Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier: XpSuAhP0usG0r8MvdOfK1eIfX5dJgq8b8+XaTSMt5Hg=
Subject key identifier: 46:10:80:2F:FA:6E:6C:94:97:38:8A:86:1B:85:72:B4:24:A6:05:EF
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 0194BD17A97AB4E4C3725AADC14A7CB18D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number: 1408
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 7H-pvtOEzrFvrmXmbPLCW5ardb4.roa (hash: embGRxikC2SrZHMie7zj/b5dOC5wc3RQ2WIUIVTyEJw=)
2: 7OjUVrWvd7B0o85DaKLfYgEDYYg.roa (hash: ElsP3+WGZy5wELbMJiGSwWwzyGB160S3FayAOyAR3A0=)
3: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: cWsEfqTjgh+kJ4+4cIuH5R6F2Tm+uN2dPL/pxlF3uj8=)
4: q06qTUv5-JCRpItbJ_9COQqHH6A.roa (hash: elj4UEL+GeLcIcxtH4+ahp+BuvQR4jhMQkNkTFsz2eM=)
5: zn7RiYTFSuY_H6EW4hkd0ugXhg4.roa (hash: TjPxbEKTKC4G0EExaKEE++vAM3LyoGQfvbpHNfpM9R0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:7a:b4:e4:c3:72:5a:ad:c1:4a:7c:b1:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=4610802ffa6e6c9497388a861b8572b424a605ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:6c:44:16:a9:e3:d2:05:a9:2a:db:b0:dc:
4d:c6:16:f3:a2:bb:a1:3e:3e:9b:f1:df:b0:50:23:
b0:c5:84:2f:1c:fd:5a:a8:2e:ac:52:47:fc:51:1d:
5b:18:f2:54:51:32:b8:fe:30:51:71:e4:e0:76:2d:
e4:26:c0:f8:be:4b:d9:ff:1c:e3:3d:c8:03:53:a6:
48:d7:6e:f7:e6:62:fb:c2:3a:b9:72:b6:8f:9a:12:
1c:99:33:15:0c:de:d9:08:a2:f6:63:54:c9:6c:10:
8e:93:a7:eb:ce:37:8c:49:24:4b:a8:c7:46:15:d6:
e1:b9:52:cd:03:1c:54:30:c1:ed:0b:da:1c:1d:50:
73:07:92:f9:ea:ae:b1:ff:56:34:81:2d:88:e3:7e:
f2:57:44:43:7d:9b:b3:ab:16:08:47:4d:44:b1:4c:
da:34:88:fd:a2:59:94:42:6e:7b:cb:96:8d:eb:f8:
1f:3b:cd:5a:a3:02:f3:b3:e7:8e:88:68:7c:c1:32:
26:7c:1a:fb:ed:5d:90:73:f7:88:45:50:03:89:79:
4a:d6:43:b9:01:dc:ec:5e:5f:03:b7:cb:97:35:19:
99:36:3d:c1:d5:58:2f:14:24:5d:fc:ef:07:9b:f6:
7e:5e:16:d3:ec:97:c3:4d:f8:a9:ec:7a:c2:49:7f:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:10:80:2F:FA:6E:6C:94:97:38:8A:86:1B:85:72:B4:24:A6:05:EF
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:61:31:9a:2e:f8:1a:0f:29:c9:a6:f8:93:4a:7b:c0:5c:7f:
69:92:b9:cd:20:b4:5c:55:cb:f3:29:96:ac:14:c2:02:bd:a0:
19:fe:af:31:a3:f0:59:66:44:7d:cf:54:81:db:cc:d9:62:69:
4d:ed:07:f0:4f:c9:a7:c1:47:b1:dd:ae:01:a2:9b:e7:6c:0f:
cb:a9:ea:1e:23:1a:dd:4d:3f:3d:e6:5f:4e:83:5a:43:6a:94:
7f:48:72:e9:c7:38:db:7c:a0:72:cc:71:16:9e:a7:c1:24:87:
20:87:3c:4f:cf:08:d9:1c:1e:bb:5e:96:9f:aa:4d:b4:12:8f:
f0:1f:1e:48:f9:aa:f2:49:ca:07:aa:16:5e:7a:66:ed:da:0a:
0a:7d:9b:f7:08:69:06:3c:4b:11:ea:b4:07:9d:e1:d4:86:4d:
87:60:3a:1c:8d:81:33:a6:86:05:3e:7c:4d:1e:c3:f8:df:c1:
bc:84:82:70:0b:fd:32:ad:80:ed:24:99:19:f4:26:69:13:81:
9f:10:ab:4a:4b:e0:ab:30:af:5c:e9:6f:69:53:20:63:3e:7c:
b2:ea:da:81:19:1d:12:a0:85:04:26:b7:96:56:93:1b:8a:07:
66:3f:30:d9:62:5b:f8:58:ed:7e:57:70:1d:d0:5c:c1:c5:60:
6b:7a:ef:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6l6tOTDclqtwUp8sY1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4
YzY4YzYwHhcNMjUwMTMxMTYwMDMxWhcNMjUwMjAxMTYwMDMxWjAzMTEwLwYDVQQD
Eyg0NjEwODAyZmZhNmU2Yzk0OTczODhhODYxYjg1NzJiNDI0YTYwNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7xsRBap49IFqSrbsNxNxhbzoruh
Pj6b8d+wUCOwxYQvHP1aqC6sUkf8UR1bGPJUUTK4/jBRceTgdi3kJsD4vkvZ/xzj
PcgDU6ZI12735mL7wjq5craPmhIcmTMVDN7ZCKL2Y1TJbBCOk6frzjeMSSRLqMdG
FdbhuVLNAxxUMMHtC9ocHVBzB5L56q6x/1Y0gS2I437yV0RDfZuzqxYIR01EsUza
NIj9olmUQm57y5aN6/gfO81aowLzs+eOiGh8wTImfBr77V2Qc/eIRVADiXlK1kO5
AdzsXl8Dt8uXNRmZNj3B1VgvFCRd/O8Hm/Z+XhbT7JfDTfip7HrCSX8kBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYQgC/6bmyUlziKhhuFcrQkpgXvMB8GA1UdIwQY
MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt
MDE1NzdhOTI3ZmE5LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5
LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWExmi74
Gg8pyab4k0p7wFx/aZK5zSC0XFXL8ymWrBTCAr2gGf6vMaPwWWZEfc9UgdvM2WJp
Te0H8E/Jp8FHsd2uAaKb52wPy6nqHiMa3U0/PeZfToNaQ2qUf0hy6cc423ygcsxx
Fp6nwSSHIIc8T88I2Rweu16Wn6pNtBKP8B8eSPmq8knKB6oWXnpm7doKCn2b9whp
BjxLEeq0B53h1IZNh2A6HI2BM6aGBT58TR7D+N/BvISCcAv9Mq2A7SSZGfQmaROB
nxCrSkvgqzCvXOlvaVMgYz58suragRkdEqCFBCa3llaTG4oHZj8w2WJb+Fjtfldw
HdBcwcVga3rveg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client