Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier: K5VeVaije6gQCuOdN9v0MQcoawHM/L7+TZZ4XshbDYE=
Subject key identifier: DF:14:4C:ED:3B:F0:ED:87:B0:2B:27:BF:DB:B7:E0:F9:26:DA:BC:D7
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial: 0194BCA9A92AF2C959ED0D720D71873DCF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=)
2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: GmPgjyr1uhRvQWjF4pFKyWEAmyDvkZoWgNP7mFn41SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:2a:f2:c9:59:ed:0d:72:0d:71:87:3d:cf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=df144ced3bf0ed87b02b27bfdbb7e0f926dabcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:1a:f8:8c:23:ff:67:77:25:60:2d:84:4d:
5a:51:cd:e6:83:7b:6a:ef:0c:c0:61:b5:d2:8b:7c:
92:bb:06:56:72:5c:81:5c:62:64:5b:15:f6:66:2f:
35:17:92:8d:c8:18:bb:4e:2f:3f:d4:19:b2:44:12:
e7:6c:d2:a0:b9:02:1a:d9:98:b1:c3:ba:77:7a:b7:
ee:0f:b5:79:a4:cb:0a:79:5f:b9:73:f6:f3:3a:b0:
ec:9a:2c:d7:4e:4a:72:1a:4e:00:d9:09:10:37:cf:
0a:95:27:74:84:7d:06:a9:02:ce:6f:40:05:9b:57:
3c:e8:c6:80:0e:de:d7:5f:4d:17:84:1e:28:5b:2b:
6f:3e:3d:5b:04:d2:1a:c5:21:45:e4:91:f7:0e:85:
a0:0e:65:59:df:a1:9d:c0:2f:5a:09:b0:a3:37:6f:
36:ce:58:8d:a5:90:15:44:38:5f:b8:70:7f:da:17:
fe:f0:89:43:a9:be:0d:f2:05:58:c9:51:24:37:cd:
5c:9e:92:2a:6d:15:f5:4b:d8:f3:ae:04:85:fb:69:
1d:31:27:ae:34:35:dc:cd:44:11:75:05:b3:a5:dd:
29:2c:79:9a:e4:9d:c0:bd:26:ec:89:9d:c7:36:97:
21:dd:ce:05:73:c5:d1:68:eb:91:81:61:05:fc:cf:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:4C:ED:3B:F0:ED:87:B0:2B:27:BF:DB:B7:E0:F9:26:DA:BC:D7
X509v3 Authority Key Identifier:
keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:3e:70:e9:fe:c2:ef:ef:76:30:0f:4b:fd:16:ef:dd:4b:
f1:be:d4:36:ac:7f:a4:e8:1c:61:bf:81:d4:bc:a0:d6:48:bc:
42:6a:11:4a:03:7a:e9:81:18:04:f8:97:ad:27:bd:45:f2:b1:
74:c8:85:16:c0:69:92:07:cb:dd:a9:8a:b2:e3:6e:f6:17:b9:
2e:a9:d2:0e:ef:ca:03:d7:49:ce:39:12:f6:a8:94:d1:8c:2e:
f9:ed:2f:2e:cd:94:42:b2:1d:40:aa:0d:bd:ea:2f:05:71:d1:
1d:fe:45:c6:39:07:ed:03:f0:2a:ff:2b:b6:7b:11:9f:aa:5e:
a3:1f:75:e1:2a:1a:eb:c3:85:1e:cb:1f:a7:dd:a8:f6:43:05:
d1:1f:25:b4:8c:ed:a9:21:ec:8c:59:47:28:66:cd:60:d2:32:
62:42:77:e2:cc:fa:5d:12:2a:bf:56:40:e1:73:59:4a:d9:3f:
af:54:ff:57:f4:96:f3:80:27:81:d4:c9:5f:02:b6:73:9f:5a:
0e:88:66:e9:e6:05:13:5c:ed:34:08:d2:47:ed:e5:74:c9:85:
83:ab:b7:8d:98:81:18:03:d1:57:c2:b6:63:a5:11:bc:02:36:
4a:b3:ce:40:c6:19:4a:ff:e9:52:cf:50:6a:1d:ee:4a:b6:6b:
c2:8f:d5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qakq8slZ7Q1yDXGHPc84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMjM2MzkwNjBmZjg3YTc3ZmM2N2E2ZTAzYzBjNGRkMmFl
NGMzOTEwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhkZjE0NGNlZDNiZjBlZDg3YjAyYjI3YmZkYmI3ZTBmOTI2ZGFiY2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYa+Iwj/2d3JWAthE1aUc3mg3tq
7wzAYbXSi3ySuwZWclyBXGJkWxX2Zi81F5KNyBi7Ti8/1BmyRBLnbNKguQIa2Zix
w7p3erfuD7V5pMsKeV+5c/bzOrDsmizXTkpyGk4A2QkQN88KlSd0hH0GqQLOb0AF
m1c86MaADt7XX00XhB4oWytvPj1bBNIaxSFF5JH3DoWgDmVZ36GdwC9aCbCjN282
zliNpZAVRDhfuHB/2hf+8IlDqb4N8gVYyVEkN81cnpIqbRX1S9jzrgSF+2kdMSeu
NDXczUQRdQWzpd0pLHma5J3AvSbsiZ3HNpch3c4Fc8XRaOuRgWEF/M9UXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8UTO078O2HsCsnv9u34Pkm2rzXMB8GA1UdIwQY
MBaAFJsjY5Bg/4enf8Z6bgPAxN0q5MORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMt
NWFmYzNhNGZlNTQyLzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMtNWFmYzNhNGZlNTQy
LzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAk+cOn+
wu/vdjAPS/0W791L8b7UNqx/pOgcYb+B1Lyg1ki8QmoRSgN66YEYBPiXrSe9RfKx
dMiFFsBpkgfL3amKsuNu9he5LqnSDu/KA9dJzjkS9qiU0Ywu+e0vLs2UQrIdQKoN
veovBXHRHf5FxjkH7QPwKv8rtnsRn6peox914Soa68OFHssfp92o9kMF0R8ltIzt
qSHsjFlHKGbNYNIyYkJ34sz6XRIqv1ZA4XNZStk/r1T/V/SW84AngdTJXwK2c59a
Dohm6eYFE1ztNAjSR+3ldMmFg6u3jZiBGAPRV8K2Y6URvAI2SrPOQMYZSv/pUs9Q
ah3uSrZrwo/VOg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:02 2025 by rpki-client