Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: NwpcbUk34+v2xcSM+PC0KBIerv6DFTFu5whbBZHo3pk=
Subject key identifier: 34:6B:B1:0A:8D:15:5F:57:7E:73:2A:26:0F:74:32:E7:22:35:2C:EE
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 0194BD4E79A6DF5F021B2AA6CCD54B0C3845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 13E8
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: tGqvUW318gIcm8EW7zlgEy8c9lqr9pkMlwe1gp0Bx7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:a6:df:5f:02:1b:2a:a6:cc:d5:4b:0c:38:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=346bb10a8d155f577e732a260f7432e722352cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:fe:3a:43:91:8b:de:de:fb:09:89:c7:f7:
82:f0:93:8b:b0:a3:2c:d8:9c:5e:76:73:16:94:d4:
24:af:98:55:fe:ae:81:42:31:c0:4e:f7:b0:a3:4e:
75:b5:dc:77:0f:93:8e:7a:a0:72:de:82:e7:fd:46:
7c:01:4c:95:8e:28:63:9d:d9:d2:75:37:bb:4d:c9:
b0:10:83:09:7f:97:53:55:5b:c0:f6:a8:ce:9c:d5:
70:11:8a:f4:ad:25:e9:77:f9:6c:88:04:6b:dd:b0:
13:dc:87:96:8d:d6:f8:8b:9e:78:a7:05:c8:20:f0:
c2:c0:23:ac:01:30:85:61:36:30:82:3e:6e:fc:32:
49:b4:c6:15:9d:bb:c8:8f:78:4f:22:24:09:b7:a7:
72:5e:8b:8e:5d:e2:ec:98:87:38:cb:b1:dd:cd:91:
24:c8:77:78:13:ff:bb:3d:92:9c:0f:7b:14:b1:66:
09:b6:47:15:cb:0c:6b:30:73:a0:95:2d:06:21:28:
49:ba:25:4d:55:b2:88:0e:3e:30:65:1a:89:26:d3:
b0:36:78:45:1b:43:db:76:51:f8:f6:e9:07:94:2d:
b5:3f:bd:99:26:ad:21:fa:9f:e3:b1:37:6e:bc:fd:
f3:06:65:d1:4d:25:c2:f7:ec:83:84:95:14:4e:82:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:B1:0A:8D:15:5F:57:7E:73:2A:26:0F:74:32:E7:22:35:2C:EE
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:bd:fe:47:81:90:a5:60:8c:53:ba:41:1e:6b:a3:52:fc:
46:3a:6c:f3:7f:9f:b4:99:1e:4b:d7:82:dd:5b:b3:f4:d9:6d:
0c:67:fe:09:b3:28:23:d5:ea:ca:ea:a1:eb:4c:bb:5d:66:e5:
78:9b:ba:00:6d:79:85:d1:03:13:37:75:4f:cf:f5:29:d7:d2:
11:d7:08:6e:62:b0:0d:7c:79:be:88:ff:9f:d1:b5:d9:6c:c8:
58:e9:50:bf:fd:e2:91:a7:bd:94:d5:66:12:07:d9:51:bf:74:
10:48:73:79:9c:5d:67:9b:a3:9b:ac:dc:2b:c2:91:37:c3:7f:
98:26:21:03:c1:39:10:14:aa:c1:58:fc:30:5c:4d:a9:03:40:
5a:fc:5f:7b:b2:49:44:e8:d6:3b:b3:9e:a7:af:80:37:71:b9:
19:6f:2f:b5:82:52:f7:e0:ef:89:b5:3a:bd:92:2c:7c:2e:95:
f1:c4:8c:90:ad:6c:2f:13:15:c3:ae:c1:a6:0f:44:f2:dd:97:
70:79:a9:f5:62:c4:f9:01:f0:14:04:ba:52:91:18:a3:78:67:
12:13:13:f9:7e:a8:b9:a6:3c:2c:d0:63:59:34:6a:79:77:5b:
fd:8a:7b:6d:8e:ed:5e:1f:62:42:92:b0:2e:84:7a:91:01:a9:
97:ab:5b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tnmm318CGyqmzNVLDDhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjUwMTMxMTcwMDI0WhcNMjUwMjAxMTcwMDI0WjAzMTEwLwYDVQQD
EygzNDZiYjEwYThkMTU1ZjU3N2U3MzJhMjYwZjc0MzJlNzIyMzUyY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV7+OkORi97e+wmJx/eC8JOLsKMs
2JxednMWlNQkr5hV/q6BQjHATvewo051tdx3D5OOeqBy3oLn/UZ8AUyVjihjndnS
dTe7TcmwEIMJf5dTVVvA9qjOnNVwEYr0rSXpd/lsiARr3bAT3IeWjdb4i554pwXI
IPDCwCOsATCFYTYwgj5u/DJJtMYVnbvIj3hPIiQJt6dyXouOXeLsmIc4y7HdzZEk
yHd4E/+7PZKcD3sUsWYJtkcVywxrMHOglS0GIShJuiVNVbKIDj4wZRqJJtOwNnhF
G0PbdlH49ukHlC21P72ZJq0h+p/jsTduvP3zBmXRTSXC9+yDhJUUToIGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRrsQqNFV9XfnMqJg90MuciNSzuMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCm9/keB
kKVgjFO6QR5ro1L8Rjps83+ftJkeS9eC3Vuz9NltDGf+CbMoI9Xqyuqh60y7XWbl
eJu6AG15hdEDEzd1T8/1KdfSEdcIbmKwDXx5voj/n9G12WzIWOlQv/3ikae9lNVm
EgfZUb90EEhzeZxdZ5ujm6zcK8KRN8N/mCYhA8E5EBSqwVj8MFxNqQNAWvxfe7JJ
ROjWO7Oep6+AN3G5GW8vtYJS9+DvibU6vZIsfC6V8cSMkK1sLxMVw67Bpg9E8t2X
cHmp9WLE+QHwFAS6UpEYo3hnEhMT+X6ouaY8LNBjWTRqeXdb/Yp7bY7tXh9iQpKw
LoR6kQGpl6tbFA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:43 2025 by rpki-client