Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
File: NFuHElrLAlH6z9jAqVtIvCJSIUY.mft (raw, json)
Hash identifier: FJU+w5fIzBYx5RgRgAkhQsDFjgE1LtwW08X5C6DiqKk=
Subject key identifier: 0B:98:C8:67:95:D0:97:B3:6A:3C:5F:F9:99:DE:3B:38:40:13:DA:85
Authority key identifier: 34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
Certificate issuer: /CN=345b87125acb0251facfd8c0a95b48bc22522146
Certificate serial: 0194BD174BF27F235145C62C7CD9E820A294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
Manifest number: 08A5
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa (hash: PznuBPAbTWwdWPU+SDJg6l9STDdceLsRjWJ3izhl9/o=)
2: NFuHElrLAlH6z9jAqVtIvCJSIUY.crl (hash: 7xsaxRjVnEZMNTISq9Da1aLTAEiF8BZ6mJet0cBoo6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:f2:7f:23:51:45:c6:2c:7c:d9:e8:20:a2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b87125acb0251facfd8c0a95b48bc22522146
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=0b98c86795d097b36a3c5ff999de3b384013da85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:2e:b9:51:95:fd:e7:20:3f:4d:0e:b4:a0:
87:f9:97:e7:19:87:24:5a:64:6a:56:23:11:cd:f5:
c9:63:a3:7a:1e:bb:c7:4d:67:3a:19:ed:d6:8f:0b:
15:54:aa:57:b7:5d:ee:d9:bc:c3:94:c1:6f:c1:c2:
f5:df:a6:51:2a:01:2a:d5:5e:e5:f7:4e:f8:b8:26:
00:a2:53:3f:28:37:f6:28:29:0a:00:98:9d:5a:b1:
56:47:4d:6b:ee:19:a3:ca:5a:a9:a3:37:b9:c3:a2:
4b:92:b3:75:9f:98:13:c4:50:9a:9f:49:67:e2:73:
ae:63:79:7c:b4:82:cf:d9:f0:86:bf:e3:ab:8b:5f:
3c:55:84:d3:da:40:4b:ae:6c:51:8e:b8:3c:ae:52:
14:7a:8b:f0:1a:3b:1f:a0:bd:ad:ae:64:08:6e:b8:
2f:a6:44:d7:d5:92:04:5b:a6:ae:b6:6e:fb:54:28:
99:08:8f:71:49:4d:75:88:20:f1:3a:d5:21:e2:01:
9c:e6:06:cb:22:4a:1e:32:4d:d2:11:29:49:6a:9c:
3b:46:cb:43:eb:ac:e6:f0:d9:79:e6:d2:37:0e:65:
8c:92:a2:a6:0b:1c:02:35:3c:29:00:63:a7:ac:ad:
7d:33:e0:6c:6b:0c:f4:0b:e2:6c:dd:f7:46:79:45:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:C8:67:95:D0:97:B3:6A:3C:5F:F9:99:DE:3B:38:40:13:DA:85
X509v3 Authority Key Identifier:
keyid:34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3a:01:3d:de:e4:70:e5:27:d0:15:d2:98:db:04:1f:de:17:
9f:ba:c7:57:90:97:52:f6:9e:3b:4b:42:30:60:cf:c7:4a:b3:
97:f3:8e:0b:fb:4e:8f:a2:ac:ac:d5:38:26:96:9a:ad:42:6b:
ee:5a:82:2d:7f:97:b6:83:c5:5b:e7:d3:33:9a:b8:f0:d0:f2:
e7:8f:f4:7a:7b:4e:d7:68:3c:57:e5:39:7c:1c:f2:87:c3:7e:
32:6f:72:a6:dd:36:56:f8:4e:de:20:5d:42:41:1e:f6:a2:d6:
fd:d5:13:36:78:30:45:42:a3:14:45:20:49:ff:05:0c:c8:69:
f2:82:cd:b0:93:5b:c6:a6:20:f3:67:d3:f5:c9:d4:34:3f:62:
f8:81:fd:e0:08:b4:6a:61:0f:2d:27:ef:f9:29:6e:cf:42:84:
e6:a0:25:54:01:ea:33:4c:83:a3:d9:00:bf:ec:18:e0:f9:21:
f5:25:1e:08:1e:b5:a8:f4:b7:80:c0:7b:a4:3c:e4:0e:b9:22:
c3:f8:22:29:2b:83:18:f3:46:91:9f:d6:96:53:09:ed:4a:34:
ea:cf:06:8a:19:5c:78:e7:f8:51:15:19:da:9d:dd:93:c1:7d:
d9:d1:2c:84:b2:bf:b1:54:05:9a:bc:bd:75:18:f6:17:fe:b3:
bd:60:ac:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0vyfyNRRcYsfNnoIKKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWI4NzEyNWFjYjAyNTFmYWNmZDhjMGE5NWI0OGJjMjI1
MjIxNDYwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
EygwYjk4Yzg2Nzk1ZDA5N2IzNmEzYzVmZjk5OWRlM2IzODQwMTNkYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmkuuVGV/ecgP00OtKCH+ZfnGYck
WmRqViMRzfXJY6N6HrvHTWc6Ge3WjwsVVKpXt13u2bzDlMFvwcL136ZRKgEq1V7l
9074uCYAolM/KDf2KCkKAJidWrFWR01r7hmjylqpoze5w6JLkrN1n5gTxFCan0ln
4nOuY3l8tILP2fCGv+Ori188VYTT2kBLrmxRjrg8rlIUeovwGjsfoL2trmQIbrgv
pkTX1ZIEW6autm77VCiZCI9xSU11iCDxOtUh4gGc5gbLIkoeMk3SESlJapw7RstD
66zm8Nl55tI3DmWMkqKmCxwCNTwpAGOnrK19M+Bsawz0C+Js3fdGeUWW5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuYyGeV0Jezajxf+ZneOzhAE9qFMB8GA1UdIwQY
MBaAFDRbhxJaywJR+s/YwKlbSLwiUiFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZ1SEVsckxBbEg2ejlqQXFWdEl2Q0pTSVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MTc4NmEtNDYzNy00MzY0LWE3NDIt
OTI5Mjg3ODcyYTUzLzEvTkZ1SEVsckxBbEg2ejlqQXFWdEl2Q0pTSVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83MTc4NmEtNDYzNy00MzY0LWE3NDItOTI5Mjg3ODcyYTUz
LzEvTkZ1SEVsckxBbEg2ejlqQXFWdEl2Q0pTSVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZToBPd7k
cOUn0BXSmNsEH94Xn7rHV5CXUvaeO0tCMGDPx0qzl/OOC/tOj6KsrNU4JpaarUJr
7lqCLX+XtoPFW+fTM5q48NDy54/0entO12g8V+U5fBzyh8N+Mm9ypt02VvhO3iBd
QkEe9qLW/dUTNngwRUKjFEUgSf8FDMhp8oLNsJNbxqYg82fT9cnUND9i+IH94Ai0
amEPLSfv+Sluz0KE5qAlVAHqM0yDo9kAv+wY4Pkh9SUeCB61qPS3gMB7pDzkDrki
w/giKSuDGPNGkZ/WllMJ7Uo06s8GihlceOf4URUZ2p3dk8F92dEshLK/sVQFmry9
dRj2F/6zvWCs8w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:59 2025 by rpki-client