Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: n7tw+b/a/122LvBK2FVlm4nqeKkF5/o4U7KxXMpiPBo=
Subject key identifier: 7A:C2:98:D0:8A:B4:A9:5C:00:D1:D3:AA:FB:0B:22:4E:A5:F9:2E:E1
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 0194BBCE07328192941BBD1F80C5183C768A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: WAvK2tVO1ScrGUxYMNcJJRnpk/Mkv8nNinl8He00lWE=)
2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:32:81:92:94:1b:bd:1f:80:c5:18:3c:76:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=7ac298d08ab4a95c00d1d3aafb0b224ea5f92ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:62:b7:c8:b6:09:db:62:36:58:7f:3e:ee:
d1:d6:ee:c1:0b:29:a8:5c:fd:c5:1a:bf:a7:fd:4c:
75:b4:01:e5:9b:d9:c0:2e:d2:33:ab:69:76:5a:ef:
26:43:a5:72:dc:c8:9d:9e:ee:57:b6:85:50:6a:bb:
3f:78:7f:ee:7b:61:cf:81:02:a1:43:ba:99:17:c8:
46:ed:b5:30:fb:ca:b6:40:46:1a:b6:23:4a:d4:0f:
f8:cd:3d:6c:0c:01:65:0b:2a:82:b6:1d:ed:f6:75:
a6:8b:2c:fa:de:cb:9a:5b:ee:79:58:5a:77:e5:03:
fa:94:bc:53:52:69:da:f0:81:7a:2c:25:38:00:eb:
2a:a5:87:4b:1e:0a:ca:24:3f:70:25:bb:a6:a4:4d:
af:5e:18:77:5c:bc:40:a5:e5:c0:fc:94:6d:87:3f:
f1:ce:d1:95:e3:8a:09:4e:33:21:56:ab:3d:08:e3:
56:fb:2d:86:d0:4f:68:d7:ca:cc:a3:37:1f:32:5b:
e9:fe:58:e2:4c:f2:d4:d8:9b:4c:a2:ba:c7:6a:9d:
01:f6:1e:eb:92:db:80:13:cc:4f:78:4c:43:99:ba:
b1:b6:95:4d:36:7c:41:9e:2e:5e:b3:aa:b1:42:f1:
33:e0:46:36:fc:4c:3c:88:e6:8a:d2:95:7a:a2:96:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C2:98:D0:8A:B4:A9:5C:00:D1:D3:AA:FB:0B:22:4E:A5:F9:2E:E1
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:3c:bd:45:74:fa:b3:31:f5:f3:f4:41:ca:88:a5:49:33:
31:df:a7:a2:a4:82:f3:3f:8b:dc:54:98:b0:f5:25:92:b6:f2:
16:4e:1c:c7:d7:01:94:78:00:7b:e6:46:08:08:d3:66:8d:7d:
57:c5:0b:30:3e:a5:38:2e:0d:15:8c:8e:53:98:88:d5:15:dc:
93:90:bf:f4:49:57:7a:bc:64:52:d4:f6:25:eb:2d:ad:31:a5:
49:b2:06:b3:68:2c:77:81:b1:25:67:13:ab:da:d8:79:5d:2c:
82:80:cb:ad:4b:0c:e6:2e:c2:1b:1c:c1:fb:f5:96:65:de:66:
62:13:3e:26:8b:01:f5:27:42:e2:b4:f2:30:f0:bb:af:15:99:
78:f2:89:db:34:cd:27:19:e8:d1:b0:ca:f3:9d:14:9c:71:99:
1b:d7:5d:dc:0b:3f:02:a4:ff:d8:f5:c6:d5:b4:f6:91:58:09:
21:37:7d:d2:15:96:81:5d:3d:82:6f:b4:13:17:c8:5d:8e:5c:
e6:a3:f7:63:5e:f8:cb:3f:2b:7a:c9:b3:d2:05:d9:42:f7:a8:
08:32:ac:24:bc:bf:d4:46:f2:17:ae:af:e8:1b:a9:ae:77:56:
82:c7:4b:97:ee:ad:55:0c:50:8a:de:1d:78:b8:ac:89:fe:a4:
9b:4f:eb:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgcygZKUG70fgMUYPHaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3
MGZlYjAwHhcNMjUwMTMxMTAwMDI5WhcNMjUwMjAxMTAwMDI5WjAzMTEwLwYDVQQD
Eyg3YWMyOThkMDhhYjRhOTVjMDBkMWQzYWFmYjBiMjI0ZWE1ZjkyZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiddit8i2CdtiNlh/Pu7R1u7BCymo
XP3FGr+n/Ux1tAHlm9nALtIzq2l2Wu8mQ6Vy3Midnu5XtoVQars/eH/ue2HPgQKh
Q7qZF8hG7bUw+8q2QEYatiNK1A/4zT1sDAFlCyqCth3t9nWmiyz63suaW+55WFp3
5QP6lLxTUmna8IF6LCU4AOsqpYdLHgrKJD9wJbumpE2vXhh3XLxApeXA/JRthz/x
ztGV44oJTjMhVqs9CONW+y2G0E9o18rMozcfMlvp/ljiTPLU2JtMorrHap0B9h7r
ktuAE8xPeExDmbqxtpVNNnxBni5es6qxQvEz4EY2/Ew8iOaK0pV6opb9FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrCmNCKtKlcANHTqvsLIk6l+S7hMB8GA1UdIwQY
MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt
YmU3NzBlMWU2YzEzLzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz
LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2k8vUV0
+rMx9fP0QcqIpUkzMd+noqSC8z+L3FSYsPUlkrbyFk4cx9cBlHgAe+ZGCAjTZo19
V8ULMD6lOC4NFYyOU5iI1RXck5C/9ElXerxkUtT2JestrTGlSbIGs2gsd4GxJWcT
q9rYeV0sgoDLrUsM5i7CGxzB+/WWZd5mYhM+JosB9SdC4rTyMPC7rxWZePKJ2zTN
Jxno0bDK850UnHGZG9dd3As/AqT/2PXG1bT2kVgJITd90hWWgV09gm+0ExfIXY5c
5qP3Y174yz8resmz0gXZQveoCDKsJLy/1EbyF66v6BuprndWgsdLl+6tVQxQit4d
eLisif6km0/r0A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:42 2025 by rpki-client