Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File: nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier: SKFxhGhFWiN69hNUFyRFHjPXiayz/QPlztiUSIxciig=
Subject key identifier: 6A:04:82:F5:26:12:9D:BF:8F:87:5E:85:4A:58:F3:A3:90:66:9A:22
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer: /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial: 0194BCA9DE6CB247A38D2776CFBD542319EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number: 082A
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (hash: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=)
2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: A5sUFm5RSqPTg1rmGFfREbTmy5DZGeYCkGxfjcj6YqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:de:6c:b2:47:a3:8d:27:76:cf:bd:54:23:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=6a0482f526129dbf8f875e854a58f3a390669a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9f:d4:c7:d2:f2:8c:a8:c9:8f:7b:2d:49:78:
61:1d:27:4c:18:60:2d:ec:4d:2c:46:77:d6:e4:41:
77:5b:54:66:64:c7:2d:a6:b6:dd:50:f3:09:43:58:
b8:43:81:ff:88:b1:96:38:d9:6f:77:0f:4d:97:14:
f4:81:4e:39:78:a8:b6:c0:12:cf:15:0b:46:3a:15:
b8:b9:ae:5e:cd:26:13:53:17:cf:c4:80:f3:d6:30:
47:c2:7d:3b:d9:9d:91:3b:cc:98:02:66:a4:1f:8c:
8f:d6:de:e2:11:f5:73:03:0c:89:f0:da:9c:d2:a1:
c5:0d:f4:76:d7:05:91:d9:50:9d:7d:98:e4:52:fd:
a6:00:1a:f3:a1:15:91:f0:25:0c:3e:52:3e:2c:88:
a0:52:bf:20:40:7f:cc:fd:d4:0f:51:60:17:39:19:
39:92:d2:59:0b:ac:e3:15:a8:a7:5a:25:c9:1e:0a:
79:57:e8:0b:d9:91:a9:61:6b:89:e7:bc:56:5c:a1:
cd:2a:7f:14:9c:c0:2c:75:e8:ff:7f:30:19:97:72:
37:55:7d:93:97:64:4f:6f:5d:7d:e4:8a:0b:09:93:
80:99:00:26:c7:79:06:d0:42:09:f4:d6:e5:30:c0:
a2:59:e9:c9:8a:f3:27:e4:ba:38:22:82:fb:d2:83:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:82:F5:26:12:9D:BF:8F:87:5E:85:4A:58:F3:A3:90:66:9A:22
X509v3 Authority Key Identifier:
keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:19:c8:88:90:bd:5e:d5:de:6a:21:d2:c1:39:9e:72:89:b1:
de:91:17:62:c2:d7:ce:c6:2a:45:fa:4e:f6:4c:e8:1e:94:a0:
07:e2:64:37:44:36:21:d1:79:85:3c:a4:18:97:29:a8:3b:25:
1e:4e:c5:77:ab:2d:11:53:fa:8b:45:a3:9a:f2:fb:b3:c4:6c:
46:51:62:9c:f1:9d:08:54:b4:0d:6e:aa:78:f7:ee:9b:5d:7b:
25:2a:e8:21:a2:0b:bb:04:86:86:f9:9c:a0:18:32:c9:fe:94:
bc:b0:ab:4c:ff:60:f6:ca:1a:a2:c0:24:14:97:b5:9e:c3:9c:
fc:27:60:4a:66:60:bb:be:27:03:98:4b:8d:64:b4:62:f5:d1:
e1:4e:c2:48:52:3d:ce:b8:70:90:85:12:d0:3e:c9:11:e1:6a:
5e:fa:98:dc:10:b7:40:31:d3:ae:4d:25:ee:21:fe:a9:bb:ec:
35:dc:22:ee:e7:11:a3:e2:df:73:c6:a3:db:ea:8f:bb:3c:07:
bb:e3:ef:77:df:50:92:b3:36:54:e7:a5:eb:bb:9b:15:b1:82:
6b:6e:42:cc:46:b2:fb:25:21:95:61:2e:bb:3b:91:08:0f:60:
a8:ae:ed:04:08:fe:6b:e8:a2:48:95:dd:14:44:25:58:52:1b:
bc:fe:38:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd5sskejjSd2z71UIxnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzIzMzEwYzkxNWE0ZmUwOTVlMWI3NGEwNjZkMWNkZWU0
Nzg0M2YwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
Eyg2YTA0ODJmNTI2MTI5ZGJmOGY4NzVlODU0YTU4ZjNhMzkwNjY5YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p/Ux9LyjKjJj3stSXhhHSdMGGAt
7E0sRnfW5EF3W1RmZMctprbdUPMJQ1i4Q4H/iLGWONlvdw9NlxT0gU45eKi2wBLP
FQtGOhW4ua5ezSYTUxfPxIDz1jBHwn072Z2RO8yYAmakH4yP1t7iEfVzAwyJ8Nqc
0qHFDfR21wWR2VCdfZjkUv2mABrzoRWR8CUMPlI+LIigUr8gQH/M/dQPUWAXORk5
ktJZC6zjFainWiXJHgp5V+gL2ZGpYWuJ57xWXKHNKn8UnMAsdej/fzAZl3I3VX2T
l2RPb1195IoLCZOAmQAmx3kG0EIJ9NblMMCiWenJivMn5Lo4IoL70oMlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoEgvUmEp2/j4dehUpY86OQZpoiMB8GA1UdIwQY
MBaAFJzCMxDJFaT+CV4bdKBm0c3uR4Q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1JekVNa1ZwUDRKWGh0MG9HYlJ6ZTVIaEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMGNhZWUtZmQ2OC00ZGRjLWIyMmUt
NDQzMzYwOGFhNWQ1LzEvbk1JekVNa1ZwUDRKWGh0MG9HYlJ6ZTVIaEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMGNhZWUtZmQ2OC00ZGRjLWIyMmUtNDQzMzYwOGFhNWQ1
LzEvbk1JekVNa1ZwUDRKWGh0MG9HYlJ6ZTVIaEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxBnIiJC9
XtXeaiHSwTmecomx3pEXYsLXzsYqRfpO9kzoHpSgB+JkN0Q2IdF5hTykGJcpqDsl
Hk7Fd6stEVP6i0WjmvL7s8RsRlFinPGdCFS0DW6qePfum117JSroIaILuwSGhvmc
oBgyyf6UvLCrTP9g9soaosAkFJe1nsOc/CdgSmZgu74nA5hLjWS0YvXR4U7CSFI9
zrhwkIUS0D7JEeFqXvqY3BC3QDHTrk0l7iH+qbvsNdwi7ucRo+Lfc8aj2+qPuzwH
u+Pvd99QkrM2VOel67ubFbGCa25CzEay+yUhlWEuuzuRCA9gqK7tBAj+a+iiSJXd
FEQlWFIbvP444A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client