Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: /0wh19Ek9czLqDOi4U5lsh+swmdicucQgx6QX0Do9mw=
Subject key identifier: 9F:A1:FF:4D:C5:60:67:BA:AF:16:7C:79:A3:63:01:22:06:86:27:41
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 0194BC04D7A49F920AC4E502273BBCE72E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 06DA
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: Ia+bw9mwh/7xOwtsdXMJqZNPexP8kxEK9Jvn5gMPAoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:a4:9f:92:0a:c4:e5:02:27:3b:bc:e7:2e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=9fa1ff4dc56067baaf167c79a363012206862741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:91:a1:74:c3:4c:31:c8:4d:a2:27:66:da:
e6:ce:e0:d4:32:80:7e:f3:43:52:d6:39:31:e2:8c:
4d:d2:4d:a8:15:fd:60:a5:fe:61:81:ec:7b:3d:4c:
d3:d7:80:93:0d:17:20:39:f9:7e:8a:87:16:c1:c4:
ee:6b:d5:6a:4c:ff:22:8d:fb:a9:a8:bb:e1:7d:f4:
0d:b6:a4:68:6c:56:a0:8e:99:10:e3:65:92:bc:72:
47:01:5e:78:61:97:32:82:b3:41:2b:a8:11:bf:60:
a7:3b:ae:e5:30:e0:8b:04:5e:6b:10:5d:7b:01:6e:
3a:c6:de:1c:3b:81:fc:30:7c:4a:be:8a:fc:67:8c:
cc:b5:8c:21:76:c2:6c:7f:51:b4:02:04:64:79:78:
30:d0:aa:42:29:9a:24:56:f6:e3:17:85:a1:b1:88:
42:18:ea:c0:b4:f2:bd:92:1e:9c:5e:e3:50:a8:c2:
bc:6f:46:e6:9f:3c:d7:a2:a9:7d:80:06:a7:6e:20:
9e:fb:3d:57:c0:2b:ed:d3:c8:b7:73:7d:97:06:97:
f8:3b:d8:cc:46:d8:5a:92:f1:81:31:30:90:c5:f3:
32:a0:49:61:d2:77:0a:55:7f:96:14:75:0f:6a:41:
9c:d1:73:15:4f:d7:b1:95:7f:29:56:45:55:de:ca:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:FF:4D:C5:60:67:BA:AF:16:7C:79:A3:63:01:22:06:86:27:41
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:53:9c:d5:10:9a:64:0a:77:2b:3f:23:45:15:d2:21:7c:8f:
50:ec:5c:89:b1:ba:d5:c8:a7:0f:44:a3:ad:4a:71:82:4f:f4:
f3:5e:a6:6f:7c:9b:08:4b:41:66:5d:0b:c2:9a:6c:08:9d:cf:
ad:07:f4:6b:ab:1f:3a:be:e0:cd:7c:da:43:14:3c:df:05:a6:
5c:22:83:da:d2:72:7a:e1:48:1e:81:b5:3f:9b:a8:43:22:d3:
c6:d4:d1:8d:d1:77:92:55:6e:6a:54:e7:81:a6:af:62:b8:9d:
7e:ad:8e:a6:bd:35:9a:3e:1c:81:d5:ce:d5:63:aa:40:09:76:
d3:70:95:ee:0e:d2:24:f7:4e:b6:be:76:d7:ce:16:21:89:09:
3f:18:96:4b:b1:fc:5c:0a:1a:c7:9a:ce:a6:bd:01:8e:dc:80:
15:a4:bc:31:5a:be:df:e1:8d:3d:5e:1f:73:79:47:8d:1d:18:
c2:cd:03:c7:4f:80:36:c7:2d:5e:79:54:c0:4b:e3:c5:d0:ee:
5c:97:b5:1e:65:27:a7:68:84:72:f6:6a:ea:e2:b5:a3:b9:90:
42:74:96:9e:34:59:40:ba:6a:3b:e7:1c:b0:7e:4b:20:ef:87:
40:e4:74:a4:2c:37:1f:48:6c:9a:7b:10:54:01:51:5f:5d:85:
f1:cb:75:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNekn5IKxOUCJzu85y6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
Eyg5ZmExZmY0ZGM1NjA2N2JhYWYxNjdjNzlhMzYzMDEyMjA2ODYyNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHeRoXTDTDHITaInZtrmzuDUMoB+
80NS1jkx4oxN0k2oFf1gpf5hgex7PUzT14CTDRcgOfl+iocWwcTua9VqTP8ijfup
qLvhffQNtqRobFagjpkQ42WSvHJHAV54YZcygrNBK6gRv2CnO67lMOCLBF5rEF17
AW46xt4cO4H8MHxKvor8Z4zMtYwhdsJsf1G0AgRkeXgw0KpCKZokVvbjF4WhsYhC
GOrAtPK9kh6cXuNQqMK8b0bmnzzXoql9gAanbiCe+z1XwCvt08i3c32XBpf4O9jM
RthakvGBMTCQxfMyoElh0ncKVX+WFHUPakGc0XMVT9exlX8pVkVV3spsLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+h/03FYGe6rxZ8eaNjASIGhidBMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVOc1RCa
ZAp3Kz8jRRXSIXyPUOxcibG61cinD0SjrUpxgk/0816mb3ybCEtBZl0LwppsCJ3P
rQf0a6sfOr7gzXzaQxQ83wWmXCKD2tJyeuFIHoG1P5uoQyLTxtTRjdF3klVualTn
gaavYridfq2Opr01mj4cgdXO1WOqQAl203CV7g7SJPdOtr52184WIYkJPxiWS7H8
XAoax5rOpr0BjtyAFaS8MVq+3+GNPV4fc3lHjR0Yws0Dx0+ANsctXnlUwEvjxdDu
XJe1HmUnp2iEcvZq6uK1o7mQQnSWnjRZQLpqO+ccsH5LIO+HQOR0pCw3H0hsmnsQ
VAFRX12F8ct1cQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client