Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: uX1ICX4q7vNluKwKYVAmCOfwyDME03hf1/qXvlyiDPg=
Subject key identifier: C0:8E:ED:A9:CF:61:1F:42:D2:8D:E0:53:AE:B8:33:D2:7A:1A:01:5E
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 0194BD8553BFFC673908E468A3B68DBDEEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1337
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: a1AHTdTmf/hJ8JQhYOtTPQprjuPyHnF9w+z+qlcIUqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:bf:fc:67:39:08:e4:68:a3:b6:8d:bd:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=c08eeda9cf611f42d28de053aeb833d27a1a015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:9d:6f:d8:db:63:18:49:8f:2a:c0:9e:d7:
93:6a:7b:49:74:ea:af:8a:2e:84:2a:28:56:3a:ba:
e3:8e:13:d0:a0:fa:84:58:41:6c:0b:c1:60:ad:6b:
39:55:49:c2:5b:e8:a7:bf:05:24:55:48:b6:eb:21:
ff:2f:f2:7a:db:bc:c2:1d:52:43:ad:be:37:00:8e:
97:4b:53:05:2d:2b:55:d7:e5:9f:74:c5:f4:dd:45:
e1:53:65:a3:9e:3f:0a:f3:7e:fc:0f:4c:83:30:c1:
7c:3f:46:54:1e:6a:e2:b5:49:70:cc:50:d1:20:5a:
5b:e4:28:40:16:fa:4a:f1:fc:fd:b4:f8:40:c1:82:
0a:d4:12:53:a0:b4:e8:dd:d5:b3:42:97:72:ff:ca:
14:82:40:c2:42:ba:13:1f:3c:14:bc:be:85:0e:12:
c7:81:73:6c:b0:aa:ce:a3:11:88:69:16:83:ef:b6:
6b:aa:e1:07:62:e7:6d:eb:1f:5c:d5:c9:d7:1e:83:
5b:27:6c:b0:70:42:20:5d:58:9d:a1:16:cd:da:0a:
df:b6:53:77:c3:d1:a2:c9:d7:17:60:d2:ca:6e:41:
ad:e8:60:4b:e3:b3:b9:af:e9:e0:72:46:00:90:80:
2c:59:c8:71:7d:1c:72:a3:5c:f0:98:cc:1a:67:91:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:ED:A9:CF:61:1F:42:D2:8D:E0:53:AE:B8:33:D2:7A:1A:01:5E
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:ef:be:a1:0f:cb:cc:e5:9e:1d:df:1c:ca:1b:d3:6b:fd:
f9:f8:e9:0d:21:dd:19:3d:86:12:53:66:31:30:4e:aa:a7:46:
a9:5d:70:53:11:44:2e:f2:af:cd:86:65:ac:df:88:6b:41:4f:
e3:46:96:57:ea:b7:40:1e:fd:13:7e:fb:a7:3d:3b:05:f0:04:
52:74:4d:97:dc:cb:2f:75:e6:47:a6:78:a8:cf:1b:4f:14:96:
64:c6:26:87:76:20:a7:72:74:c7:c2:70:df:17:e4:1c:70:e0:
3a:f5:39:b2:45:44:e7:02:08:44:2f:01:16:04:3d:de:62:3e:
ba:cf:05:f7:42:54:ee:be:cd:d3:57:fc:78:15:af:27:b6:f2:
87:57:e7:02:68:44:fa:93:36:6c:15:df:fa:3d:f7:16:5b:20:
fb:2e:01:6e:f3:81:bd:21:e0:a3:56:9e:a2:c7:e2:1f:bf:73:
3f:1d:c9:7a:73:63:b4:31:fe:61:04:06:2d:3a:d3:47:d7:c7:
b0:bd:cd:f4:50:7c:0e:d8:5a:fa:23:3a:d7:13:eb:86:85:40:
40:46:85:3a:b2:a1:42:0e:c7:c2:35:ad:dc:e7:7d:c2:c2:5d:
cd:76:e5:37:a0:ac:8b:a1:5e:3e:d0:a2:df:f9:93:ba:9e:c7:
93:f5:10:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVO//Gc5CORoo7aNve78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjUwMTMxMTgwMDE4WhcNMjUwMjAxMTgwMDE4WjAzMTEwLwYDVQQD
EyhjMDhlZWRhOWNmNjExZjQyZDI4ZGUwNTNhZWI4MzNkMjdhMWEwMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaqdb9jbYxhJjyrAnteTantJdOqv
ii6EKihWOrrjjhPQoPqEWEFsC8FgrWs5VUnCW+invwUkVUi26yH/L/J627zCHVJD
rb43AI6XS1MFLStV1+WfdMX03UXhU2Wjnj8K8378D0yDMMF8P0ZUHmritUlwzFDR
IFpb5ChAFvpK8fz9tPhAwYIK1BJToLTo3dWzQpdy/8oUgkDCQroTHzwUvL6FDhLH
gXNssKrOoxGIaRaD77ZrquEHYudt6x9c1cnXHoNbJ2ywcEIgXVidoRbN2grftlN3
w9GiydcXYNLKbkGt6GBL47O5r+ngckYAkIAsWchxfRxyo1zwmMwaZ5HKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCO7anPYR9C0o3gU664M9J6GgFeMB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvbvvqEP
y8zlnh3fHMob02v9+fjpDSHdGT2GElNmMTBOqqdGqV1wUxFELvKvzYZlrN+Ia0FP
40aWV+q3QB79E377pz07BfAEUnRNl9zLL3XmR6Z4qM8bTxSWZMYmh3Ygp3J0x8Jw
3xfkHHDgOvU5skVE5wIIRC8BFgQ93mI+us8F90JU7r7N01f8eBWvJ7byh1fnAmhE
+pM2bBXf+j33Flsg+y4BbvOBvSHgo1aeosfiH79zPx3JenNjtDH+YQQGLTrTR9fH
sL3N9FB8Dtha+iM61xPrhoVAQEaFOrKhQg7HwjWt3Od9wsJdzXblN6Csi6FePtCi
3/mTup7Hk/UQUA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:55 2025 by rpki-client