Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: gNvbPnHqbSqC4MY5oeIqUBVqDaAoJJOC3jeC/uAJbQI=
Subject key identifier: 7E:09:5B:00:3D:AE:A2:7E:1B:06:4C:2A:49:0D:5B:46:F6:69:31:7F
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 0194BD859E7F8503FCBE2C4D5B9375165A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 0F03
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: rPMvK5KAyHXByMASEuX0oKEkf3YBdvlInc7ZMwhjkQg=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:7f:85:03:fc:be:2c:4d:5b:93:75:16:5a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=7e095b003daea27e1b064c2a490d5b46f669317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:59:af:ec:5d:8d:38:c8:0f:e3:d2:f7:82:
46:31:73:d3:0f:24:ac:6e:61:b0:59:58:77:7b:d9:
9b:19:a2:ca:60:6f:f2:d5:e5:bc:bf:ab:d9:07:36:
e4:8f:17:f4:dc:3e:07:0b:4b:12:ad:9e:52:5e:a8:
e2:5b:f2:85:db:e7:a7:64:48:a0:6e:52:c4:51:22:
28:a1:d2:49:e3:37:c6:99:9c:ff:aa:00:e3:a4:7e:
87:c3:00:25:46:bc:7a:c3:bf:72:ef:ed:e4:c5:18:
f6:e2:e3:ae:40:c2:65:c9:f7:4a:e5:16:c5:df:96:
dc:78:26:3d:62:03:ab:23:c1:cb:b7:b7:b7:71:f2:
6b:5e:36:d3:69:df:48:a8:61:d7:b5:a8:e9:83:07:
2e:e7:e8:bc:0a:e1:34:26:b2:e7:4f:4e:3b:5f:df:
0f:6a:24:42:20:8f:0b:19:73:e3:e7:e1:10:54:21:
08:ae:4b:2f:84:86:25:9f:6a:20:8a:c5:89:e2:65:
48:7e:d7:c4:21:a0:1f:fa:0d:47:44:8d:dd:e0:4d:
c9:bb:82:78:6e:c1:e1:a4:7e:3e:3f:e9:9b:4b:7a:
0e:7a:45:10:1b:59:44:e7:ae:1f:f0:28:9c:75:6c:
a7:8c:72:c5:ab:1e:f7:32:4b:e7:f4:74:ec:d8:42:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:09:5B:00:3D:AE:A2:7E:1B:06:4C:2A:49:0D:5B:46:F6:69:31:7F
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:26:e7:62:69:e2:3a:a4:96:50:fb:76:9c:7c:0d:5a:f7:1a:
da:ea:3e:39:46:85:65:f4:42:3a:03:12:f0:d1:10:d5:1e:df:
75:ba:5c:06:ed:7d:52:c3:13:56:b6:2b:f1:1f:9e:8d:d4:7a:
d0:72:9d:5f:77:7a:47:ba:89:60:77:54:20:1b:d6:c5:07:cd:
1c:ac:4a:a9:b5:e7:55:16:dc:fe:bf:69:05:f6:b9:f1:fc:a3:
65:12:d3:a4:29:91:ca:82:b4:9a:a6:61:fb:4f:19:77:f8:bf:
19:e9:b2:42:57:8c:36:38:a8:fc:70:5e:6f:72:57:89:e3:13:
c1:f3:74:88:f7:8c:2c:48:41:60:d9:c4:86:3a:0a:2a:9e:31:
47:19:31:1f:48:92:8c:f2:24:b7:97:82:ef:82:67:d8:bf:e2:
68:bb:32:77:fa:4e:04:16:bb:de:04:dc:e3:23:c0:be:e8:4c:
26:d5:3e:43:1b:c9:57:b8:4d:cc:5c:29:0b:1d:37:98:e2:19:
fd:31:05:81:d5:92:53:1d:99:ff:8b:d4:20:b5:61:79:08:8f:
10:e0:6e:91:e3:f3:1a:95:49:11:5d:1b:be:fb:28:66:a8:9a:
d7:eb:f5:f5:24:34:6d:6b:1e:6a:10:62:45:bc:5b:0a:d5:c5:
10:8f:a6:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ5/hQP8vixNW5N1FloLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy
N2M5NTIwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
Eyg3ZTA5NWIwMDNkYWVhMjdlMWIwNjRjMmE0OTBkNWI0NmY2NjkzMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ZZr+xdjTjID+PS94JGMXPTDySs
bmGwWVh3e9mbGaLKYG/y1eW8v6vZBzbkjxf03D4HC0sSrZ5SXqjiW/KF2+enZEig
blLEUSIoodJJ4zfGmZz/qgDjpH6HwwAlRrx6w79y7+3kxRj24uOuQMJlyfdK5RbF
35bceCY9YgOrI8HLt7e3cfJrXjbTad9IqGHXtajpgwcu5+i8CuE0JrLnT047X98P
aiRCII8LGXPj5+EQVCEIrksvhIYln2ogisWJ4mVIftfEIaAf+g1HRI3d4E3Ju4J4
bsHhpH4+P+mbS3oOekUQG1lE564f8CicdWynjHLFqx73Mkvn9HTs2EL2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4JWwA9rqJ+GwZMKkkNW0b2aTF/MB8GA1UdIwQY
MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt
NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk
LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArybnYmni
OqSWUPt2nHwNWvca2uo+OUaFZfRCOgMS8NEQ1R7fdbpcBu19UsMTVrYr8R+ejdR6
0HKdX3d6R7qJYHdUIBvWxQfNHKxKqbXnVRbc/r9pBfa58fyjZRLTpCmRyoK0mqZh
+08Zd/i/GemyQleMNjio/HBeb3JXieMTwfN0iPeMLEhBYNnEhjoKKp4xRxkxH0iS
jPIkt5eC74Jn2L/iaLsyd/pOBBa73gTc4yPAvuhMJtU+QxvJV7hNzFwpCx03mOIZ
/TEFgdWSUx2Z/4vUILVheQiPEOBukePzGpVJEV0bvvsoZqia1+v19SQ0bWseahBi
RbxbCtXFEI+mGA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:52 2025 by rpki-client