Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: 66R0ISmGKdg2jNQ4L2nhxfw8OWJTnmpzbNXJwBQ6xU4=
Subject key identifier: A7:9B:2F:9E:90:31:2C:FA:1E:8A:34:CC:3C:5E:CA:95:5B:2A:04:52
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 0194BC3C3D64DE3EB864541F986CBED015B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 0F6F
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: pV866Xm3OBd5Ic17qpYMX4uyefgW3Azr5kLyMy0KOw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:64:de:3e:b8:64:54:1f:98:6c:be:d0:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=a79b2f9e90312cfa1e8a34cc3c5eca955b2a0452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:8a:20:df:57:8d:33:21:20:fd:c9:be:f7:
3f:63:33:07:52:c4:46:2c:e7:80:4b:7f:98:9c:83:
3e:a7:dc:e5:8f:ff:9e:3c:90:4b:68:f7:e5:39:8f:
13:90:43:dd:58:a4:2a:f4:e2:6d:9c:65:1b:61:5c:
87:d9:94:3e:90:4d:2a:21:da:a6:88:a5:41:59:15:
53:b5:d5:06:2d:4c:4a:ae:d2:ad:a5:54:5d:c1:a1:
9e:75:41:de:83:a1:51:7d:42:0f:76:eb:a6:a2:51:
99:e6:f9:f2:c3:09:3e:b5:be:19:97:eb:cb:f9:de:
40:87:f7:1e:09:83:2d:02:88:8c:be:66:9c:bc:06:
f0:6e:37:31:08:1b:44:ba:96:58:35:1c:57:12:45:
96:e5:ab:72:4d:03:c3:64:9d:76:6e:eb:54:54:66:
85:44:fa:be:83:1d:11:35:77:02:43:70:e0:80:09:
54:6f:9f:62:09:bc:e5:ef:8e:54:1c:1d:04:00:67:
ec:86:ee:6d:15:b2:d9:ad:7b:c8:eb:e5:62:9b:f2:
3d:41:78:b6:23:85:05:11:df:0f:4f:ef:83:d5:fc:
5e:17:9d:72:0f:b1:6b:2e:90:f8:6d:8b:4c:c2:0b:
40:2d:b1:2d:5c:15:fc:38:d6:81:59:3a:81:a0:83:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:2F:9E:90:31:2C:FA:1E:8A:34:CC:3C:5E:CA:95:5B:2A:04:52
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8a:5e:3f:0a:0a:e3:2b:6b:0f:0e:90:66:9c:27:85:20:d1:
d4:33:38:36:da:0a:28:21:ba:c3:d4:f5:5b:57:51:bc:b5:cd:
08:da:59:5c:e1:09:1b:7b:70:aa:e9:69:8a:e6:bd:e3:a3:c2:
56:66:77:cf:0e:f1:a2:ae:8a:44:06:e5:ff:ff:35:ed:e4:d5:
7f:2d:1b:31:c7:45:29:cb:0d:4f:c3:06:11:dc:b8:bd:10:be:
ef:3b:df:34:c1:99:d8:06:86:b8:cf:5f:b8:b8:3f:41:a1:dc:
b5:f4:2d:1f:70:f9:b2:9a:c0:27:ff:8c:90:90:24:b5:4f:38:
bc:18:bd:77:14:3e:d1:45:34:0f:06:c1:69:33:7d:1d:1e:35:
14:57:11:41:72:fa:74:38:e4:4a:4e:3d:7b:a6:ee:f6:a9:c8:
b3:32:e9:36:bc:c1:c5:09:3f:f0:89:ae:f0:c0:66:19:7f:70:
fd:3b:da:a8:97:76:d2:a9:a8:b5:30:f3:9c:01:40:00:86:ad:
f4:15:8b:e3:8a:ab:58:55:39:16:17:3a:0a:c8:8a:bf:29:af:
ab:95:9d:46:01:e2:bf:16:4a:d6:03:68:db:2d:4b:df:79:d8:
58:79:72:f2:5d:26:36:b1:98:1a:93:85:6b:55:30:2d:c9:6d:
5d:f1:db:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD1k3j64ZFQfmGy+0BW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0N2EwNGUxYWMyNGM3OTc3NjM0NzgzOWU1MTM0YzlhYWEz
OGJmNTcwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EyhhNzliMmY5ZTkwMzEyY2ZhMWU4YTM0Y2MzYzVlY2E5NTViMmEwNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdyKIN9XjTMhIP3Jvvc/YzMHUsRG
LOeAS3+YnIM+p9zlj/+ePJBLaPflOY8TkEPdWKQq9OJtnGUbYVyH2ZQ+kE0qIdqm
iKVBWRVTtdUGLUxKrtKtpVRdwaGedUHeg6FRfUIPduumolGZ5vnywwk+tb4Zl+vL
+d5Ah/ceCYMtAoiMvmacvAbwbjcxCBtEupZYNRxXEkWW5atyTQPDZJ12butUVGaF
RPq+gx0RNXcCQ3DggAlUb59iCbzl745UHB0EAGfshu5tFbLZrXvI6+Vim/I9QXi2
I4UFEd8PT++D1fxeF51yD7FrLpD4bYtMwgtALbEtXBX8ONaBWTqBoIP/cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKebL56QMSz6Hoo0zDxeypVbKgRSMB8GA1UdIwQY
MBaAFDR6BOGsJMeXdjR4OeUTTJqqOL9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQt
YzQ0OTc0YWRkMjMwLzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQtYzQ0OTc0YWRkMjMw
LzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIpePwoK
4ytrDw6QZpwnhSDR1DM4NtoKKCG6w9T1W1dRvLXNCNpZXOEJG3twqulpiua946PC
VmZ3zw7xoq6KRAbl//817eTVfy0bMcdFKcsNT8MGEdy4vRC+7zvfNMGZ2AaGuM9f
uLg/QaHctfQtH3D5sprAJ/+MkJAktU84vBi9dxQ+0UU0DwbBaTN9HR41FFcRQXL6
dDjkSk49e6bu9qnIszLpNrzBxQk/8Imu8MBmGX9w/TvaqJd20qmotTDznAFAAIat
9BWL44qrWFU5Fhc6CsiKvymvq5WdRgHivxZK1gNo2y1L33nYWHly8l0mNrGYGpOF
a1UwLcltXfHbGA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:33 2025 by rpki-client