Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: Cms4HkQ9aSRYrHbTHnRpSeaujqaIligGX5zpzj6R0WQ=
Subject key identifier: 7A:0F:FC:5D:29:2D:B6:77:A4:36:50:E1:99:9D:DD:E9:DE:1F:F1:51
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 0194BCE05B3124A5176A033F5F7F8FDCD41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 0159
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: MGf/aB69OHqLTlT0klCkHTBKs9w+m4p8fn6RVIkzJfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5b:31:24:a5:17:6a:03:3f:5f:7f:8f:dc:d4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=7a0ffc5d292db677a43650e1999ddde9de1ff151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:20:50:82:f3:b6:d9:46:ce:9d:77:ff:6d:
bf:6a:45:13:4c:fa:8d:83:c6:7f:22:dc:a4:cf:a0:
b4:72:e0:61:09:8f:c9:f8:c7:75:7c:8a:82:c3:f8:
8a:f8:3d:65:2a:11:33:a4:0e:96:0e:03:3f:f8:78:
8f:3a:f2:a4:ae:93:66:8e:31:c3:57:f1:17:15:6d:
03:62:9e:f8:50:8a:7b:9b:d0:57:5c:9b:81:56:22:
5f:2b:e3:7d:c7:83:c7:06:e8:79:d9:e6:dd:4f:75:
eb:1c:45:87:23:b5:ec:40:59:69:ea:db:9c:37:c5:
1f:95:4f:e9:aa:79:81:02:d0:83:98:5a:7d:d2:7e:
33:5e:b6:8a:7d:19:4f:ab:b9:f2:a4:67:a7:56:3d:
41:d4:a5:9c:24:d1:92:86:fe:6a:8c:2f:a2:5f:d4:
50:63:be:18:8c:f7:be:d3:41:7a:e0:5e:e6:24:cc:
74:b7:9d:dd:33:ce:97:89:57:76:ec:d8:1d:30:ea:
48:20:eb:5c:b6:2a:13:bc:52:21:82:a0:b2:ff:d9:
47:e1:e8:ae:89:d5:d4:15:82:9a:4b:38:a3:8b:a8:
27:30:8c:9f:07:4c:a2:86:77:28:a0:df:d5:e6:3a:
86:15:28:76:d8:69:6f:e4:5f:d4:16:ab:a6:35:d8:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:FC:5D:29:2D:B6:77:A4:36:50:E1:99:9D:DD:E9:DE:1F:F1:51
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:01:a0:0c:da:c8:8b:c7:70:d1:ce:16:5a:a2:3d:26:76:8a:
8a:bc:b5:82:20:b1:ee:cc:48:84:0d:69:5a:62:c2:68:6c:d3:
db:3b:f6:69:bf:c2:32:ff:ca:3b:c4:95:4d:af:c6:4f:5e:af:
d7:61:a4:10:b4:53:44:dd:8c:b0:bc:33:b3:2f:b3:45:ae:ee:
78:03:85:b4:b4:fe:f6:c7:b5:52:22:d4:10:60:ca:c2:1e:75:
b2:77:42:69:46:a3:24:13:5d:d9:e6:23:05:23:30:4f:5a:a0:
f5:09:59:d5:5c:80:f5:69:64:3e:3f:9e:3c:22:cb:19:c7:37:
8e:0b:4b:35:10:96:49:b7:25:83:6a:15:b4:2b:0d:77:73:5d:
a3:11:98:06:44:47:e5:03:70:e8:9b:bc:5a:95:5a:cd:6c:4f:
e4:77:3c:0a:e5:df:9c:04:a1:24:ec:d3:18:f2:75:32:b0:f3:
11:42:c2:1c:04:d3:4e:e9:ab:9b:e6:7d:23:30:36:94:21:e3:
5e:cd:e1:ac:ce:73:51:63:92:a9:01:37:74:d3:ec:4f:7f:1a:
8c:c7:15:1b:b3:35:cf:f6:a5:2c:44:26:08:db:78:f0:5b:79:
ee:7d:01:ad:c2:7d:76:af:55:10:1d:51:cb:33:f5:e2:0f:c5:
8d:c2:0e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84FsxJKUXagM/X3+P3NQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2YxNTc5YWUxNzY2NjJkNjYzYTM4MzRjMGZlZjgyNGNl
ZTAzM2MwHhcNMjUwMTMxMTUwMDA3WhcNMjUwMjAxMTUwMDA3WjAzMTEwLwYDVQQD
Eyg3YTBmZmM1ZDI5MmRiNjc3YTQzNjUwZTE5OTlkZGRlOWRlMWZmMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GQgUILzttlGzp13/22/akUTTPqN
g8Z/Itykz6C0cuBhCY/J+Md1fIqCw/iK+D1lKhEzpA6WDgM/+HiPOvKkrpNmjjHD
V/EXFW0DYp74UIp7m9BXXJuBViJfK+N9x4PHBuh52ebdT3XrHEWHI7XsQFlp6tuc
N8UflU/pqnmBAtCDmFp90n4zXraKfRlPq7nypGenVj1B1KWcJNGShv5qjC+iX9RQ
Y74YjPe+00F64F7mJMx0t53dM86XiVd27NgdMOpIIOtctioTvFIhgqCy/9lH4eiu
idXUFYKaSziji6gnMIyfB0yihncooN/V5jqGFSh22Glv5F/UFqumNdh7HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoP/F0pLbZ3pDZQ4Zmd3eneH/FRMB8GA1UdIwQY
MBaAFJ4/FXmuF2Zi1mOjg0wP74JM7gM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5Zjkt
NDgwNzM0ZTM4ZGE4LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5ZjktNDgwNzM0ZTM4ZGE4
LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwGgDNrI
i8dw0c4WWqI9JnaKiry1giCx7sxIhA1pWmLCaGzT2zv2ab/CMv/KO8SVTa/GT16v
12GkELRTRN2MsLwzsy+zRa7ueAOFtLT+9se1UiLUEGDKwh51sndCaUajJBNd2eYj
BSMwT1qg9QlZ1VyA9WlkPj+ePCLLGcc3jgtLNRCWSbclg2oVtCsNd3NdoxGYBkRH
5QNw6Ju8WpVazWxP5Hc8CuXfnAShJOzTGPJ1MrDzEULCHATTTumrm+Z9IzA2lCHj
Xs3hrM5zUWOSqQE3dNPsT38ajMcVG7M1z/alLEQmCNt48Ft57n0BrcJ9dq9VEB1R
yzP14g/FjcIO9g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:32 2025 by rpki-client