Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
File: na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json)
Hash identifier: Rc8/rbu7Fu9eOPCKXAtrtVUIasPc8WMN9dqoAArwegU=
Subject key identifier: 50:3C:0F:81:A2:5A:56:9F:48:CE:FD:15:55:38:B9:CD:D0:9B:E0:71
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Certificate issuer: /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial: 0194BC731EC7080804F0D8A8AA2DE5D5D0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
Manifest number: 03E4
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: 4sJgwkiKDf8RN2srApbYsor40DP5BhcyhcJ6prxzYrI=)
2: olL7czVWLNgm7W1_IvIVMdMAMJQ.roa (hash: E2ePc2MjZUE+sDvLqhAeZtvQFjQHcecfsCWi8c1v1uE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:c7:08:08:04:f0:d8:a8:aa:2d:e5:d5:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=503c0f81a25a569f48cefd155538b9cdd09be071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:50:80:2e:43:80:7f:c6:16:c8:35:d8:d4:
6a:3d:20:4a:fc:c8:ee:f1:0a:bc:70:f9:20:79:9d:
e0:b1:d7:81:5b:6d:7b:9f:c5:1a:22:12:28:c9:58:
2a:74:6e:10:5d:cb:a8:92:b2:f9:db:a5:38:94:d9:
18:38:37:01:f7:6a:ee:08:96:6e:c2:ee:ca:80:3c:
8b:94:42:8b:0e:1a:de:5a:d9:a8:ea:8d:30:95:4a:
9b:37:e2:1c:d2:78:74:18:d0:f3:e2:fd:9a:89:7b:
5e:10:d7:2d:e6:11:21:a1:aa:c8:e6:4a:b0:91:26:
b2:55:f2:86:ab:4f:23:da:75:b6:2c:4f:27:dd:7b:
5f:a2:dc:fd:3e:ac:4c:04:4c:0f:12:fd:47:00:0b:
0b:36:5a:94:d5:44:fc:f7:2f:c9:1b:e5:ca:18:90:
a9:25:8e:12:9c:aa:15:9a:2a:64:0c:1f:b7:dd:a2:
08:24:f5:b8:67:90:fd:fd:fb:69:9b:02:26:96:fc:
30:9b:0f:2d:f7:0a:28:62:27:01:e0:85:e6:68:e7:
36:f0:6c:b5:d0:80:e4:73:bd:8e:df:4b:bd:50:e8:
c1:cd:a7:4e:44:9d:62:c8:94:d6:36:e8:3a:cf:1e:
85:b7:6e:95:e2:27:ec:5c:16:13:86:09:2a:02:42:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:0F:81:A2:5A:56:9F:48:CE:FD:15:55:38:B9:CD:D0:9B:E0:71
X509v3 Authority Key Identifier:
keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:58:76:87:0f:f3:73:a6:f4:51:98:8b:2c:e9:c0:80:bb:c8:
20:2f:59:1f:bc:d6:0a:9d:90:ae:9f:e5:15:4f:89:bd:2f:09:
30:9c:d2:34:2b:b7:4d:9e:6e:53:c9:3f:d9:c0:a6:1b:32:9e:
03:71:81:b4:46:c7:bd:64:ce:cd:eb:86:f8:05:9f:85:1e:52:
6f:cc:ff:b3:5a:4c:38:41:12:af:04:ca:63:58:bd:5e:d1:7f:
95:8a:98:d4:bb:82:ec:f7:d2:f8:6d:74:e6:e4:5b:86:24:1c:
20:aa:8d:4b:50:ae:2d:00:59:18:60:41:71:38:07:4b:11:32:
ec:a5:17:51:3c:66:79:39:12:8e:00:d1:8e:ae:01:56:11:05:
cc:ec:c8:89:97:97:c3:15:64:01:d2:78:0f:21:c7:11:95:e1:
f9:1f:70:3e:67:7d:27:39:77:27:d2:5d:30:a5:04:df:5f:26:
3b:2e:a2:b0:90:fd:3f:22:90:dd:8a:df:55:a2:a2:29:11:c4:
12:33:10:75:c6:cd:0e:29:bd:03:75:fd:2f:42:2c:0e:a7:65:
04:b0:65:7b:43:66:cf:aa:3d:ab:07:23:34:da:86:42:09:32:
c8:29:c7:26:bc:2f:18:e6:11:ab:e1:3c:5f:72:09:48:ba:93:
09:66:17:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx7HCAgE8Nioqi3l1dDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWViYWY2Zjk3ZWM5Mzc0ZGY2YzE0OTJmNTlkNWYxM2E5
ZGQwMDgwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
Eyg1MDNjMGY4MWEyNWE1NjlmNDhjZWZkMTU1NTM4YjljZGQwOWJlMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wNQgC5DgH/GFsg12NRqPSBK/Mju
8Qq8cPkgeZ3gsdeBW217n8UaIhIoyVgqdG4QXcuokrL526U4lNkYODcB92ruCJZu
wu7KgDyLlEKLDhreWtmo6o0wlUqbN+Ic0nh0GNDz4v2aiXteENct5hEhoarI5kqw
kSayVfKGq08j2nW2LE8n3Xtfotz9PqxMBEwPEv1HAAsLNlqU1UT89y/JG+XKGJCp
JY4SnKoVmipkDB+33aIIJPW4Z5D9/ftpmwImlvwwmw8t9wooYicB4IXmaOc28Gy1
0IDkc72O30u9UOjBzadORJ1iyJTWNug6zx6Ft26V4ifsXBYThgkqAkKJYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA8D4GiWlafSM79FVU4uc3Qm+BxMB8GA1UdIwQY
MBaAFJ2uuvb5fsk3TfbBSS9Z1fE6ndAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDIt
M2U1ZWU0YThmMzg4LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDItM2U1ZWU0YThmMzg4
LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFh2hw/z
c6b0UZiLLOnAgLvIIC9ZH7zWCp2Qrp/lFU+JvS8JMJzSNCu3TZ5uU8k/2cCmGzKe
A3GBtEbHvWTOzeuG+AWfhR5Sb8z/s1pMOEESrwTKY1i9XtF/lYqY1LuC7PfS+G10
5uRbhiQcIKqNS1CuLQBZGGBBcTgHSxEy7KUXUTxmeTkSjgDRjq4BVhEFzOzIiZeX
wxVkAdJ4DyHHEZXh+R9wPmd9Jzl3J9JdMKUE318mOy6isJD9PyKQ3YrfVaKiKRHE
EjMQdcbNDim9A3X9L0IsDqdlBLBle0Nmz6o9qwcjNNqGQgkyyCnHJrwvGOYRq+E8
X3IJSLqTCWYXaw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:41 2025 by rpki-client