Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: sZ9TQX7OOEkb5JzpmKTieC+1EKUzF+v0gfpc/j32ZEM=
Subject key identifier: AD:A2:43:66:D6:0F:DC:DF:23:ED:69:10:3C:03:7C:BD:BD:14:7C:BD
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 0194BCA99CD0A59FACB3DBE3E87A19883964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: TgH+mcN3Rtc92gDegk8hFIhXXTp9vRddZfc4Jk07IeE=)
5: qoTWjgbmMEUmoU_49iYroDJpUfc.roa (hash: 3K+OOBB37cT2cm7YqnntpcjzjaZAUuEbo+QZKiZz25M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:d0:a5:9f:ac:b3:db:e3:e8:7a:19:88:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=ada24366d60fdcdf23ed69103c037cbdbd147cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:fc:20:ec:1f:e3:d9:f8:63:8a:05:ff:e3:
76:7c:9c:26:fe:f2:69:3a:b0:23:63:6e:29:c6:97:
b5:86:f0:8b:d2:b3:39:4f:89:59:4d:30:fd:a8:43:
85:b7:13:2e:63:2e:76:c5:26:27:36:3b:0a:03:81:
9d:b7:47:ff:e3:38:86:f0:77:28:46:0b:5f:4d:a0:
ad:e0:6a:b8:25:19:33:e4:f6:65:99:cf:c7:8d:53:
9d:4c:ef:9f:57:20:59:72:49:ed:7e:1b:95:20:b0:
ed:63:51:35:af:f2:10:59:21:bb:d0:25:ea:cb:a8:
29:0f:be:d4:2f:a4:66:41:b3:91:3d:2c:35:50:9a:
70:4b:cc:3b:13:d6:35:b0:fb:b8:96:23:77:96:ff:
eb:2a:8f:94:09:37:48:c0:fe:34:c8:5a:89:7b:2a:
e0:30:7b:c8:d1:01:f5:fc:f4:b0:19:d8:54:9b:94:
02:61:25:cf:a9:f0:a7:0d:87:88:15:c1:ef:58:78:
34:d9:bd:d9:1d:3b:67:f5:31:df:8a:ae:f2:7c:8a:
36:80:5a:24:90:3b:f0:41:6f:9b:da:1d:a6:61:d3:
66:8c:5a:d8:08:c9:db:e3:2b:25:6d:ac:13:7f:4b:
95:d4:8b:94:20:63:29:5c:1a:73:24:7d:86:55:dd:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:43:66:D6:0F:DC:DF:23:ED:69:10:3C:03:7C:BD:BD:14:7C:BD
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d4:24:5b:60:44:da:5b:7f:59:6e:ea:10:71:cd:12:21:1c:
d9:97:5b:13:2f:60:51:e5:c3:75:f2:b7:af:18:ce:82:b6:f6:
42:f3:01:c8:56:5a:09:75:e3:32:0c:d4:0f:07:a3:fd:73:5c:
67:d3:ac:8e:33:9a:7f:08:5a:5b:02:22:34:d0:d5:e2:a6:74:
b6:38:b4:73:6f:fb:5b:76:77:5d:7f:94:82:e0:d9:8f:45:29:
84:c0:88:6a:e2:d9:a1:64:fe:ae:39:34:90:18:8a:a8:dd:c8:
af:a5:57:52:36:9f:a0:08:c0:a0:c6:da:42:6b:d5:61:a0:43:
6a:96:31:c3:73:14:87:e3:f4:c9:3f:50:5f:f8:54:15:f4:4b:
d0:c5:72:9c:f3:62:dd:4e:fb:ef:9c:11:5b:75:86:fc:02:bb:
94:c3:37:d7:21:d7:35:ee:2f:f3:d8:87:77:a4:84:77:fc:d2:
90:e0:43:a7:b9:43:6e:22:9c:52:e3:d6:50:5c:f0:c9:f8:27:
b9:6b:73:08:43:f4:18:66:52:a4:d3:05:08:5f:68:32:b5:5a:
2e:77:72:6f:19:a1:c4:ad:be:95:02:fd:51:76:e1:23:18:c1:
a3:5f:ae:54:e1:04:b8:dc:0d:a1:c8:3f:44:37:d3:2d:83:34:
82:27:ef:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZzQpZ+ss9vj6HoZiDlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
EyhhZGEyNDM2NmQ2MGZkY2RmMjNlZDY5MTAzYzAzN2NiZGJkMTQ3Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDn8IOwf49n4Y4oF/+N2fJwm/vJp
OrAjY24pxpe1hvCL0rM5T4lZTTD9qEOFtxMuYy52xSYnNjsKA4Gdt0f/4ziG8Hco
RgtfTaCt4Gq4JRkz5PZlmc/HjVOdTO+fVyBZckntfhuVILDtY1E1r/IQWSG70CXq
y6gpD77UL6RmQbORPSw1UJpwS8w7E9Y1sPu4liN3lv/rKo+UCTdIwP40yFqJeyrg
MHvI0QH1/PSwGdhUm5QCYSXPqfCnDYeIFcHvWHg02b3ZHTtn9THfiq7yfIo2gFok
kDvwQW+b2h2mYdNmjFrYCMnb4yslbawTf0uV1IuUIGMpXBpzJH2GVd0+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2iQ2bWD9zfI+1pEDwDfL29FHy9MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdQkW2BE
2lt/WW7qEHHNEiEc2ZdbEy9gUeXDdfK3rxjOgrb2QvMByFZaCXXjMgzUDwej/XNc
Z9OsjjOafwhaWwIiNNDV4qZ0tji0c2/7W3Z3XX+UguDZj0UphMCIauLZoWT+rjk0
kBiKqN3Ir6VXUjafoAjAoMbaQmvVYaBDapYxw3MUh+P0yT9QX/hUFfRL0MVynPNi
3U7775wRW3WG/AK7lMM31yHXNe4v89iHd6SEd/zSkOBDp7lDbiKcUuPWUFzwyfgn
uWtzCEP0GGZSpNMFCF9oMrVaLndybxmhxK2+lQL9UXbhIxjBo1+uVOEEuNwNocg/
RDfTLYM0gifv6g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client