Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
File: nzbQijzYpC9Goslt_XLtjO4nlHc.mft (raw, json)
Hash identifier: vMHw6qtTbuuFh49+RmQNaUoMF5jxr6O+HIH23+nuCds=
Subject key identifier: 13:CF:E3:9D:95:E4:E5:A5:EE:46:0F:6F:6E:EF:3F:FE:6A:BB:80:E9
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 0194BD1781D8FFD038B88E0C53421E9875BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
Manifest number: 0A32
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: nzbQijzYpC9Goslt_XLtjO4nlHc.crl (hash: YdfeAGqbpC+sb7SzpygBUA9NB1wtPUi2c0z7Ez0gSmI=)
2: twzQnUgBAT35ET2oNZWOjjEoBE4.roa (hash: HIWNIMTAhxf1Wnub1ymBGmdU28kJ6snFsV9+PWAEB7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:d8:ff:d0:38:b8:8e:0c:53:42:1e:98:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=13cfe39d95e4e5a5ee460f6f6eef3ffe6abb80e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:ae:d7:54:f2:43:a4:4d:0e:fd:ec:50:58:
f9:ca:42:0b:bd:a9:84:44:af:2f:34:1f:5e:aa:1e:
73:8d:5b:9d:5a:5a:c9:52:7b:44:56:74:d8:5c:cf:
19:a6:02:22:0d:c8:24:ae:b1:64:fd:bc:75:b2:6e:
29:16:77:c3:7c:52:6b:90:d7:2e:11:d4:c3:15:e5:
b4:89:6e:d5:f3:24:cd:bf:8b:ac:cb:18:e3:ac:17:
4e:b8:85:d1:63:ba:1a:95:48:32:f8:d1:90:36:d5:
24:e6:11:bf:82:9a:e4:22:7b:12:7f:25:88:6a:9f:
43:c9:6a:c8:16:c5:94:18:13:4e:8c:da:fb:52:23:
77:53:b5:9b:63:78:06:e2:fa:a7:12:f0:01:cc:fb:
aa:74:9c:2f:56:43:9b:8c:5e:d9:2d:d2:79:cc:ae:
d6:da:e8:93:0c:ef:60:68:33:e5:75:c3:63:0a:40:
b5:0d:2f:69:14:b3:f7:5d:75:ff:fb:c7:bf:51:6a:
c3:0d:ac:08:2f:fc:c4:ca:a1:6d:17:02:9b:fb:1a:
a8:d2:1b:3f:eb:d9:92:df:89:7b:11:be:98:e5:4f:
06:e9:16:5e:f0:93:f6:93:e4:b2:62:35:8d:61:40:
45:99:86:d8:15:44:15:e1:29:89:3b:85:85:00:62:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:E3:9D:95:E4:E5:A5:EE:46:0F:6F:6E:EF:3F:FE:6A:BB:80:E9
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c9:a4:00:9d:95:de:29:59:30:3d:9c:ac:d4:44:62:1e:7a:
34:81:bb:fb:88:1d:fc:46:1c:62:cc:30:c5:8e:c4:38:22:91:
00:1a:ca:cb:be:26:f9:45:58:c0:b6:75:1f:42:47:bc:6d:cb:
8f:6b:f2:4c:78:bc:ca:ed:1e:1c:d1:1b:d8:81:36:0b:4f:2c:
d3:4d:e9:21:c2:72:e6:cb:2c:7e:83:2b:a9:25:ad:71:8e:10:
f1:46:08:3e:4c:fd:cf:02:8f:94:26:c9:14:dc:21:60:90:8c:
03:a6:e1:e6:0b:35:db:bf:b7:b4:50:e4:85:bc:29:41:da:78:
d0:83:ef:9d:dd:ce:d0:94:64:08:01:03:b2:f8:53:13:52:fa:
10:db:be:4e:6a:51:58:b3:5a:0f:63:80:a1:a1:af:e3:74:7c:
ee:9a:89:b1:68:5b:6d:6a:28:bb:bd:ba:ca:f6:12:73:55:58:
68:bd:22:92:1e:cd:8e:a5:a5:b7:6e:d1:5a:04:cc:4d:24:4a:
56:13:6c:5d:5a:81:5c:bf:1d:1e:77:d9:2d:38:f4:74:7a:00:
fb:f4:ac:73:d9:45:de:8c:47:41:38:3d:cc:c2:aa:d4:1d:6b:
33:f1:f2:50:9d:9e:f9:59:af:9b:0f:4b:64:17:e0:8c:90:1a:
04:93:42:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4HY/9A4uI4MU0IemHW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzZkMDhhM2NkOGE0MmY0NmEyYzk2ZGZkNzJlZDhjZWUy
Nzk0NzcwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EygxM2NmZTM5ZDk1ZTRlNWE1ZWU0NjBmNmY2ZWVmM2ZmZTZhYmI4MGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+6u11TyQ6RNDv3sUFj5ykILvamE
RK8vNB9eqh5zjVudWlrJUntEVnTYXM8ZpgIiDcgkrrFk/bx1sm4pFnfDfFJrkNcu
EdTDFeW0iW7V8yTNv4usyxjjrBdOuIXRY7oalUgy+NGQNtUk5hG/gprkInsSfyWI
ap9DyWrIFsWUGBNOjNr7UiN3U7WbY3gG4vqnEvABzPuqdJwvVkObjF7ZLdJ5zK7W
2uiTDO9gaDPldcNjCkC1DS9pFLP3XXX/+8e/UWrDDawIL/zEyqFtFwKb+xqo0hs/
69mS34l7Eb6Y5U8G6RZe8JP2k+SyYjWNYUBFmYbYFUQV4SmJO4WFAGKm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPP452V5OWl7kYPb27vP/5qu4DpMB8GA1UdIwQY
MBaAFJ820Io82KQvRqLJbf1y7YzuJ5R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZmJiYTctZWEwZS00MDg5LTk3Mjct
YzMzMzcyYzlkNTA3LzEvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZmJiYTctZWEwZS00MDg5LTk3MjctYzMzMzcyYzlkNTA3
LzEvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacmkAJ2V
3ilZMD2crNREYh56NIG7+4gd/EYcYswwxY7EOCKRABrKy74m+UVYwLZ1H0JHvG3L
j2vyTHi8yu0eHNEb2IE2C08s003pIcJy5sssfoMrqSWtcY4Q8UYIPkz9zwKPlCbJ
FNwhYJCMA6bh5gs127+3tFDkhbwpQdp40IPvnd3O0JRkCAEDsvhTE1L6ENu+TmpR
WLNaD2OAoaGv43R87pqJsWhbbWoou726yvYSc1VYaL0ikh7NjqWlt27RWgTMTSRK
VhNsXVqBXL8dHnfZLTj0dHoA+/Ssc9lF3oxHQTg9zMKq1B1rM/HyUJ2e+Vmvmw9L
ZBfgjJAaBJNC2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:46 2025 by rpki-client