Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: BGXIahSv0kYcW3vihEL3+9wnkyDFTz4Y6KQ3cnNDMUI=
Subject key identifier: D9:B8:3B:90:9E:82:51:80:96:42:A0:83:6E:AD:E3:9C:71:64:81:44
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 0194BD4EA1B7EA9773D427EC9FE59B874445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: dbHFbdpcUOAC8cVYUFnN5FY/0MHlOzBgNp50gH5YrXU=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:b7:ea:97:73:d4:27:ec:9f:e5:9b:87:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=d9b83b909e8251809642a0836eade39c71648144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:1a:b0:84:a0:dc:d3:85:c7:f2:10:20:43:
ea:bb:2e:ff:de:8e:e1:9c:8d:7b:17:e1:6f:55:40:
70:42:e1:79:c5:3e:e6:65:57:08:75:c3:b9:60:38:
15:b4:b8:6b:af:3f:3f:14:01:4a:99:79:4f:ea:09:
85:4b:30:2d:4d:7d:1e:cd:7e:6b:52:bc:05:92:d3:
68:ca:f0:0a:ac:b7:6c:93:d5:36:da:b0:d0:32:1d:
ac:98:6a:cf:0c:ba:9c:a5:15:bf:ba:72:ba:b0:31:
11:17:2d:f6:87:15:2d:81:1b:5a:ab:48:ab:41:1e:
71:dc:4a:cc:41:6b:4c:b8:a8:ca:27:d6:70:ac:13:
bc:24:58:51:e9:25:93:b6:42:59:0f:51:13:7b:86:
07:39:f2:97:90:48:d8:a8:31:cb:f9:7d:3b:9d:9f:
f7:30:69:6e:d0:2d:0b:ad:dc:d9:8b:83:41:86:4b:
33:3b:03:96:24:f6:58:56:ab:9c:11:11:31:d1:b3:
e9:7f:d0:ab:0c:b1:23:9e:01:28:b1:be:6c:36:aa:
f8:e3:71:13:18:51:f7:63:7e:bb:6f:23:75:4a:02:
45:ce:67:75:91:50:02:8a:58:2e:2f:1d:4c:55:90:
0f:25:42:bf:14:0e:b0:63:cf:0c:2e:1b:f0:21:50:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:3B:90:9E:82:51:80:96:42:A0:83:6E:AD:E3:9C:71:64:81:44
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:a0:6b:3b:c2:7c:af:9e:29:e7:e0:ff:ac:cd:fb:4c:80:
6c:0c:bf:0c:de:1e:78:9f:51:8e:67:c0:44:44:7e:f5:1b:4d:
4f:5a:98:44:3e:cc:73:8e:96:00:54:a8:01:c3:1d:36:18:28:
d8:5a:75:15:96:01:de:c4:0e:38:28:6a:63:8b:c4:85:e9:20:
42:d0:f5:ee:58:8a:0e:7d:8c:f6:1d:17:88:bf:ab:89:6f:fc:
fb:cf:de:b3:3e:52:86:a5:98:93:2f:28:02:f8:59:b7:e6:94:
5d:46:ca:79:27:89:a1:fd:3c:22:72:eb:cd:b7:74:28:68:57:
16:65:f0:f2:3d:ae:67:5e:b0:32:6c:e4:81:9c:02:be:84:94:
0d:93:4e:ce:97:5d:fb:d5:8d:a6:62:2d:05:4f:6b:85:6a:82:
c3:0a:b7:5c:11:cd:af:53:42:a2:f1:9b:cf:2b:13:35:18:49:
48:a0:25:02:fe:97:f8:2d:fc:c1:6a:83:8b:99:f5:e6:20:cb:
74:da:a2:c3:f4:b4:6c:df:f3:a2:d3:c6:9a:ab:f6:76:3d:42:
ce:41:80:0f:78:97:07:67:d7:b7:ea:bc:46:bb:fc:33:84:b1:
ac:b6:92:c0:7f:3c:e0:e4:bd:57:ec:b5:74:c7:e3:64:54:51:
aa:90:ee:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqG36pdz1Cfsn+Wbh0RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3
YzYzMDIwHhcNMjUwMTMxMTcwMDM0WhcNMjUwMjAxMTcwMDM0WjAzMTEwLwYDVQQD
EyhkOWI4M2I5MDllODI1MTgwOTY0MmEwODM2ZWFkZTM5YzcxNjQ4MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVcasISg3NOFx/IQIEPquy7/3o7h
nI17F+FvVUBwQuF5xT7mZVcIdcO5YDgVtLhrrz8/FAFKmXlP6gmFSzAtTX0ezX5r
UrwFktNoyvAKrLdsk9U22rDQMh2smGrPDLqcpRW/unK6sDERFy32hxUtgRtaq0ir
QR5x3ErMQWtMuKjKJ9ZwrBO8JFhR6SWTtkJZD1ETe4YHOfKXkEjYqDHL+X07nZ/3
MGlu0C0LrdzZi4NBhkszOwOWJPZYVqucEREx0bPpf9CrDLEjngEosb5sNqr443ET
GFH3Y367byN1SgJFzmd1kVACilguLx1MVZAPJUK/FA6wY88MLhvwIVCawwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm4O5CeglGAlkKgg26t45xxZIFEMB8GA1UdIwQY
MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et
ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw
LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeKgazvC
fK+eKefg/6zN+0yAbAy/DN4eeJ9RjmfARER+9RtNT1qYRD7Mc46WAFSoAcMdNhgo
2Fp1FZYB3sQOOChqY4vEhekgQtD17liKDn2M9h0XiL+riW/8+8/esz5ShqWYky8o
AvhZt+aUXUbKeSeJof08InLrzbd0KGhXFmXw8j2uZ16wMmzkgZwCvoSUDZNOzpdd
+9WNpmItBU9rhWqCwwq3XBHNr1NCovGbzysTNRhJSKAlAv6X+C38wWqDi5n15iDL
dNqiw/S0bN/zotPGmqv2dj1CzkGAD3iXB2fXt+q8Rrv8M4SxrLaSwH884OS9V+y1
dMfjZFRRqpDuhA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:48 2025 by rpki-client