Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: 2FoY5M8Yhg7+rrlhjz6tfBnR1MEuzVWIwXgQIFmzmqY=
Subject key identifier: 6B:38:BC:36:68:CA:EF:51:85:E9:72:75:D8:C5:E9:49:A5:4B:5A:8A
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 0194BCA9ACAC0A2D82B7FF04F6686CAEFD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0AB9
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: nNero5v50i4HEyYpiM+KhSsGUIoUoVVFU1WX2p9mTYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:ac:0a:2d:82:b7:ff:04:f6:68:6c:ae:fd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=6b38bc3668caef5185e97275d8c5e949a54b5a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:bb:9f:84:20:ad:75:72:d7:31:ab:e3:40:
3f:ac:38:c3:41:04:57:5e:d9:db:23:af:3b:0d:96:
82:bd:4b:16:1a:e0:45:14:73:c6:25:9e:c2:3d:ac:
a7:b8:f0:18:22:0a:02:33:0f:40:b9:18:40:17:dc:
05:40:16:c9:1d:b6:28:59:24:71:6d:46:7c:8a:38:
4e:b2:b7:aa:a6:f0:bd:87:55:d3:59:9e:4b:2d:65:
88:1f:3f:d3:38:78:c5:07:04:9a:1a:8e:7b:73:59:
0d:bd:7c:b4:c4:5e:36:8a:85:5f:e3:4e:69:88:1c:
c3:70:63:ee:aa:6a:5b:12:df:33:5a:3d:5a:88:46:
c1:dd:db:00:6a:d4:58:ea:09:a9:97:fc:86:8e:96:
c5:55:40:fa:67:1d:0a:e8:12:43:0f:12:33:d7:2b:
53:3d:ac:4b:17:da:67:67:f7:c0:24:e6:a7:21:06:
0b:a3:3b:d6:47:f2:80:ba:3d:a5:6c:fb:fa:bd:95:
2c:ce:a5:5d:95:99:c9:7e:5a:43:1b:ba:7b:6e:86:
63:55:61:38:c9:41:9d:3f:29:3e:00:7b:f0:54:d8:
ba:5a:81:b6:cb:a0:1e:7e:69:09:01:55:3c:d0:b5:
bf:a7:a2:24:c7:8b:4a:6e:64:fe:46:9f:40:c8:51:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:BC:36:68:CA:EF:51:85:E9:72:75:D8:C5:E9:49:A5:4B:5A:8A
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fb:6e:28:55:e8:68:00:90:6d:6d:de:1c:87:87:f0:47:00:
22:8a:70:8c:36:f5:89:a5:c2:90:54:9c:33:91:1d:d4:18:50:
05:72:37:4c:3e:57:cf:01:34:cd:57:61:5a:8e:9d:4d:5a:1e:
de:e9:fc:b5:e0:e8:1c:31:21:2b:d8:65:34:e2:a1:e1:64:3e:
c6:31:d4:83:ff:c3:dd:db:8d:f6:da:54:e1:01:bc:0b:0a:b1:
da:c7:3a:1f:24:8e:b0:ee:b5:a2:c0:42:73:be:a9:89:23:30:
27:a4:5f:50:d3:2c:f8:c3:50:32:39:a4:a6:a0:30:ed:3b:e5:
03:88:77:96:34:e9:d3:df:a3:11:32:82:d9:96:d5:71:de:41:
bb:32:5b:60:b5:c0:f8:fb:95:58:79:23:99:ed:1a:4d:a3:db:
c8:10:84:6d:11:30:5a:f7:95:30:91:f3:a6:45:39:d1:3b:2b:
2b:43:f4:4a:16:0f:94:cf:e2:df:98:8a:f0:6a:51:13:80:99:
19:44:f4:6f:21:f6:7a:19:78:4c:69:23:d7:cf:f0:85:60:51:
9e:44:e9:85:ff:af:a6:df:3e:aa:be:71:1e:81:fd:8d:e7:74:
0d:82:06:a2:b1:9b:43:f9:15:bc:4d:9c:dc:0f:f0:1c:ee:13:
ec:7b:32:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaysCi2Ct/8E9mhsrv0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWZmZjllYjBjZjRjMGJhNzgxNGUzMjJlYzhlMDNkNGYx
ZjA3MTgwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
Eyg2YjM4YmMzNjY4Y2FlZjUxODVlOTcyNzVkOGM1ZTk0OWE1NGI1YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqC7n4QgrXVy1zGr40A/rDjDQQRX
XtnbI687DZaCvUsWGuBFFHPGJZ7CPaynuPAYIgoCMw9AuRhAF9wFQBbJHbYoWSRx
bUZ8ijhOsreqpvC9h1XTWZ5LLWWIHz/TOHjFBwSaGo57c1kNvXy0xF42ioVf405p
iBzDcGPuqmpbEt8zWj1aiEbB3dsAatRY6gmpl/yGjpbFVUD6Zx0K6BJDDxIz1ytT
PaxLF9pnZ/fAJOanIQYLozvWR/KAuj2lbPv6vZUszqVdlZnJflpDG7p7boZjVWE4
yUGdPyk+AHvwVNi6WoG2y6AefmkJAVU80LW/p6Ikx4tKbmT+Rp9AyFHpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs4vDZoyu9RhelyddjF6UmlS1qKMB8GA1UdIwQY
MBaAFK4f/56wz0wLp4FOMi7I4D1PHwcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEt
OWUxMDI5NGExOGVhLzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEtOWUxMDI5NGExOGVh
LzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvtuKFXo
aACQbW3eHIeH8EcAIopwjDb1iaXCkFScM5Ed1BhQBXI3TD5XzwE0zVdhWo6dTVoe
3un8teDoHDEhK9hlNOKh4WQ+xjHUg//D3duN9tpU4QG8Cwqx2sc6HySOsO61osBC
c76piSMwJ6RfUNMs+MNQMjmkpqAw7TvlA4h3ljTp09+jETKC2ZbVcd5BuzJbYLXA
+PuVWHkjme0aTaPbyBCEbREwWveVMJHzpkU50TsrK0P0ShYPlM/i35iK8GpRE4CZ
GUT0byH2ehl4TGkj18/whWBRnkTphf+vpt8+qr5xHoH9jed0DYIGorGbQ/kVvE2c
3A/wHO4T7HsyTw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:11 2025 by rpki-client