Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: m2zOFAIHAwI2w2anWawRjzCNJDIuElqSTdw+EMWXPPE=
Subject key identifier: 48:7B:E7:DF:97:40:49:56:BF:55:0D:B8:8F:D6:86:1A:82:A5:E7:D8
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 0194BC3C5E963BF1D24521377B1F1B0D49F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: T5bhh/ZXlF+sj95p6g3x+vHnOETKppzZZbsysCW9Hak=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:96:3b:f1:d2:45:21:37:7b:1f:1b:0d:49:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=487be7df97404956bf550db88fd6861a82a5e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:5c:3a:78:c6:f3:47:3d:12:f5:02:39:81:
f3:99:90:56:e9:51:b4:55:73:a5:59:9b:77:1d:f9:
be:2a:d8:ec:81:60:6b:72:69:0b:e3:4e:01:5a:62:
7f:31:46:72:3c:63:6e:a0:68:f2:43:22:e4:3f:39:
1b:46:8d:62:37:68:21:02:35:33:85:75:2d:71:50:
63:0f:ce:4b:3d:36:4a:c6:60:c3:ef:f7:ab:6f:60:
fc:a7:3d:95:66:d9:69:9a:12:0f:dc:69:23:5b:c3:
d8:14:a6:4f:83:8d:29:9c:37:15:f6:1d:38:e0:c3:
3b:61:38:59:7f:fb:d2:e7:44:df:44:3d:fc:98:a4:
af:21:4c:a1:d0:f6:0d:3d:dd:66:f2:ad:55:f6:d4:
f7:93:9a:e6:9c:db:77:3f:82:90:7f:7e:4e:d4:fd:
60:c9:e4:19:08:19:54:1b:98:6e:a8:e2:3c:04:25:
04:7a:ec:e5:c1:1f:04:08:bb:d1:d5:b8:88:03:9e:
7f:01:20:67:44:d3:8d:96:00:e3:6f:f4:8f:e9:26:
ef:f4:89:7f:cf:dd:81:a4:30:b0:62:ef:e0:ed:a5:
69:f7:2e:51:6b:03:cc:1d:7f:04:f1:80:c8:96:57:
01:be:67:35:4c:f2:0c:45:4c:30:37:aa:63:b1:ae:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:E7:DF:97:40:49:56:BF:55:0D:B8:8F:D6:86:1A:82:A5:E7:D8
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:bf:f8:3a:7b:0c:ed:a5:47:58:c2:52:90:2b:9c:09:69:
da:52:27:a5:65:34:68:f8:3c:85:1f:f6:78:58:e1:76:de:2e:
67:07:ce:5a:c3:a7:54:c7:2b:aa:eb:ff:fd:1d:93:f6:1d:f7:
11:c6:e1:a2:77:e9:67:fc:21:51:b5:05:fc:f5:df:ac:80:69:
2b:e3:08:9f:d7:1c:66:56:3e:08:ba:0f:b2:13:19:73:e1:1f:
28:e2:03:9b:29:ef:88:0b:66:16:b8:20:d8:90:4d:bf:8c:02:
4f:be:62:1d:55:df:fe:d1:ad:6d:04:15:d0:94:3e:05:49:ed:
3d:44:0e:62:28:1d:85:4d:e8:97:07:ef:b8:85:c4:13:ee:ff:
ca:74:59:1f:49:28:3f:37:3d:a0:e1:22:96:50:4f:0c:e6:44:
80:8c:cc:1f:56:ab:02:fc:05:6f:5c:b6:9b:51:44:eb:37:b0:
2f:e5:0d:98:6b:5c:8f:73:ea:8f:18:57:c6:51:35:f6:74:49:
bc:e3:8d:d9:58:b0:6f:8a:71:14:e5:43:2c:97:3e:d2:aa:0f:
44:c4:c6:4a:70:a8:8f:a2:1a:91:8f:da:c9:7b:a8:02:b3:45:
ef:db:b9:4e:48:3b:10:b6:05:53:7e:92:74:e4:a8:14:cc:68:
32:9f:8d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PF6WO/HSRSE3ex8bDUnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy
NjIyZjgwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
Eyg0ODdiZTdkZjk3NDA0OTU2YmY1NTBkYjg4ZmQ2ODYxYTgyYTVlN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6hcOnjG80c9EvUCOYHzmZBW6VG0
VXOlWZt3Hfm+KtjsgWBrcmkL404BWmJ/MUZyPGNuoGjyQyLkPzkbRo1iN2ghAjUz
hXUtcVBjD85LPTZKxmDD7/erb2D8pz2VZtlpmhIP3GkjW8PYFKZPg40pnDcV9h04
4MM7YThZf/vS50TfRD38mKSvIUyh0PYNPd1m8q1V9tT3k5rmnNt3P4KQf35O1P1g
yeQZCBlUG5huqOI8BCUEeuzlwR8ECLvR1biIA55/ASBnRNONlgDjb/SP6Sbv9Il/
z92BpDCwYu/g7aVp9y5RawPMHX8E8YDIllcBvmc1TPIMRUwwN6pjsa5IpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh759+XQElWv1UNuI/WhhqCpefYMB8GA1UdIwQY
MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et
NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2
LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYe/+Dp7
DO2lR1jCUpArnAlp2lInpWU0aPg8hR/2eFjhdt4uZwfOWsOnVMcrquv//R2T9h33
EcbhonfpZ/whUbUF/PXfrIBpK+MIn9ccZlY+CLoPshMZc+EfKOIDmynviAtmFrgg
2JBNv4wCT75iHVXf/tGtbQQV0JQ+BUntPUQOYigdhU3olwfvuIXEE+7/ynRZH0ko
Pzc9oOEillBPDOZEgIzMH1arAvwFb1y2m1FE6zewL+UNmGtcj3PqjxhXxlE19nRJ
vOON2Viwb4pxFOVDLJc+0qoPRMTGSnCoj6IakY/ayXuoArNF79u5Tkg7ELYFU36S
dOSoFMxoMp+Nnw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:08 2025 by rpki-client