Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
File: nA6h0d1bYGSFHYSccPHLFPyyo4M.mft (raw, json)
Hash identifier: Dg2B65q1ydQvlpkM1TilyPewPOY848aHovy26eWxGxE=
Subject key identifier: AD:BA:5D:5D:77:19:8D:87:56:C2:A1:C6:FE:F6:F1:E1:D1:7A:29:5E
Authority key identifier: 9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
Certificate issuer: /CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Certificate serial: 0194BD4E9DA379D266EE631215BE70E29258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
Manifest number: 0764
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa (hash: P7IzVfswDuCa9rPQa+x0Y8KRXxnLbD76QVgGKU1lQe4=)
2: nA6h0d1bYGSFHYSccPHLFPyyo4M.crl (hash: XyVPhBZmGxUN37TI+WI+kUYbI+/9ZRfxoN7DTBaTvlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9d:a3:79:d2:66:ee:63:12:15:be:70:e2:92:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=adba5d5d77198d8756c2a1c6fef6f1e1d17a295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:54:15:c8:72:b4:c6:70:c3:75:77:dc:cf:
f9:f3:77:f5:df:81:5a:ad:80:1d:0a:b6:31:78:39:
24:67:00:04:d4:09:65:9a:24:a6:9b:5d:e4:61:d9:
92:c5:36:fe:24:85:51:36:fa:26:7a:1d:7c:ce:fe:
a1:ed:0d:59:95:2f:81:27:bf:40:00:70:64:39:29:
b5:eb:84:00:3a:18:97:3f:35:ca:bc:75:6e:02:66:
ce:b4:05:f6:1f:f5:4e:31:37:11:1b:3f:97:5c:f3:
77:01:0f:ca:f1:c6:ed:16:7e:67:53:8e:77:b7:d2:
40:88:46:91:49:ba:aa:ce:32:59:99:ec:79:ea:d8:
db:91:19:b8:68:f9:43:40:4d:20:d3:ad:54:51:b0:
3e:81:5a:bd:f5:6c:4b:f8:bf:52:c1:07:e9:70:de:
88:46:d7:b5:0c:7d:13:4b:38:be:84:49:18:18:9c:
b2:3b:7b:e6:ae:b5:3e:ad:83:2c:60:f2:a1:43:7e:
d0:12:a3:3a:7f:18:8b:d4:70:3a:39:41:42:33:9e:
54:60:ce:cc:a9:f8:67:c0:ec:51:a6:21:48:58:14:
64:aa:03:3b:34:ad:4c:09:ab:85:d3:3f:95:a9:2a:
70:48:9e:02:e5:06:b0:47:20:93:d4:0d:fa:1a:34:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BA:5D:5D:77:19:8D:87:56:C2:A1:C6:FE:F6:F1:E1:D1:7A:29:5E
X509v3 Authority Key Identifier:
keyid:9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:79:c6:4a:73:f6:33:de:c4:7d:19:d9:83:d3:7c:e6:e4:91:
0a:03:72:cf:ca:87:af:c5:16:3c:fc:9d:73:35:6e:bc:d8:d5:
a5:b1:46:fa:33:4b:ea:6c:13:e2:20:14:6b:a7:03:a9:3a:8a:
e9:7c:d6:e2:93:f4:58:49:5b:7f:f3:9e:a4:f0:cc:23:b1:5c:
a4:3c:35:ce:a3:80:40:06:83:3e:fe:fa:c3:43:4f:12:74:79:
e8:b3:ee:e9:8d:11:12:48:47:7e:b0:82:90:03:b6:83:a4:9f:
e1:27:33:bc:6b:97:03:1d:1c:0f:95:b5:01:e5:78:29:7a:0c:
1c:8b:d2:e5:16:4c:f2:67:cd:db:a0:f2:16:8d:73:bc:aa:67:
bb:2b:52:8d:e1:70:23:1a:9b:b0:57:1a:28:65:d4:3c:25:84:
8d:3c:8d:2a:8a:5a:5d:6c:e9:7b:16:c4:46:13:ce:07:89:d9:
a9:c3:83:6a:f0:ab:ff:59:c1:3f:49:30:20:63:7b:b8:1d:6d:
c6:3d:89:9e:fe:52:c0:06:38:06:59:6f:36:5b:d1:df:1e:3d:
6a:10:20:ac:28:69:75:82:96:3e:98:ad:a7:6b:0e:74:a4:a1:
60:98:c8:68:68:ce:9a:38:1d:15:9a:75:99:60:aa:a6:fc:e8:
0a:ab:4c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tp2jedJm7mMSFb5w4pJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGVhMWQxZGQ1YjYwNjQ4NTFkODQ5YzcwZjFjYjE0ZmNi
MmEzODMwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
EyhhZGJhNWQ1ZDc3MTk4ZDg3NTZjMmExYzZmZWY2ZjFlMWQxN2EyOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5FUFchytMZww3V33M/583f134Fa
rYAdCrYxeDkkZwAE1AllmiSmm13kYdmSxTb+JIVRNvomeh18zv6h7Q1ZlS+BJ79A
AHBkOSm164QAOhiXPzXKvHVuAmbOtAX2H/VOMTcRGz+XXPN3AQ/K8cbtFn5nU453
t9JAiEaRSbqqzjJZmex56tjbkRm4aPlDQE0g061UUbA+gVq99WxL+L9SwQfpcN6I
Rte1DH0TSzi+hEkYGJyyO3vmrrU+rYMsYPKhQ37QEqM6fxiL1HA6OUFCM55UYM7M
qfhnwOxRpiFIWBRkqgM7NK1MCauF0z+VqSpwSJ4C5QawRyCT1A36GjTYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK26XV13GY2HVsKhxv728eHReileMB8GA1UdIwQY
MBaAFJwOodHdW2BkhR2EnHDxyxT8sqODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkE2aDBkMWJZR1NGSFlTY2NQSExGUHl5bzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMTJmZGMtODM3NC00N2U2LThjNTAt
OTk2MzQ0ZjMxMTQ1LzEvbkE2aDBkMWJZR1NGSFlTY2NQSExGUHl5bzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMTJmZGMtODM3NC00N2U2LThjNTAtOTk2MzQ0ZjMxMTQ1
LzEvbkE2aDBkMWJZR1NGSFlTY2NQSExGUHl5bzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHnGSnP2
M97EfRnZg9N85uSRCgNyz8qHr8UWPPydczVuvNjVpbFG+jNL6mwT4iAUa6cDqTqK
6XzW4pP0WElbf/OepPDMI7FcpDw1zqOAQAaDPv76w0NPEnR56LPu6Y0REkhHfrCC
kAO2g6Sf4SczvGuXAx0cD5W1AeV4KXoMHIvS5RZM8mfN26DyFo1zvKpnuytSjeFw
IxqbsFcaKGXUPCWEjTyNKopaXWzpexbERhPOB4nZqcODavCr/1nBP0kwIGN7uB1t
xj2Jnv5SwAY4BllvNlvR3x49ahAgrChpdYKWPpitp2sOdKShYJjIaGjOmjgdFZp1
mWCqpvzoCqtMTw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:01 2025 by rpki-client