Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: OjQAi8Bfu70k982eLa+ynit3cA6Rn3ZvQqauEt3MDA8=
Subject key identifier: B1:6E:51:8E:49:06:1F:E7:9D:10:29:7F:F6:97:9E:CA:C5:F1:BE:41
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0194BBCE247640626E93AC9C5C2F69F39F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0869
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 6uPmSDff0EByzvtRkRIDzvcq-WU.roa (hash: zK2w8TbS49/+wZDp3eKjJMQhyK44gX7SwMqwg25dCxg=)
2: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: pcoJZ64KUx+zst4sM8lZkwiWnlJyUeHd5bZ1IhIU4oE=)
4: qq6s1vTaHkVDP8gh52fhNDCAnRk.roa (hash: /DhDbXafmNG6U8TgLWqeTyu4JRy1vWkbdlGygiN07wQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:76:40:62:6e:93:ac:9c:5c:2f:69:f3:9f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=b16e518e49061fe79d10297ff6979ecac5f1be41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:f8:99:25:d5:95:d4:de:2e:85:91:b2:92:
43:4f:7c:90:7e:09:38:78:8e:0a:5e:eb:d6:9c:5d:
64:83:f4:40:b8:75:c2:e1:9c:0a:e4:39:6b:65:45:
8a:2b:81:a1:74:ca:83:d5:c8:9d:b5:71:f7:c0:35:
d7:e9:77:28:f6:a2:64:07:54:77:82:4f:4f:a4:6e:
88:30:44:8f:71:6b:83:59:4a:0a:6e:ee:c2:6a:e6:
8c:08:7f:bd:bc:5f:4b:06:5f:36:bb:27:14:69:76:
53:85:47:cc:93:e1:46:bd:13:94:56:81:80:9d:c6:
0c:ca:3a:f1:03:4d:8d:64:b6:fa:f2:7e:91:ed:e4:
62:bd:9b:91:d1:97:34:f3:e8:05:b5:1b:51:bd:92:
02:66:65:b6:f8:77:4e:57:83:40:b9:20:6d:fc:17:
36:0f:57:9c:b8:f0:b1:a5:f0:50:38:16:5b:e1:5b:
b3:9c:de:6b:0a:9c:6d:c8:f9:ea:4d:69:c8:86:12:
b5:99:cf:ad:eb:3c:bd:a2:a3:d0:81:f3:ea:3f:4a:
76:83:97:0a:36:a9:e2:9e:be:30:b1:6e:14:39:7f:
d1:6d:10:2a:b0:f8:13:96:c9:e6:0d:00:89:c5:b8:
67:4f:51:e7:7e:99:18:80:2c:95:66:85:4d:1d:73:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:51:8E:49:06:1F:E7:9D:10:29:7F:F6:97:9E:CA:C5:F1:BE:41
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:cb:da:70:c0:f7:5f:55:43:7d:6f:e8:9d:14:ad:6b:05:
ce:17:42:37:cd:c0:5d:09:f7:56:a4:10:e4:09:a5:31:14:31:
84:00:2f:64:f6:bc:09:6c:55:fc:f0:ad:8e:38:4f:37:b5:9f:
50:cc:b8:9c:2d:f4:25:c1:69:27:a5:02:5e:44:f6:85:2d:d9:
f1:49:19:72:37:51:ff:9a:90:08:92:5a:d5:e9:09:a9:1d:73:
bf:89:f0:d5:0c:71:04:f3:bf:00:35:63:14:a6:d1:7b:60:54:
ae:4c:95:56:69:d6:d2:06:6a:a0:e8:27:07:89:02:0b:44:cc:
17:17:d3:c2:1d:9d:fe:1c:9f:04:49:f1:c3:4b:3b:34:79:ba:
6d:3e:cb:fd:82:9d:e0:2a:fb:2d:ef:1f:7e:9d:3a:d0:71:bc:
a1:bc:8f:ac:9f:5c:ff:6d:8a:32:2f:8d:7c:fd:ac:33:26:00:
55:80:a5:02:69:4f:ae:6e:7d:e2:00:4f:c1:28:d4:04:98:6c:
56:80:d6:8d:e3:18:3b:1c:64:12:2b:8a:f2:27:92:c1:b0:fc:
65:ff:b3:42:9e:f9:27:de:49:58:41:24:75:8e:45:4b:0d:b4:
34:94:5c:7b:98:0d:13:2f:22:29:0a:9e:26:b5:52:fc:7b:40:
0b:5f:b6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziR2QGJuk6ycXC9p8580MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
EyhiMTZlNTE4ZTQ5MDYxZmU3OWQxMDI5N2ZmNjk3OWVjYWM1ZjFiZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDz4mSXVldTeLoWRspJDT3yQfgk4
eI4KXuvWnF1kg/RAuHXC4ZwK5DlrZUWKK4GhdMqD1cidtXH3wDXX6Xco9qJkB1R3
gk9PpG6IMESPcWuDWUoKbu7CauaMCH+9vF9LBl82uycUaXZThUfMk+FGvROUVoGA
ncYMyjrxA02NZLb68n6R7eRivZuR0Zc08+gFtRtRvZICZmW2+HdOV4NAuSBt/Bc2
D1ecuPCxpfBQOBZb4VuznN5rCpxtyPnqTWnIhhK1mc+t6zy9oqPQgfPqP0p2g5cK
Nqninr4wsW4UOX/RbRAqsPgTlsnmDQCJxbhnT1HnfpkYgCyVZoVNHXOAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFuUY5JBh/nnRApf/aXnsrF8b5BMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBjL2nDA
919VQ31v6J0UrWsFzhdCN83AXQn3VqQQ5AmlMRQxhAAvZPa8CWxV/PCtjjhPN7Wf
UMy4nC30JcFpJ6UCXkT2hS3Z8UkZcjdR/5qQCJJa1ekJqR1zv4nw1QxxBPO/ADVj
FKbRe2BUrkyVVmnW0gZqoOgnB4kCC0TMFxfTwh2d/hyfBEnxw0s7NHm6bT7L/YKd
4Cr7Le8ffp060HG8obyPrJ9c/22KMi+NfP2sMyYAVYClAmlPrm594gBPwSjUBJhs
VoDWjeMYOxxkEiuK8ieSwbD8Zf+zQp75J95JWEEkdY5FSw20NJRce5gNEy8iKQqe
JrVS/HtAC1+2yQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client