Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: 8JBL0qmHHZHUyX3Ly0KmtMkOOkZtRPeGqGjbaqu2J/I=
Subject key identifier: 1D:83:E7:CB:F0:5B:3B:5F:DC:41:DA:4C:84:79:FF:F1:1B:50:61:15
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 0194BC3BBA9CD73DEBA1BC35F997DE44553E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0CFE
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: BT3MvoGNFlRO12f178KouC77rO7N0uvtkiN2uV3gQS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:9c:d7:3d:eb:a1:bc:35:f9:97:de:44:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=1d83e7cbf05b3b5fdc41da4c8479fff11b506115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:77:96:0f:30:ba:7c:9f:66:92:7f:b6:ce:
86:76:0f:ba:ac:a6:c7:ca:4c:c1:04:66:0e:0b:fe:
38:fa:78:ad:22:3a:d2:db:92:74:0b:5a:bc:32:6c:
96:fa:7e:c0:4d:6a:11:69:d7:5b:57:29:4f:54:f0:
3d:76:a1:ea:3f:8a:53:b1:39:cb:82:89:31:47:6f:
3f:a9:d0:b7:5c:24:9d:54:07:96:8f:ae:a1:68:da:
43:43:ab:b5:0e:07:61:54:21:47:ba:52:a1:17:fa:
79:9d:a3:0e:74:e6:50:66:77:d9:b5:82:81:a9:21:
3f:0f:bb:18:75:dd:a7:43:6e:58:cd:9f:6a:ee:ad:
96:aa:91:82:3a:85:a8:98:34:c8:e4:2c:45:bf:39:
32:72:fb:c4:00:7c:b2:ea:d0:77:d4:68:ae:da:87:
09:15:8c:5d:48:ce:8f:ce:fb:0a:b3:29:3d:b2:1b:
74:89:93:60:3e:36:70:3a:2d:30:cd:57:0d:e6:8f:
63:33:54:24:d5:be:89:fe:45:65:11:aa:a9:c3:43:
62:e5:4e:61:f0:99:c1:b8:f5:40:fb:dc:f1:97:0f:
27:44:19:48:34:b6:ae:08:ee:3b:11:9d:51:82:40:
28:3f:fa:6c:ce:d2:a0:4a:aa:a5:f9:66:76:96:88:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:83:E7:CB:F0:5B:3B:5F:DC:41:DA:4C:84:79:FF:F1:1B:50:61:15
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:44:d8:d4:27:48:72:7b:a1:d8:1b:3f:84:56:10:5e:0c:0e:
ad:79:5a:db:3f:46:c4:62:d6:59:0a:6e:e8:52:df:e9:57:63:
dc:70:88:06:9d:06:cb:47:e1:5b:df:02:02:1f:aa:e7:bd:2a:
08:c9:96:26:05:a3:51:46:ae:4a:11:40:9d:d9:39:2a:fd:d2:
13:78:fc:c7:fc:20:ca:a2:f1:d7:43:be:be:92:95:25:33:ee:
d8:c1:62:a1:ed:39:b2:97:ff:60:fa:c7:e2:1f:5b:f6:b0:74:
1a:7a:64:13:bb:2c:44:0c:93:2b:05:0a:1d:09:f2:20:b7:83:
29:93:aa:8a:bf:2f:c1:3e:22:99:ec:51:4c:56:83:d4:91:39:
a2:40:b1:b4:e6:80:97:40:9e:98:18:92:aa:06:1d:90:47:de:
23:93:41:e1:68:a6:1a:e7:23:86:ad:3e:0f:d6:36:7a:77:f7:
44:b7:06:a4:a5:0c:de:c0:42:6e:d5:0a:e8:8e:77:88:cc:d5:
df:61:cf:bc:27:9d:07:ab:91:53:91:ff:da:a8:48:8f:07:6c:
cd:9a:be:dc:3a:d1:55:f4:54:4e:98:46:cd:31:d1:18:36:d0:
34:1e:83:51:c1:36:b7:be:ab:3d:0d:e3:10:cb:05:2f:fd:5f:
8f:c9:08:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7qc1z3robw1+ZfeRFU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjRlODBiNGNhZDRlNTBiNzg4ZWRmMTY5NzY3MTJkZWVm
ZjZjMGQwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
EygxZDgzZTdjYmYwNWIzYjVmZGM0MWRhNGM4NDc5ZmZmMTFiNTA2MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvJ3lg8wunyfZpJ/ts6Gdg+6rKbH
ykzBBGYOC/44+nitIjrS25J0C1q8MmyW+n7ATWoRaddbVylPVPA9dqHqP4pTsTnL
gokxR28/qdC3XCSdVAeWj66haNpDQ6u1DgdhVCFHulKhF/p5naMOdOZQZnfZtYKB
qSE/D7sYdd2nQ25YzZ9q7q2WqpGCOoWomDTI5CxFvzkycvvEAHyy6tB31Giu2ocJ
FYxdSM6PzvsKsyk9sht0iZNgPjZwOi0wzVcN5o9jM1Qk1b6J/kVlEaqpw0Ni5U5h
8JnBuPVA+9zxlw8nRBlINLauCO47EZ1RgkAoP/psztKgSqql+WZ2loibvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2D58vwWztf3EHaTIR5//EbUGEVMB8GA1UdIwQY
MBaAFJ306AtMrU5Qt4jt8Wl2cS3u/2wNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMt
YzlmYzVmNDUyOTk1LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMtYzlmYzVmNDUyOTk1
LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkTY1CdI
cnuh2Bs/hFYQXgwOrXla2z9GxGLWWQpu6FLf6Vdj3HCIBp0Gy0fhW98CAh+q570q
CMmWJgWjUUauShFAndk5Kv3SE3j8x/wgyqLx10O+vpKVJTPu2MFioe05spf/YPrH
4h9b9rB0GnpkE7ssRAyTKwUKHQnyILeDKZOqir8vwT4imexRTFaD1JE5okCxtOaA
l0CemBiSqgYdkEfeI5NB4WimGucjhq0+D9Y2enf3RLcGpKUM3sBCbtUK6I53iMzV
32HPvCedB6uRU5H/2qhIjwdszZq+3DrRVfRUTphGzTHRGDbQNB6DUcE2t76rPQ3j
EMsFL/1fj8kIjw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:30 2025 by rpki-client