Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: n8eIjPBuG250Jd3DP/xzlh3lDr7e8piQO2AtFgbEmfE=
Subject key identifier: 41:1C:6F:36:12:79:10:D9:37:D0:B7:59:F4:8B:86:3C:2F:B6:59:80
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 0194BD17C955D481179D89846C52268C817D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 059D
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: CLgPowCng664ukWjkY/JwNqPVeEaXuPZ6/+vXDMwqKE=)
2: wGV9gdNmWFtWWUn9dwqAU6O3Xlw.roa (hash: e5ewBGv57i41ziAigHZZOeL98kqI4hYVQ5SbzM8SjnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:55:d4:81:17:9d:89:84:6c:52:26:8c:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=411c6f36127910d937d0b759f48b863c2fb65980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:c0:16:30:1c:f2:f5:66:cd:35:21:2d:c8:
3c:ea:e2:46:ea:b7:04:46:70:49:9b:96:33:a9:af:
c5:c5:14:ef:aa:a0:82:36:f9:7b:02:76:a6:34:96:
e0:5c:33:cb:dd:de:9e:29:6b:e4:43:b7:9a:84:31:
21:ef:29:78:69:67:09:a9:1a:aa:53:79:19:d7:5c:
b9:97:12:15:f0:40:3a:a0:eb:c6:99:ce:d0:4a:56:
18:4b:e8:9e:3a:85:c2:48:1d:10:cf:4c:d2:aa:7d:
d6:35:3b:ac:76:d4:7a:b5:ff:e8:f5:43:dd:b4:10:
a5:f1:b6:ee:63:f5:68:d7:c4:bc:5d:a0:bb:b4:54:
a9:1d:72:a7:18:7d:2f:3f:9e:db:bd:6c:53:33:24:
36:6c:23:a2:a4:f2:fb:2b:5a:40:c3:ea:f2:53:4a:
6a:70:53:6c:c8:0e:2d:17:1a:85:b6:d8:3e:d4:dc:
29:49:49:9a:08:1d:8e:72:e5:2a:01:6a:57:c5:3f:
6c:b6:a9:83:e8:05:9d:3d:8e:98:1a:ba:b3:1a:3c:
d5:1a:df:a9:cf:55:c3:3f:bc:7f:93:10:d9:df:b9:
a0:75:bd:81:87:79:6f:03:84:df:2d:b8:a4:4d:0b:
61:0c:9d:59:67:91:06:90:22:d4:7e:12:df:81:7f:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:6F:36:12:79:10:D9:37:D0:B7:59:F4:8B:86:3C:2F:B6:59:80
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:46:fe:ae:e4:b5:b6:c3:5c:62:f6:81:76:82:0d:90:78:5f:
05:5d:b7:e8:ae:a6:88:20:2b:3b:d3:72:48:e7:ec:1c:b0:c4:
cc:df:6c:2e:bb:8d:05:42:66:bf:c3:8e:17:63:c2:03:76:3a:
44:ad:ba:7b:23:0c:83:ce:54:98:61:b0:c2:01:72:a3:34:56:
a9:40:b9:29:a0:9c:1c:21:d3:fb:23:5b:c4:30:ac:c5:a4:39:
1d:37:45:36:da:05:9b:a4:ce:81:94:aa:b8:5e:92:42:2c:f6:
f5:d4:2c:70:4f:76:7d:ab:15:bd:38:26:95:0a:cf:4e:5e:43:
ff:61:ba:21:28:cc:bb:ea:c2:17:ce:cf:c6:3f:66:eb:91:c8:
3e:32:e1:c6:4f:a7:34:2f:6f:ba:85:30:93:67:51:df:93:74:
c3:17:31:8c:e5:13:88:d7:64:25:b6:34:41:5a:28:09:94:56:
dc:da:c7:0b:09:65:4b:c7:e5:f6:e8:9d:46:31:69:91:d4:65:
58:c7:91:ac:93:df:6e:81:90:cf:5e:9f:f7:e5:cb:12:7f:26:
b5:51:50:ed:51:48:f9:e8:93:ac:1b:82:8c:27:cd:34:db:80:
4e:5e:52:90:6a:5e:a1:b1:14:72:7f:6c:35:c2:9d:96:0d:14:
a4:5b:da:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8lV1IEXnYmEbFImjIF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm
Nzk2NDYwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
Eyg0MTFjNmYzNjEyNzkxMGQ5MzdkMGI3NTlmNDhiODYzYzJmYjY1OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ/AFjAc8vVmzTUhLcg86uJG6rcE
RnBJm5Yzqa/FxRTvqqCCNvl7AnamNJbgXDPL3d6eKWvkQ7eahDEh7yl4aWcJqRqq
U3kZ11y5lxIV8EA6oOvGmc7QSlYYS+ieOoXCSB0Qz0zSqn3WNTusdtR6tf/o9UPd
tBCl8bbuY/Vo18S8XaC7tFSpHXKnGH0vP57bvWxTMyQ2bCOipPL7K1pAw+ryU0pq
cFNsyA4tFxqFttg+1NwpSUmaCB2OcuUqAWpXxT9stqmD6AWdPY6YGrqzGjzVGt+p
z1XDP7x/kxDZ37mgdb2Bh3lvA4TfLbikTQthDJ1ZZ5EGkCLUfhLfgX+1HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEcbzYSeRDZN9C3WfSLhjwvtlmAMB8GA1UdIwQY
MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt
ZjQ5NDZmMDNmNTQyLzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy
LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkb+ruS1
tsNcYvaBdoINkHhfBV236K6miCArO9NySOfsHLDEzN9sLruNBUJmv8OOF2PCA3Y6
RK26eyMMg85UmGGwwgFyozRWqUC5KaCcHCHT+yNbxDCsxaQ5HTdFNtoFm6TOgZSq
uF6SQiz29dQscE92fasVvTgmlQrPTl5D/2G6ISjMu+rCF87Pxj9m65HIPjLhxk+n
NC9vuoUwk2dR35N0wxcxjOUTiNdkJbY0QVooCZRW3NrHCwllS8fl9uidRjFpkdRl
WMeRrJPfboGQz16f9+XLEn8mtVFQ7VFI+eiTrBuCjCfNNNuATl5SkGpeobEUcn9s
NcKdlg0UpFva9w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client