Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: MuyWO3NdFKKnuxJA34bYJHSRkr7PZDqPfxYMqdjgmtg=
Subject key identifier: 31:DB:D0:A7:B7:2B:76:64:AA:D7:57:59:0F:26:DF:BB:56:D2:1B:43
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0194BCE098D0E51082C139EDB932FD1A06EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
2: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
3: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: Xi705rHLfAWJruys0od5eTazBKalm8qhB94GrDS7IcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:d0:e5:10:82:c1:39:ed:b9:32:fd:1a:06:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=31dbd0a7b72b7664aad757590f26dfbb56d21b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:13:18:8e:01:ee:f0:51:51:8b:d6:10:6d:
08:ea:43:fa:06:7e:8c:c2:a7:59:e5:d7:08:42:4c:
20:f9:d0:64:e8:1f:fe:8c:61:11:fe:91:1e:a5:7e:
62:e1:6c:df:16:84:eb:d7:01:9d:c1:16:2a:b7:9e:
bf:62:d9:9d:53:37:3d:fd:0a:7e:82:67:1a:4e:b2:
a0:ef:ee:26:40:92:33:9c:4e:51:c3:d8:b7:cb:aa:
89:fc:4d:05:00:b5:4d:73:91:eb:5d:68:bb:ea:1e:
0f:5e:b1:81:2d:6e:cb:64:1c:e8:00:de:ad:95:8e:
9d:97:e7:cd:0a:d0:8d:71:d0:ca:9d:62:07:33:e3:
23:bb:fe:9c:93:a6:8a:8f:74:23:59:a6:05:10:b5:
56:6f:65:33:e6:05:e7:38:34:55:4e:70:1c:31:d8:
22:9f:b5:0d:b9:d4:b8:b0:1c:76:02:98:c7:3b:0b:
fd:99:cc:6a:d9:91:63:44:14:87:cb:9c:a4:6a:e7:
d6:35:eb:ff:f8:59:81:c4:fd:3c:ee:5e:69:8f:3e:
d9:92:cd:62:d4:98:a4:cd:86:9d:66:f4:f1:50:02:
b8:95:fa:dd:63:a7:bc:cf:1c:9b:21:a7:a2:90:42:
68:98:31:d4:60:37:e6:bf:88:ec:e5:22:73:5c:a5:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:D0:A7:B7:2B:76:64:AA:D7:57:59:0F:26:DF:BB:56:D2:1B:43
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dd:3e:ae:5c:03:5e:b0:1b:a8:34:2d:8d:0d:de:17:8c:3a:
88:38:4f:4a:fe:d2:3c:d2:c9:87:da:bc:00:d2:e8:e7:a6:cd:
b9:2f:28:06:3f:a6:3f:eb:c9:18:b6:8c:d5:3a:e1:9e:fa:b5:
32:0c:d9:2e:18:fb:f1:b8:d3:26:58:b9:62:30:b2:99:89:ab:
4f:e0:64:73:96:49:48:3c:f0:75:94:7d:ed:fe:17:b3:11:39:
5f:cc:45:70:f8:5e:67:eb:14:4a:ff:cc:4f:31:e5:2e:81:81:
ba:f1:78:4d:94:a8:81:77:44:4c:a3:ab:da:e9:d2:2b:f7:84:
46:9e:4e:0a:e8:7e:04:3d:ca:ac:22:08:fa:f4:40:69:9f:5f:
ff:31:05:a7:3c:3e:fb:f1:0b:1f:32:8b:8c:ee:6f:69:29:27:
6d:c5:31:35:06:1c:f0:c8:4e:cc:7b:07:07:44:d2:54:4d:0a:
0e:ca:bc:20:a0:38:07:a8:98:a4:24:ba:92:dd:a6:8d:14:08:
95:cc:40:ad:19:43:28:0b:9a:09:ac:ac:4c:69:2c:f9:0c:69:
da:f4:7f:d3:a3:d3:f3:1a:23:95:d8:ac:2c:02:3d:b3:df:a7:
f2:01:e1:4c:35:d9:03:39:dd:17:da:5f:39:19:47:79:2c:c2:
03:91:f1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JjQ5RCCwTntuTL9GgbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjY2NDllNGYyYzc5NWZmZTU0MGY5ZDk3ZjI2ZTk5YzVj
NWUzZmYwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EygzMWRiZDBhN2I3MmI3NjY0YWFkNzU3NTkwZjI2ZGZiYjU2ZDIxYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4gTGI4B7vBRUYvWEG0I6kP6Bn6M
wqdZ5dcIQkwg+dBk6B/+jGER/pEepX5i4WzfFoTr1wGdwRYqt56/YtmdUzc9/Qp+
gmcaTrKg7+4mQJIznE5Rw9i3y6qJ/E0FALVNc5HrXWi76h4PXrGBLW7LZBzoAN6t
lY6dl+fNCtCNcdDKnWIHM+Mju/6ck6aKj3QjWaYFELVWb2Uz5gXnODRVTnAcMdgi
n7UNudS4sBx2ApjHOwv9mcxq2ZFjRBSHy5ykaufWNev/+FmBxP087l5pjz7Zks1i
1JikzYadZvTxUAK4lfrdY6e8zxybIaeikEJomDHUYDfmv4js5SJzXKVtiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHb0Ke3K3ZkqtdXWQ8m37tW0htDMB8GA1UdIwQY
MBaAFJ0mZJ5PLHlf/lQPnZfybpnFxeP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEt
ZWE0NjljODYwZGM2LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEtZWE0NjljODYwZGM2
LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjd0+rlwD
XrAbqDQtjQ3eF4w6iDhPSv7SPNLJh9q8ANLo56bNuS8oBj+mP+vJGLaM1Trhnvq1
MgzZLhj78bjTJli5YjCymYmrT+Bkc5ZJSDzwdZR97f4XsxE5X8xFcPheZ+sUSv/M
TzHlLoGBuvF4TZSogXdETKOr2unSK/eERp5OCuh+BD3KrCII+vRAaZ9f/zEFpzw+
+/ELHzKLjO5vaSknbcUxNQYc8MhOzHsHB0TSVE0KDsq8IKA4B6iYpCS6kt2mjRQI
lcxArRlDKAuaCaysTGks+Qxp2vR/06PT8xojldisLAI9s9+n8gHhTDXZAzndF9pf
ORlHeSzCA5HxCw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:26 2025 by rpki-client