Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: QHicl10WSiVfm2C4ugR05zpzcyAw11mCLK3sBBRTbTw=
Subject key identifier: 03:88:17:BB:6C:51:5B:EB:DC:B4:72:A7:C0:A9:F9:D5:6C:F0:D6:22
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 0194BC3BF90278DE58AD1137DA009D758223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 0F2C
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: wY5VGwF1MJzmAOHn0jT1ugmGrZ8ZJPWUxeluNu52pNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:02:78:de:58:ad:11:37:da:00:9d:75:82:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=038817bb6c515bebdcb472a7c0a9f9d56cf0d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:6d:af:8d:ee:8d:f1:b1:8f:1e:05:8c:fa:
9c:a6:2f:b3:a0:ba:79:64:69:f2:2c:fe:c2:03:a2:
e4:b8:29:c7:9c:ca:54:27:c2:95:c0:6b:29:69:2d:
f2:5c:26:6e:36:78:72:ac:35:48:06:fa:54:6a:88:
c1:5a:63:1f:03:b8:ba:3e:09:eb:46:6d:c6:06:99:
28:fc:b2:a3:8e:a6:64:f2:58:0c:0b:8e:d8:9c:3f:
51:ae:97:52:bb:3e:8a:10:11:f0:79:ff:6d:2c:a3:
ba:ab:42:c2:a9:42:09:e9:a7:69:74:d6:ad:74:59:
4c:b3:10:60:a9:b6:f1:a5:39:ec:6d:33:93:52:78:
8e:52:72:5a:24:26:27:61:72:98:6e:e3:3c:1f:f7:
91:ca:85:f3:3b:ec:22:30:8e:00:75:e6:91:d3:ec:
88:ba:71:d5:68:d9:9d:6b:c0:a0:ba:04:fb:44:e8:
22:d9:9a:36:29:c2:bb:f6:6c:e9:9e:23:af:b9:fd:
9a:ec:c9:8a:dc:75:10:da:07:02:70:2d:3f:4f:51:
56:a6:7e:75:2c:de:7a:c2:f5:89:e3:a3:1c:c0:09:
00:79:b3:9b:bc:45:11:5a:74:7f:4b:cd:12:40:0d:
e7:c9:ea:40:50:7e:2c:09:6f:64:60:eb:c1:c4:42:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:17:BB:6C:51:5B:EB:DC:B4:72:A7:C0:A9:F9:D5:6C:F0:D6:22
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9c:f9:7d:80:5a:fa:e0:62:f7:a8:d8:31:80:24:6a:b9:4d:
15:7b:f3:cc:ff:98:23:0d:9f:fa:0b:85:2a:3b:2b:05:74:61:
cf:a3:f7:ea:0f:d0:a4:29:31:41:95:05:33:a4:b9:30:a9:a5:
e6:30:6e:bf:5f:af:c8:5f:6d:53:ca:66:d2:7b:58:81:13:c5:
4c:f0:1e:12:11:7c:ac:70:3c:69:1b:5b:a7:d0:ce:6a:be:d3:
db:7d:47:bc:94:33:47:d3:49:70:74:8d:47:34:7a:7b:2e:56:
2e:5c:64:07:6a:83:31:2b:fc:0a:dc:bb:85:da:df:6e:a2:8a:
e1:00:6e:d5:af:5d:09:68:a2:27:cc:16:d9:c8:58:a0:79:8d:
cb:79:ae:28:4b:fd:83:9b:e3:f3:aa:28:54:e7:2a:85:23:db:
04:7d:bc:ad:00:46:dc:e4:1c:15:09:31:38:a2:98:9d:36:ef:
61:61:ca:53:d4:3a:ca:15:20:60:6c:63:9a:30:0e:a6:d1:8e:
8f:81:7c:7d:7a:b5:b0:b6:ab:49:ba:00:bf:d9:78:b2:77:ec:
bc:c8:5c:8c:97:73:13:d7:14:00:a3:5a:4f:78:02:21:08:9f:
a5:a6:6c:22:a7:2e:9b:46:e8:c1:c9:96:12:57:25:aa:e0:c1:
07:68:f3:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/kCeN5YrRE32gCddYIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZjFhNTczOTE1MTUzZGU4Mjg5MGVhZTEzMDMwNjdmYTY4
YjI4NzcwHhcNMjUwMTMxMTIwMDM0WhcNMjUwMjAxMTIwMDM0WjAzMTEwLwYDVQQD
EygwMzg4MTdiYjZjNTE1YmViZGNiNDcyYTdjMGE5ZjlkNTZjZjBkNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XNtr43ujfGxjx4FjPqcpi+zoLp5
ZGnyLP7CA6LkuCnHnMpUJ8KVwGspaS3yXCZuNnhyrDVIBvpUaojBWmMfA7i6Pgnr
Rm3GBpko/LKjjqZk8lgMC47YnD9RrpdSuz6KEBHwef9tLKO6q0LCqUIJ6adpdNat
dFlMsxBgqbbxpTnsbTOTUniOUnJaJCYnYXKYbuM8H/eRyoXzO+wiMI4AdeaR0+yI
unHVaNmda8CgugT7ROgi2Zo2KcK79mzpniOvuf2a7MmK3HUQ2gcCcC0/T1FWpn51
LN56wvWJ46McwAkAebObvEURWnR/S80SQA3nyepAUH4sCW9kYOvBxEKYowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOIF7tsUVvr3LRyp8Cp+dVs8NYiMB8GA1UdIwQY
MBaAFDXxpXORUVPegokOrhMDBn+miyh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAt
MzI5MjExMDI5YTFhLzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAtMzI5MjExMDI5YTFh
LzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5z5fYBa
+uBi96jYMYAkarlNFXvzzP+YIw2f+guFKjsrBXRhz6P36g/QpCkxQZUFM6S5MKml
5jBuv1+vyF9tU8pm0ntYgRPFTPAeEhF8rHA8aRtbp9DOar7T231HvJQzR9NJcHSN
RzR6ey5WLlxkB2qDMSv8Cty7hdrfbqKK4QBu1a9dCWiiJ8wW2chYoHmNy3muKEv9
g5vj86ooVOcqhSPbBH28rQBG3OQcFQkxOKKYnTbvYWHKU9Q6yhUgYGxjmjAOptGO
j4F8fXq1sLarSboAv9l4snfsvMhcjJdzE9cUAKNaT3gCIQifpaZsIqcum0bowcmW
ElclquDBB2jzkw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:42 2025 by rpki-client