoxmccC62yn6Hqq57d9IWbxzVgJNDAYLFVK4/F4E
4tuDS+wfdT2yqQjm9/Uh34w86+sakRlaPGmhYtKpPOjLfGs1QO1V8qVUV4DX3wyX
+VBCGSIIp0QB/9fFemEVD3T6s0/MM+tT6VAHtdspl2plELGTktEd9Fv/PLOUYO4x
v5SNPCF1uue3uKtpWLq39x+WJsxepEYt9xWbsAR4mtOTiSmLhOW+pKFzV/V9RVY+
OlieTrh7ZZwiOQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:44 2025 by rpki-client