Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier: VYcc/LWedTT5/DMZntD287Z3syHiQUGSKhW6jS6oKHQ=
Subject key identifier: D0:20:9F:7D:90:90:3A:F1:4D:D2:15:C9:B6:EA:C5:A5:A0:BE:70:FD
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 0194BC3BDCD4553EBE86A652F8C81202369F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: EaIfbI+VBuGSoqSTKJwGSI4dt95ymAzNfVH9rZXvueA=)
4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:d4:55:3e:be:86:a6:52:f8:c8:12:02:36:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=d0209f7d90903af14dd215c9b6eac5a5a0be70fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:46:f2:45:02:fa:f8:b7:b2:18:74:9c:9b:
17:c9:a9:6e:26:bb:cb:f2:2b:66:81:c7:ca:bb:4e:
74:e5:f9:1c:7f:3c:70:96:dc:82:84:c3:7e:c7:4c:
44:8a:f4:a8:ca:57:51:f1:f8:d0:d1:1d:50:cb:42:
28:e7:5f:9e:44:24:04:7a:e4:77:cf:26:15:46:30:
00:df:ed:c9:4d:ce:72:fc:79:cd:f7:2c:01:12:26:
e5:2b:c8:6c:7c:a2:02:5e:30:97:8e:cd:af:ea:40:
cb:a9:63:cc:42:f9:45:2c:4d:0f:33:c8:0d:a1:54:
9b:2a:62:1d:0a:fa:15:f4:3a:45:e5:6a:85:5a:83:
78:f0:9d:58:4c:71:07:9b:18:f4:7e:b2:0d:52:85:
fd:fc:d7:9d:b1:27:3e:df:02:5d:52:f2:9d:1a:82:
04:15:c6:61:9d:8a:f6:58:19:68:a5:4c:76:42:2e:
8d:07:af:27:32:86:6c:0d:03:c3:1d:33:20:cf:9b:
6b:6b:ef:0b:f4:21:0a:65:c6:36:82:38:de:fb:b8:
7a:da:97:7e:ab:d1:33:c3:69:f9:ee:a3:c1:6e:8d:
cc:0f:ca:b5:40:40:8f:70:fe:f6:c6:2e:1d:57:4b:
6f:23:c8:f1:9f:46:a7:cd:80:e9:56:61:57:bb:70:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:9F:7D:90:90:3A:F1:4D:D2:15:C9:B6:EA:C5:A5:A0:BE:70:FD
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:45:f0:f5:33:90:4d:7e:09:25:c8:68:84:62:cf:a7:19:72:
be:69:61:37:67:88:e0:e3:52:d0:51:eb:f4:ac:d7:f7:58:25:
a3:4a:0c:45:f5:d4:98:bd:a5:01:88:e7:80:86:0b:29:54:98:
3a:be:c7:3f:3a:52:19:99:28:82:ce:7e:27:a6:05:73:5c:8f:
66:62:8a:66:79:37:a3:2e:64:80:3d:67:3b:84:d8:ac:30:71:
0c:41:b0:be:e0:aa:b1:e6:21:3d:e1:fb:00:68:7c:1d:ac:7a:
8a:bc:a9:94:56:67:2a:ad:af:64:02:01:71:ba:b8:68:65:22:
71:74:08:c3:5d:48:7e:66:dd:d5:50:a9:b7:80:4e:1e:5b:7b:
16:2c:e6:87:e9:08:b1:c0:ae:8d:6d:13:2f:0c:33:5c:4b:5f:
bb:64:1a:64:12:f0:ff:1f:a5:93:a3:44:c2:85:f5:8b:8b:e8:
c9:01:c8:5a:07:ba:7a:4e:69:8f:0f:40:97:c8:c5:1b:1a:67:
7e:18:b7:65:b7:4f:1d:99:80:67:ab:4e:20:78:e5:52:d8:d5:
e7:79:f0:bb:9c:f5:be:8b:04:d8:a3:58:8f:f8:6f:96:7e:0e:
60:37:d3:cd:3b:4e:6c:c5:03:03:02:f8:14:b4:bb:c8:c4:01:
e1:55:93:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9zUVT6+hqZS+MgSAjafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NTc0YmU2YWU3NmNkNTIzYjMzNzg3Y2ZiZGI2OTI2NDI2
M2QwNzQwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
EyhkMDIwOWY3ZDkwOTAzYWYxNGRkMjE1YzliNmVhYzVhNWEwYmU3MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d1G8kUC+vi3shh0nJsXyaluJrvL
8itmgcfKu0505fkcfzxwltyChMN+x0xEivSoyldR8fjQ0R1Qy0Io51+eRCQEeuR3
zyYVRjAA3+3JTc5y/HnN9ywBEiblK8hsfKICXjCXjs2v6kDLqWPMQvlFLE0PM8gN
oVSbKmIdCvoV9DpF5WqFWoN48J1YTHEHmxj0frINUoX9/NedsSc+3wJdUvKdGoIE
FcZhnYr2WBlopUx2Qi6NB68nMoZsDQPDHTMgz5tra+8L9CEKZcY2gjje+7h62pd+
q9Ezw2n57qPBbo3MD8q1QECPcP72xi4dV0tvI8jxn0anzYDpVmFXu3BXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAgn32QkDrxTdIVybbqxaWgvnD9MB8GA1UdIwQY
MBaAFDZXS+auds1SOzN4fPvbaSZCY9B0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZTFkOTQtMTg1NC00NzNkLTg3NTMt
MThkZWQ4MGI0YjVkLzEvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS83ZTFkOTQtMTg1NC00NzNkLTg3NTMtMThkZWQ4MGI0YjVk
LzEvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkXw9TOQ
TX4JJchohGLPpxlyvmlhN2eI4ONS0FHr9KzX91glo0oMRfXUmL2lAYjngIYLKVSY
Or7HPzpSGZkogs5+J6YFc1yPZmKKZnk3oy5kgD1nO4TYrDBxDEGwvuCqseYhPeH7
AGh8Hax6iryplFZnKq2vZAIBcbq4aGUicXQIw11Ifmbd1VCpt4BOHlt7Fizmh+kI
scCujW0TLwwzXEtfu2QaZBLw/x+lk6NEwoX1i4voyQHIWge6ek5pjw9Al8jFGxpn
fhi3ZbdPHZmAZ6tOIHjlUtjV53nwu5z1vosE2KNYj/hvln4OYDfTzTtObMUDAwL4
FLS7yMQB4VWTNw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:27 2025 by rpki-client