Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: Q9GAFRdY7L/VOH4l3A0nCzb1U2Vt6hd5jbL524eMu6E=
Subject key identifier: 0D:E5:0A:0E:D1:20:00:02:57:9C:31:82:9D:28:1F:86:E9:1A:F9:E0
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 0194BBCE7DE317251AD1005033CDE8540F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: cuWSnSfh2ktvFTkP+2pt5WBFZGxRqNnqPHmHw3jw+sc=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:e3:17:25:1a:d1:00:50:33:cd:e8:54:0f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=0de50a0ed1200002579c31829d281f86e91af9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:8d:0f:42:3a:c1:8e:59:32:74:57:bf:f4:
e4:2f:2a:4c:ee:3a:b0:7b:3a:a3:ad:72:f4:85:9d:
e4:8b:ef:40:dc:c0:81:2b:af:6e:f4:3c:90:63:33:
50:ac:c2:a4:16:a5:ca:89:57:6a:5c:0d:0a:cf:91:
a9:67:87:58:75:ee:1c:cf:3d:25:e9:fb:51:d9:5e:
ac:f4:08:b3:8d:ff:70:b0:d3:ed:a8:55:33:93:f2:
08:28:ea:9e:5b:4c:3a:a8:dc:8a:0f:f1:aa:ff:01:
13:e4:31:37:01:a4:51:ec:9c:11:7f:e1:c3:63:f5:
cf:e6:11:3c:ad:dd:7b:60:1a:8a:8f:83:66:36:f1:
c8:4b:63:2d:82:35:51:72:18:ce:eb:42:af:ec:5a:
2b:fe:ac:53:9c:6d:a0:cc:eb:d5:24:83:ce:e9:0b:
9d:20:35:51:d1:c8:f8:5a:c8:da:d2:a5:65:56:0d:
45:b4:f6:eb:08:9f:36:00:a8:cb:3f:d3:21:1e:57:
b9:c1:ed:d2:4b:fd:6d:b1:8d:71:b6:2f:55:38:f3:
e7:c2:44:51:03:6e:e9:4e:80:45:a0:af:3d:4d:d1:
4b:3f:b0:f9:69:b3:a8:77:e2:0a:c2:3a:18:91:f0:
a0:86:59:5a:27:63:65:75:cc:9e:49:3a:e4:c5:35:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:0A:0E:D1:20:00:02:57:9C:31:82:9D:28:1F:86:E9:1A:F9:E0
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:75:b8:88:7c:7a:67:e1:02:6a:81:42:61:c6:a4:90:4e:72:
74:fe:34:f6:c9:a0:13:a6:f8:85:f6:5f:00:bb:eb:f5:4c:d1:
09:fd:c1:23:a7:cb:c5:ed:d5:27:89:a7:6b:0b:2b:91:a2:30:
65:09:74:28:f4:b3:ca:1f:72:5a:85:da:4c:d8:8e:cf:94:e9:
57:c5:2a:51:59:68:a4:e0:32:77:e4:8e:ec:fa:ba:36:87:d9:
6a:e4:94:cf:ce:45:8c:5f:14:00:df:f6:16:7d:6d:91:4d:1a:
07:37:73:f3:f1:00:36:9d:b6:75:3d:36:20:32:c3:05:2e:0c:
e1:8c:15:94:1e:5e:23:a0:61:d1:60:13:00:35:0f:61:31:f6:
40:be:cd:fe:06:c4:d3:bb:1b:35:4f:68:57:bd:18:b0:35:8f:
2e:64:14:33:a3:e3:13:77:52:ae:54:24:d3:b9:81:f5:c2:40:
72:b2:d3:0d:93:3d:b0:f5:3c:d1:2d:83:03:1b:77:45:50:6c:
18:18:bc:2c:e6:16:60:a9:65:e6:30:86:e8:cc:b8:6e:04:c5:
d1:26:54:96:23:12:68:05:db:61:03:82:12:63:fd:bc:54:6b:
04:f0:80:b8:5c:5c:cf:32:cb:80:d6:b5:38:48:93:c0:45:42:
46:2e:4d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zn3jFyUa0QBQM83oVA+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjUwMTMxMTAwMDU5WhcNMjUwMjAxMTAwMDU5WjAzMTEwLwYDVQQD
EygwZGU1MGEwZWQxMjAwMDAyNTc5YzMxODI5ZDI4MWY4NmU5MWFmOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqViND0I6wY5ZMnRXv/TkLypM7jqw
ezqjrXL0hZ3ki+9A3MCBK69u9DyQYzNQrMKkFqXKiVdqXA0Kz5GpZ4dYde4czz0l
6ftR2V6s9Aizjf9wsNPtqFUzk/IIKOqeW0w6qNyKD/Gq/wET5DE3AaRR7JwRf+HD
Y/XP5hE8rd17YBqKj4NmNvHIS2MtgjVRchjO60Kv7For/qxTnG2gzOvVJIPO6Qud
IDVR0cj4Wsja0qVlVg1FtPbrCJ82AKjLP9MhHle5we3SS/1tsY1xti9VOPPnwkRR
A27pToBFoK89TdFLP7D5abOod+IKwjoYkfCghllaJ2NldcyeSTrkxTWnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3lCg7RIAACV5wxgp0oH4bpGvngMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHW4iHx6
Z+ECaoFCYcakkE5ydP409smgE6b4hfZfALvr9UzRCf3BI6fLxe3VJ4mnawsrkaIw
ZQl0KPSzyh9yWoXaTNiOz5TpV8UqUVlopOAyd+SO7Pq6NofZauSUz85FjF8UAN/2
Fn1tkU0aBzdz8/EANp22dT02IDLDBS4M4YwVlB5eI6Bh0WATADUPYTH2QL7N/gbE
07sbNU9oV70YsDWPLmQUM6PjE3dSrlQk07mB9cJAcrLTDZM9sPU80S2DAxt3RVBs
GBi8LOYWYKll5jCG6My4bgTF0SZUliMSaAXbYQOCEmP9vFRrBPCAuFxczzLLgNa1
OEiTwEVCRi5NbA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:56 2025 by rpki-client