Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File: njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier: EUx8WPtEzOIKj0Lz+ie81R/iBMwiHzSd4Q7RRmtI7ik=
Subject key identifier: B1:D3:E6:34:C3:62:6C:7B:08:45:61:75:1D:71:82:72:08:D8:83:36
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer: /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial: 0194BD1815F6FA8A714B35EF3DB6F9840EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number: 0AD1
Signing time: Fri 31 Jan 2025 16:00:59 +0000
Manifest this update: Fri 31 Jan 2025 16:00:59 +0000
Manifest next update: Sat 01 Feb 2025 16:00:59 +0000
Files and hashes: 1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: ftWlNa4+uyBJ9EUMhnvQQc3fuiv3rRiHBznYvHF61qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:15:f6:fa:8a:71:4b:35:ef:3d:b6:f9:84:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Validity
Not Before: Jan 31 16:00:59 2025 GMT
Not After : Feb 1 16:00:59 2025 GMT
Subject: CN=b1d3e634c3626c7b084561751d71827208d88336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:c5:43:e1:42:4b:7c:ed:1e:11:df:3d:f4:
5d:3b:21:b3:08:16:33:1f:6b:9c:7a:d4:1c:2b:ee:
c9:2c:6c:03:f9:80:25:04:7c:70:d9:c3:72:7e:45:
95:88:88:59:d6:10:62:89:d1:aa:8d:ca:f6:d3:1d:
83:06:cb:5d:56:8a:8c:fb:c3:81:51:2c:eb:c4:94:
b2:26:d7:1a:63:9c:90:23:bb:5c:65:8c:fd:c3:a5:
a1:6d:52:4c:82:69:c9:6d:20:be:7e:49:14:a1:c3:
89:20:52:d0:a1:e6:2f:80:d2:34:cc:02:08:6c:9d:
72:20:ae:57:81:9c:89:e4:d6:b9:f9:dc:3e:28:ce:
ac:5b:39:bd:99:d4:eb:40:f3:fe:72:48:40:b0:32:
a6:70:da:c1:ad:94:89:67:0d:29:d0:8a:86:12:dd:
46:9a:35:4c:c4:a5:0b:5c:34:a0:a3:53:01:bc:b7:
df:e5:89:f1:2b:5b:6c:6d:2f:96:5d:6b:43:ad:41:
c6:d5:28:fc:93:83:7b:8a:c2:1b:48:1b:b5:cf:e7:
64:62:aa:71:7a:37:f8:27:9c:c0:29:ea:e2:c0:88:
ea:ab:ea:cc:09:b8:09:b7:47:58:e6:2e:e5:00:f9:
be:fd:34:13:c3:3c:38:01:4b:a4:46:bc:ed:22:9e:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:E6:34:C3:62:6C:7B:08:45:61:75:1D:71:82:72:08:D8:83:36
X509v3 Authority Key Identifier:
keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:86:06:88:19:63:30:2f:8a:27:e8:c7:df:86:42:3e:7a:
d2:0b:4e:28:ad:69:9b:c0:b8:a3:02:2e:63:f1:5a:66:97:8c:
6b:00:cc:d5:03:07:81:d6:db:23:eb:95:fc:bf:2f:f7:c0:34:
16:5c:c4:36:01:28:ee:1e:fc:eb:7f:14:1e:9e:34:d5:44:2c:
0f:ad:9d:9c:b9:7c:4c:5f:39:93:78:9d:fc:c5:11:57:eb:57:
d4:11:f8:6e:e4:08:a5:c7:05:6e:60:25:eb:d7:8f:81:6f:cc:
44:e2:f9:81:1b:a8:e6:aa:34:46:fb:14:56:59:58:fe:65:72:
a8:42:8f:18:2e:49:5d:d4:8b:26:2f:70:f5:21:13:10:1c:f4:
71:92:7d:e2:63:11:42:b3:07:c6:d8:8e:a3:bc:b5:5d:05:72:
5c:83:02:b4:0d:50:21:7f:42:6f:39:36:97:93:53:45:86:f5:
e3:cd:8c:a8:66:8c:87:d6:d6:46:d1:f4:ec:5b:e9:3c:62:49:
b9:2b:94:ae:8b:90:6e:d9:3f:74:ce:e9:e4:b0:b1:b4:19:0e:
1e:a7:8e:76:9c:14:44:ef:91:27:7f:5d:98:66:02:24:01:3e:
cf:4e:e8:d2:90:69:83:cd:34:73:17:a4:ec:ad:6c:ca:08:84:
9b:f5:ad:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GBX2+opxSzXvPbb5hA7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzNkNDZkMjAyNzBmNDljOTBmMTk4M2ViMDQ0MmRhMmM2
ZGQ2MjQwHhcNMjUwMTMxMTYwMDU5WhcNMjUwMjAxMTYwMDU5WjAzMTEwLwYDVQQD
EyhiMWQzZTYzNGMzNjI2YzdiMDg0NTYxNzUxZDcxODI3MjA4ZDg4MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1bFQ+FCS3ztHhHfPfRdOyGzCBYz
H2ucetQcK+7JLGwD+YAlBHxw2cNyfkWViIhZ1hBiidGqjcr20x2DBstdVoqM+8OB
USzrxJSyJtcaY5yQI7tcZYz9w6WhbVJMgmnJbSC+fkkUocOJIFLQoeYvgNI0zAII
bJ1yIK5XgZyJ5Na5+dw+KM6sWzm9mdTrQPP+ckhAsDKmcNrBrZSJZw0p0IqGEt1G
mjVMxKULXDSgo1MBvLff5YnxK1tsbS+WXWtDrUHG1Sj8k4N7isIbSBu1z+dkYqpx
ejf4J5zAKeriwIjqq+rMCbgJt0dY5i7lAPm+/TQTwzw4AUukRrztIp6gYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHT5jTDYmx7CEVhdR1xgnII2IM2MB8GA1UdIwQY
MBaAFJ4z1G0gJw9JyQ8Zg+sEQtosbdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpQVWJTQW5EMG5KRHhtRDZ3UkMyaXh0MWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OWI2OWQtMjM3NS00NmE5LTkxYjkt
MThkOTAwMjdjMmY5LzEvbmpQVWJTQW5EMG5KRHhtRDZ3UkMyaXh0MWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80OWI2OWQtMjM3NS00NmE5LTkxYjktMThkOTAwMjdjMmY5
LzEvbmpQVWJTQW5EMG5KRHhtRDZ3UkMyaXh0MWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOKGBogZ
YzAviifox9+GQj560gtOKK1pm8C4owIuY/FaZpeMawDM1QMHgdbbI+uV/L8v98A0
FlzENgEo7h78638UHp401UQsD62dnLl8TF85k3id/MURV+tX1BH4buQIpccFbmAl
69ePgW/MROL5gRuo5qo0RvsUVllY/mVyqEKPGC5JXdSLJi9w9SETEBz0cZJ94mMR
QrMHxtiOo7y1XQVyXIMCtA1QIX9Cbzk2l5NTRYb1482MqGaMh9bWRtH07FvpPGJJ
uSuUrouQbtk/dM7p5LCxtBkOHqeOdpwURO+RJ39dmGYCJAE+z07o0pBpg800cxek
7K1sygiEm/WtKQ==
-----END CERTIFICATE-----
Generated at Thu May 1 10:51:53 2025 by rpki-client