Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: thAbskSBQ1RLKKnEKGaPl4mDIQ3pmA5hXChUncwTOiQ=
Subject key identifier: 4A:B2:27:4B:4C:2E:B1:7B:7F:7B:89:F5:5F:B3:E2:91:93:D6:87:53
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 0194BC72A5338620ABD2E0E21EB18B5647C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 0D9F
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: V9E4EEmIZA91jkQWaAoG5Q4PsrINCUMMWA49pN3AHtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a5:33:86:20:ab:d2:e0:e2:1e:b1:8b:56:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=4ab2274b4c2eb17b7f7b89f55fb3e29193d68753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:bf:67:4d:b9:56:46:e8:1c:31:54:15:e8:
c7:9e:1a:b0:df:59:27:ce:ef:99:c6:14:4a:a7:5a:
8e:a0:7a:49:08:3d:b4:ba:4c:e1:f2:ca:41:75:97:
0c:ca:c5:b9:ef:ab:60:65:1e:65:10:3c:d3:a2:01:
19:20:7c:74:8f:bd:b5:9e:12:84:4c:34:2d:eb:a0:
5e:9b:2a:c5:bc:f3:cd:8f:8e:cc:cd:d3:8b:58:a0:
0b:cc:e5:5a:1d:95:46:44:64:26:97:e4:8e:12:11:
03:a1:ca:ff:1e:22:6b:3d:c4:c4:73:98:d6:22:25:
7e:ff:fb:8f:8b:f3:86:4a:70:84:b0:9b:c0:ee:2a:
76:23:8c:72:98:61:ba:ac:5b:e4:14:08:47:19:10:
62:00:47:66:3d:f8:cf:e3:4d:f9:20:fb:7a:c1:02:
bd:e1:f0:12:0e:99:86:bc:63:72:30:b0:85:09:d5:
7d:7b:d4:0f:a3:c6:9c:e8:f9:a3:2f:de:a3:5a:ed:
4b:26:22:be:06:65:05:59:5b:50:0b:14:55:fa:bd:
69:bb:e7:60:06:a4:15:8b:23:55:c3:ae:f3:cb:40:
27:3c:32:6c:38:4b:19:e2:e4:a5:e9:da:3f:0e:50:
23:f1:a6:68:ec:ef:85:55:be:0c:6d:26:86:5e:ea:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:27:4B:4C:2E:B1:7B:7F:7B:89:F5:5F:B3:E2:91:93:D6:87:53
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:19:c2:bf:de:2b:19:67:49:ea:25:b2:22:87:53:ad:73:4b:
d7:12:21:db:54:6e:d1:a2:48:c1:99:25:5c:7e:ad:a6:29:d6:
e7:57:5a:16:b3:a0:1d:a7:86:75:0a:a4:a8:d8:b7:ce:84:9f:
d3:d2:2d:d8:d6:78:c0:e8:b4:84:17:d9:f2:1a:41:4f:56:7e:
6b:f0:be:a3:3c:57:d2:72:5d:ac:80:22:a0:25:14:50:74:07:
d4:92:e8:a6:b5:35:02:b1:ea:f1:fc:32:22:90:73:33:a0:c6:
9f:24:58:67:f6:c8:90:a0:d4:8e:0d:7d:df:f7:18:7f:e7:9c:
9d:d8:1f:a2:c5:e8:00:bd:92:96:2f:dd:fb:70:12:65:c9:cb:
56:8d:bd:e7:28:f1:2e:52:8b:f6:1c:a2:c6:50:9d:2e:02:09:
d1:f0:e1:a1:e1:2f:7c:30:fa:fa:28:c0:12:e8:b2:6a:21:8b:
10:f9:85:a5:a8:e0:6c:51:f4:fd:78:25:3b:ce:87:e8:18:fc:
33:04:29:c8:8a:7f:b7:a9:34:fc:6d:bd:38:70:35:84:57:91:
bd:fc:cb:bb:56:de:aa:32:ff:e3:7a:26:0f:3a:f0:18:77:63:
71:fe:70:d2:bc:32:7f:b8:d3:50:4f:97:be:6a:52:7a:c2:18:
60:54:6e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqUzhiCr0uDiHrGLVkfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzQ5NzIwMDQwMGIwZjFhYWU3YTg3ZmNhMzZmMDc3ZTBl
ZDYyY2UwHhcNMjUwMTMxMTMwMDE3WhcNMjUwMjAxMTMwMDE3WjAzMTEwLwYDVQQD
Eyg0YWIyMjc0YjRjMmViMTdiN2Y3Yjg5ZjU1ZmIzZTI5MTkzZDY4NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklS/Z025VkboHDFUFejHnhqw31kn
zu+ZxhRKp1qOoHpJCD20ukzh8spBdZcMysW576tgZR5lEDzTogEZIHx0j721nhKE
TDQt66BemyrFvPPNj47MzdOLWKALzOVaHZVGRGQml+SOEhEDocr/HiJrPcTEc5jW
IiV+//uPi/OGSnCEsJvA7ip2I4xymGG6rFvkFAhHGRBiAEdmPfjP4035IPt6wQK9
4fASDpmGvGNyMLCFCdV9e9QPo8ac6PmjL96jWu1LJiK+BmUFWVtQCxRV+r1pu+dg
BqQViyNVw67zy0AnPDJsOEsZ4uSl6do/DlAj8aZo7O+FVb4MbSaGXurQFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqyJ0tMLrF7f3uJ9V+z4pGT1odTMB8GA1UdIwQY
MBaAFDY0lyAEALDxqueof8o28Hfg7WLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEt
MTlhMTk5OWQ5ZDdlLzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEtMTlhMTk5OWQ5ZDdl
LzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBnCv94r
GWdJ6iWyIodTrXNL1xIh21Ru0aJIwZklXH6tpinW51daFrOgHaeGdQqkqNi3zoSf
09It2NZ4wOi0hBfZ8hpBT1Z+a/C+ozxX0nJdrIAioCUUUHQH1JLoprU1ArHq8fwy
IpBzM6DGnyRYZ/bIkKDUjg193/cYf+ecndgfosXoAL2Sli/d+3ASZcnLVo295yjx
LlKL9hyixlCdLgIJ0fDhoeEvfDD6+ijAEuiyaiGLEPmFpajgbFH0/XglO86H6Bj8
MwQpyIp/t6k0/G29OHA1hFeRvfzLu1beqjL/43omDzrwGHdjcf5w0rwyf7jTUE+X
vmpSesIYYFRuCQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:40 2025 by rpki-client