Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json)
Hash identifier: NRLg+Sv8JntFnCIkBF3KntUSVrKxpcHp1m9sfIfs6uM=
Subject key identifier: 1D:0E:85:5C:27:AC:65:E3:E6:00:C9:CB:BC:BD:B7:08:C2:54:F1:A6
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194BCE0CCA7BA59CE65F11EE674BE6E6A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
Manifest number: 1421
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=)
2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=)
3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=)
4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=)
5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=)
6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=)
7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=)
8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: Tm9LPMbgdgt5mRI63sisX7+FT8hs3lgyCMXqb57O8ck=)
9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=)
10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=)
11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=)
12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=)
13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=)
14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=)
15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=)
16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=)
17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=)
18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=)
19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=)
20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:a7:ba:59:ce:65:f1:1e:e6:74:be:6e:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=1d0e855c27ac65e3e600c9cbbcbdb708c254f1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:05:d1:18:4d:c0:28:62:33:9e:23:fe:2e:
69:a0:13:33:ed:35:08:aa:85:5d:66:71:a5:51:52:
c0:00:17:a6:9e:ce:b0:d2:48:3e:f8:09:43:86:0f:
4c:41:77:49:34:a6:97:36:ab:ec:eb:41:ef:20:8a:
35:4d:a4:f6:cc:c0:ac:0d:d8:8e:d1:1c:f3:7d:c5:
75:fa:f8:85:bc:9c:29:ba:38:04:f4:b9:25:90:c2:
f4:71:3d:4a:de:1f:30:1a:06:f9:31:93:4d:47:5f:
a9:48:5b:b9:b3:8a:29:dd:52:de:e1:6a:a8:54:d5:
b3:a3:55:f3:0a:0c:df:5b:3e:d6:c5:02:dd:8b:98:
cb:83:5b:df:59:a1:3e:b3:1a:87:fe:64:53:2c:8f:
c7:58:37:0f:21:93:99:f9:db:b5:3d:61:cd:54:c1:
11:08:dd:11:9f:f4:60:1e:f6:31:56:bb:00:e7:de:
4c:42:ef:1c:a7:f3:29:88:54:c5:5c:98:1e:3e:52:
a6:2d:bf:f6:61:5f:5e:d7:d0:94:22:a6:fd:ab:ea:
6d:36:aa:b5:98:5a:01:12:80:c5:e5:de:a6:44:e8:
41:af:33:b1:6d:73:a6:a8:fb:6a:1a:e7:b1:52:a3:
1f:98:eb:95:b6:76:7f:4a:88:c7:df:06:bd:a8:68:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0E:85:5C:27:AC:65:E3:E6:00:C9:CB:BC:BD:B7:08:C2:54:F1:A6
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:05:ab:11:5e:84:35:0c:e4:73:bb:43:5a:7e:1d:a5:e5:f5:
f7:70:0a:e6:e2:ce:bf:25:eb:bd:bc:60:88:31:43:e4:65:e5:
38:cf:13:5b:a1:e0:54:4c:3b:9c:a4:c7:a0:c8:38:e6:67:c7:
dd:31:8e:a2:71:d3:e9:d8:ce:13:87:26:f0:79:52:89:ad:ca:
d4:df:90:3c:5c:96:2e:2d:1e:62:e2:3f:4d:1d:0b:90:d2:84:
62:3e:3e:e8:b8:76:9a:f1:60:84:dd:4f:41:40:e8:c9:14:6e:
b1:72:e3:ea:e9:33:9f:31:61:20:8d:7b:e0:66:f0:77:1c:34:
bc:7f:9d:1c:a6:65:a2:0a:ed:de:7c:c0:fc:78:82:1a:1d:48:
19:9e:42:0a:74:96:90:3f:ee:ff:a5:7d:b6:5b:62:7b:0c:00:
31:d7:69:a9:49:5b:26:47:ab:da:42:bb:b0:7e:91:82:74:c9:
22:77:b3:94:47:98:e4:22:00:da:d4:85:97:bf:4f:65:8a:a3:
2d:b5:38:c3:da:d6:ee:d1:88:f5:9d:34:b4:ac:cd:0e:d8:27:
d4:b2:53:03:14:b8:cd:67:15:0e:0f:3d:6d:03:53:5d:7b:6b:
97:40:70:82:de:e9:bd:85:71:55:1b:ee:bc:a1:64:44:0f:ac:
90:b8:1f:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MynulnOZfEe5nS+bmpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3
NGM4N2QwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EygxZDBlODU1YzI3YWM2NWUzZTYwMGM5Y2JiY2JkYjcwOGMyNTRmMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8UF0RhNwChiM54j/i5poBMz7TUI
qoVdZnGlUVLAABemns6w0kg++AlDhg9MQXdJNKaXNqvs60HvIIo1TaT2zMCsDdiO
0RzzfcV1+viFvJwpujgE9LklkML0cT1K3h8wGgb5MZNNR1+pSFu5s4op3VLe4Wqo
VNWzo1XzCgzfWz7WxQLdi5jLg1vfWaE+sxqH/mRTLI/HWDcPIZOZ+du1PWHNVMER
CN0Rn/RgHvYxVrsA595MQu8cp/MpiFTFXJgePlKmLb/2YV9e19CUIqb9q+ptNqq1
mFoBEoDF5d6mROhBrzOxbXOmqPtqGuexUqMfmOuVtnZ/SojH3wa9qGjOsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0OhVwnrGXj5gDJy7y9twjCVPGmMB8GA1UdIwQY
MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt
MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx
LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQWrEV6E
NQzkc7tDWn4dpeX193AK5uLOvyXrvbxgiDFD5GXlOM8TW6HgVEw7nKTHoMg45mfH
3TGOonHT6djOE4cm8HlSia3K1N+QPFyWLi0eYuI/TR0LkNKEYj4+6Lh2mvFghN1P
QUDoyRRusXLj6ukznzFhII174Gbwdxw0vH+dHKZlogrt3nzA/HiCGh1IGZ5CCnSW
kD/u/6V9tltiewwAMddpqUlbJker2kK7sH6RgnTJInezlEeY5CIA2tSFl79PZYqj
LbU4w9rW7tGI9Z00tKzNDtgn1LJTAxS4zWcVDg89bQNTXXtrl0Bwgt7pvYVxVRvu
vKFkRA+skLgfGA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:03 2025 by rpki-client