Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: 1Uce2gxvbSfDG6CrwAi5bfAoHxU28U7aYol0Wawifbk=
Subject key identifier: 33:21:6D:32:3C:C3:40:B1:A4:E1:05:A2:A9:19:AB:C8:67:EF:65:44
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 0194BCA97F293D35A0BC3AEDD721C0E988A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: GariKQoiS5mW2lQmXoowSDJ0ql8JsdKwbAuCAoU0wYQ=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:29:3d:35:a0:bc:3a:ed:d7:21:c0:e9:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=33216d323cc340b1a4e105a2a919abc867ef6544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:0d:b6:da:e0:3e:96:e7:07:62:90:4a:45:
67:b1:f5:2c:9d:e6:8d:c6:44:54:0e:e8:fa:63:28:
dc:f8:3e:3a:f1:8a:6f:40:7d:6e:88:41:bf:d8:b3:
3a:0f:e9:58:c5:73:dc:83:3d:d1:cd:0a:ee:80:08:
a4:a5:9e:5a:ca:dd:29:50:82:35:89:de:5d:3a:82:
f7:7a:5c:94:d5:6a:5d:43:14:b3:ce:19:2d:5c:0e:
53:78:e1:24:e9:6f:96:3c:3f:62:06:17:37:0d:b7:
78:67:6f:7d:24:a2:fb:60:f1:67:d2:01:74:46:0a:
f6:e0:5c:12:f5:f3:80:e2:74:17:c7:23:9d:ab:d6:
d8:8b:2f:70:53:4a:14:e2:a9:e6:60:f2:67:da:22:
d8:71:f5:8d:bc:b8:d9:ec:b1:f9:db:ab:ce:58:09:
88:57:d6:f8:1f:3a:c0:bf:f6:9e:4c:5d:c8:42:d1:
ab:03:fb:6d:8a:d7:7c:44:4e:9a:14:d9:46:07:42:
64:83:fd:ae:14:9e:a2:15:9e:63:da:c1:47:06:85:
63:da:4e:98:ca:c2:a9:b2:82:c8:fb:68:06:10:77:
c1:36:90:32:9c:76:b5:b8:27:c2:96:0e:f7:8c:0c:
a9:b0:c0:22:75:8b:4b:a0:28:1f:ee:4b:bf:b5:11:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:6D:32:3C:C3:40:B1:A4:E1:05:A2:A9:19:AB:C8:67:EF:65:44
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:18:c4:15:51:ff:2f:21:cc:5b:9b:a6:13:78:69:83:cc:
11:73:4e:ea:95:20:f3:81:16:96:d1:0b:c6:ca:e8:32:ed:30:
84:5e:e1:e3:c9:5a:31:4c:89:f4:49:d0:7a:df:8a:9e:05:7d:
5f:29:b0:53:e9:93:19:da:21:84:f5:55:b4:f5:36:39:ff:60:
05:0d:cc:3e:cf:07:f7:7f:dd:6d:30:ab:e0:92:b0:70:07:4d:
7c:5c:29:83:f1:f5:fd:ea:6d:a2:e4:7d:a2:40:21:66:89:46:
60:ea:cc:45:ad:d0:ab:59:e1:2b:df:b6:b5:da:2a:35:a4:83:
99:9a:49:9e:4f:cc:e2:50:87:f8:94:01:f6:f7:99:46:f9:89:
25:70:c1:c1:d4:ba:5e:0e:34:9c:fb:84:4d:b1:3b:57:b4:d3:
80:cd:12:58:ec:c9:5c:0d:16:1e:b2:1f:5e:06:78:a6:fc:5a:
e3:88:1c:59:71:c8:bf:11:8e:f4:c0:d0:d4:0e:d1:0c:57:bf:
89:08:5d:c3:46:45:d1:51:08:4e:de:84:dd:ca:71:54:9e:c2:
fb:49:ff:1a:85:b6:48:44:a6:29:3b:83:8c:d5:3b:01:36:23:
ea:db:95:8e:88:71:7a:f3:90:f6:e7:59:5f:cb:87:82:06:ad:
25:dd:87:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qX8pPTWgvDrt1yHA6YiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3
Nzc5ZDYwHhcNMjUwMTMxMTQwMDEyWhcNMjUwMjAxMTQwMDEyWjAzMTEwLwYDVQQD
EygzMzIxNmQzMjNjYzM0MGIxYTRlMTA1YTJhOTE5YWJjODY3ZWY2NTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphINttrgPpbnB2KQSkVnsfUsneaN
xkRUDuj6Yyjc+D468YpvQH1uiEG/2LM6D+lYxXPcgz3RzQrugAikpZ5ayt0pUII1
id5dOoL3elyU1WpdQxSzzhktXA5TeOEk6W+WPD9iBhc3Dbd4Z299JKL7YPFn0gF0
Rgr24FwS9fOA4nQXxyOdq9bYiy9wU0oU4qnmYPJn2iLYcfWNvLjZ7LH526vOWAmI
V9b4HzrAv/aeTF3IQtGrA/ttitd8RE6aFNlGB0Jkg/2uFJ6iFZ5j2sFHBoVj2k6Y
ysKpsoLI+2gGEHfBNpAynHa1uCfClg73jAypsMAidYtLoCgf7ku/tRFz8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMhbTI8w0CxpOEFoqkZq8hn72VEMB8GA1UdIwQY
MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt
NTI0YzIxMDljYjA1LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1
LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/kYxBVR
/y8hzFubphN4aYPMEXNO6pUg84EWltELxsroMu0whF7h48laMUyJ9EnQet+KngV9
XymwU+mTGdohhPVVtPU2Of9gBQ3MPs8H93/dbTCr4JKwcAdNfFwpg/H1/eptouR9
okAhZolGYOrMRa3Qq1nhK9+2tdoqNaSDmZpJnk/M4lCH+JQB9veZRvmJJXDBwdS6
Xg40nPuETbE7V7TTgM0SWOzJXA0WHrIfXgZ4pvxa44gcWXHIvxGO9MDQ1A7RDFe/
iQhdw0ZF0VEITt6E3cpxVJ7C+0n/GoW2SESmKTuDjNU7ATYj6tuVjohxevOQ9udZ
X8uHggatJd2HtQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:11 2025 by rpki-client