Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: NxTb8V/bhdwRfjIHUmHcUigVRHfwxtdpOsjiQnPINCc=
Subject key identifier: 26:CA:3F:BD:20:F8:B0:FB:60:66:3F:8B:7C:A0:1C:E8:28:1E:C5:F5
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 0194BCE077B2855EB4FFA9D0DD53B129D108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 112D
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: 5b2bwI9hgC1VUtNmiUj3AcF+xVAo+xz120vlEtQqkF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:b2:85:5e:b4:ff:a9:d0:dd:53:b1:29:d1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=26ca3fbd20f8b0fb60663f8b7ca01ce8281ec5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:7f:fc:0f:9c:71:8b:81:f7:80:c4:93:a8:
61:96:36:8e:39:24:a2:39:2e:f5:c8:c8:6a:1f:7f:
e8:c1:81:d3:81:b1:3a:e7:df:07:d2:6b:48:1d:00:
5b:6a:0b:93:3f:08:c4:dc:42:ab:d0:9f:af:a3:8e:
02:58:13:ac:e8:aa:4e:39:d5:fe:2a:4a:9a:f8:f7:
50:66:19:30:5e:55:65:fe:0c:e0:6f:5a:e8:d4:f1:
c5:90:13:13:b0:79:52:7c:b2:ce:04:b2:97:1f:83:
dd:b4:25:ca:e6:2d:56:2d:41:34:c9:13:f9:0d:05:
46:29:c5:bb:77:16:9c:67:15:fb:c3:12:f5:47:e3:
72:de:d1:c5:1c:fe:ae:0f:b4:b3:de:45:77:f7:0d:
25:3d:a5:06:95:ee:a4:77:9c:57:fc:99:03:91:2f:
1e:c0:11:0f:bd:39:32:42:d1:fe:72:e1:12:8b:5d:
b3:c6:03:b2:a7:a0:77:cc:04:e2:2b:10:be:8f:4b:
d3:3a:c2:1a:19:da:eb:c0:2b:c7:94:32:89:0f:36:
56:6b:13:5c:24:4c:6d:39:bc:32:74:3b:d3:43:4b:
3c:22:39:90:8a:15:3f:24:02:78:58:eb:19:ff:65:
c9:65:4b:4a:77:bd:e4:d8:54:99:12:6b:11:6a:3b:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:3F:BD:20:F8:B0:FB:60:66:3F:8B:7C:A0:1C:E8:28:1E:C5:F5
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:f7:b3:45:21:8f:f5:83:6b:4c:0a:84:9f:d4:52:46:5a:
58:48:43:e8:7d:3c:8b:f1:e4:fe:a8:0f:6e:95:3d:86:ed:79:
3f:58:60:7b:3a:fc:d3:f9:67:d2:f2:d0:a3:73:7f:4e:98:5b:
36:5b:34:6b:e9:1e:92:a9:54:48:3f:1c:10:5f:b1:ed:75:33:
cf:c7:ed:9f:ee:0f:ec:0c:cc:44:92:1d:b2:49:c8:b8:64:0f:
eb:45:02:0b:82:7a:18:c3:15:8e:8c:a4:bf:e1:6d:d8:19:8d:
bb:94:54:f8:22:df:65:18:bb:17:72:87:45:c4:a5:96:4f:48:
1f:83:60:13:8a:a2:78:ed:82:88:60:7d:33:ab:59:2d:8f:ad:
4a:ce:73:60:85:33:31:38:61:38:e9:5c:1f:93:ac:a5:e6:02:
ce:36:f2:0b:ae:2b:17:45:0c:e6:7a:34:95:e7:22:a8:45:97:
bb:22:9b:ff:2a:0b:42:85:51:af:bb:db:10:c9:7e:e5:00:4e:
46:44:54:7d:ad:19:8b:9b:b7:6e:67:8d:14:a6:55:3a:aa:7f:
bf:8a:1c:92:25:37:fd:67:61:d3:8b:76:64:80:7a:8b:b5:11:
b7:d7:2e:89:44:5b:36:cf:23:80:74:8b:c6:ca:be:23:97:3b:
14:12:e4:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HeyhV60/6nQ3VOxKdEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MDJkODZiMGU3MTA2NjhlYTY2ZGE3ZGNkMWIxNDBkZWMx
ZTBjM2QwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EygyNmNhM2ZiZDIwZjhiMGZiNjA2NjNmOGI3Y2EwMWNlODI4MWVjNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvN//A+ccYuB94DEk6hhljaOOSSi
OS71yMhqH3/owYHTgbE6598H0mtIHQBbaguTPwjE3EKr0J+vo44CWBOs6KpOOdX+
Kkqa+PdQZhkwXlVl/gzgb1ro1PHFkBMTsHlSfLLOBLKXH4PdtCXK5i1WLUE0yRP5
DQVGKcW7dxacZxX7wxL1R+Ny3tHFHP6uD7Sz3kV39w0lPaUGle6kd5xX/JkDkS8e
wBEPvTkyQtH+cuESi12zxgOyp6B3zATiKxC+j0vTOsIaGdrrwCvHlDKJDzZWaxNc
JExtObwydDvTQ0s8IjmQihU/JAJ4WOsZ/2XJZUtKd73k2FSZEmsRajs9FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbKP70g+LD7YGY/i3ygHOgoHsX1MB8GA1UdIwQY
MBaAFDcC2GsOcQZo6mbafc0bFA3sHgw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTndMWWF3NXhCbWpxWnRwOXpSc1VEZXdlREQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNTRkYzgtYTY5NC00ZmE5LWJiNmYt
YjkwMmE5N2YxNDRiLzEvTndMWWF3NXhCbWpxWnRwOXpSc1VEZXdlREQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lNTRkYzgtYTY5NC00ZmE5LWJiNmYtYjkwMmE5N2YxNDRi
LzEvTndMWWF3NXhCbWpxWnRwOXpSc1VEZXdlREQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQj3s0Uh
j/WDa0wKhJ/UUkZaWEhD6H08i/Hk/qgPbpU9hu15P1hgezr80/ln0vLQo3N/Tphb
Nls0a+kekqlUSD8cEF+x7XUzz8ftn+4P7AzMRJIdsknIuGQP60UCC4J6GMMVjoyk
v+Ft2BmNu5RU+CLfZRi7F3KHRcSllk9IH4NgE4qieO2CiGB9M6tZLY+tSs5zYIUz
MThhOOlcH5OspeYCzjbyC64rF0UM5no0leciqEWXuyKb/yoLQoVRr7vbEMl+5QBO
RkRUfa0Zi5u3bmeNFKZVOqp/v4ockiU3/Wdh04t2ZIB6i7URt9cuiURbNs8jgHSL
xsq+I5c7FBLk6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:06 2025 by rpki-client