Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: uoco92tcXdhaLgtJmrjblv7N8wv5QSAYGLdZ2aLv6uM=
Subject key identifier: 8C:D3:0F:18:CC:60:4C:4F:FA:9F:60:F7:FD:84:4E:2C:D3:20:4A:98
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0194BC3BD97A82B5BD31A39FA72965C652CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: Hr/Gt+zQJ4swn91UwMqgmy6zGnJRucR9FTme+mlLFyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:7a:82:b5:bd:31:a3:9f:a7:29:65:c6:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=8cd30f18cc604c4ffa9f60f7fd844e2cd3204a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:ba:97:66:e3:82:75:bc:8b:27:19:3c:43:
e5:da:70:61:d4:7f:61:bb:c0:5c:d3:d9:63:76:48:
2b:fd:a7:f6:74:f9:d5:64:39:cb:21:b8:37:c0:29:
0f:de:81:11:ac:f5:a9:71:61:20:e8:a2:93:67:b9:
2f:7b:00:5d:2b:17:4e:b4:d8:bd:9f:88:f3:16:47:
4e:63:a4:ac:2f:1d:8d:92:0c:f3:35:bb:0b:4d:25:
9c:5b:38:b6:c1:8e:30:81:f2:a0:73:88:4d:47:f9:
5a:96:61:39:3d:58:b2:91:92:80:a6:13:8a:58:ed:
2b:69:04:9d:2f:4b:00:7b:63:1c:a1:aa:e6:f7:fd:
68:0a:fd:d7:a5:e1:8b:18:97:af:7f:4b:84:d0:d3:
eb:30:79:c1:a2:8d:73:c2:81:a0:0e:2f:e6:99:1b:
16:7c:f8:70:4d:2d:df:97:6b:2e:d6:63:c4:15:28:
12:ac:92:2b:c4:39:2a:d3:c4:af:ff:d1:6e:25:44:
11:fb:96:e5:d2:42:73:08:9d:9f:0f:29:75:03:f7:
91:5c:e9:4d:36:4f:6c:0a:11:65:00:a5:4a:de:dc:
85:15:7b:21:63:49:94:9f:cc:cc:f5:99:65:a5:90:
e5:df:c7:f6:b2:f2:22:e6:d2:9f:63:d3:cc:d8:92:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:0F:18:CC:60:4C:4F:FA:9F:60:F7:FD:84:4E:2C:D3:20:4A:98
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:24:60:c4:17:72:4b:be:98:a6:4b:59:66:2f:d0:51:13:8e:
d7:05:70:6a:c6:52:fc:b9:c3:b2:57:6e:7c:ed:14:c9:52:4f:
49:80:f6:b2:a4:98:3f:a2:d8:b3:19:a9:36:cf:97:44:aa:a6:
eb:cb:80:c4:c9:f5:ed:36:43:d9:a0:fc:c0:1c:35:83:c2:a5:
e2:69:9c:01:06:d3:16:80:fb:b8:b5:ca:0f:42:8a:48:a5:03:
05:fc:39:d8:e9:3f:7b:90:de:91:65:5b:5a:47:24:5f:08:3d:
34:8f:00:20:4c:af:d3:2d:18:12:6d:46:7a:99:86:0f:41:9e:
50:81:ee:13:10:ed:c8:a8:7c:06:ec:94:f8:b3:f1:50:23:7d:
f4:11:74:83:1e:66:b4:4c:48:4f:75:00:6f:cf:81:a2:5b:aa:
c1:3f:61:ff:e3:6c:4c:6c:59:4e:67:b3:26:74:55:a8:31:fe:
c1:6d:9b:a9:03:d8:a4:fa:4d:53:c3:47:45:e8:ea:17:5a:09:
b5:87:71:42:88:c4:39:34:a4:a2:ea:fb:d7:1e:74:71:ab:a3:
55:df:c6:91:d6:e4:0c:95:f1:64:fd:4d:e1:7d:73:4a:6c:b0:
59:35:db:fe:e2:48:d2:9e:a5:38:95:5f:ea:c0:1f:5f:1e:fd:
7f:89:48:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9l6grW9MaOfpyllxlLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1YjgxYjZjMWVkZDJmNmY1YmMxYzYwOGE1ZmM5ZmU5
MjY0NzQwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
Eyg4Y2QzMGYxOGNjNjA0YzRmZmE5ZjYwZjdmZDg0NGUyY2QzMjA0YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFi6l2bjgnW8iycZPEPl2nBh1H9h
u8Bc09ljdkgr/af2dPnVZDnLIbg3wCkP3oERrPWpcWEg6KKTZ7kvewBdKxdOtNi9
n4jzFkdOY6SsLx2NkgzzNbsLTSWcWzi2wY4wgfKgc4hNR/lalmE5PViykZKAphOK
WO0raQSdL0sAe2Mcoarm9/1oCv3XpeGLGJevf0uE0NPrMHnBoo1zwoGgDi/mmRsW
fPhwTS3fl2su1mPEFSgSrJIrxDkq08Sv/9FuJUQR+5bl0kJzCJ2fDyl1A/eRXOlN
Nk9sChFlAKVK3tyFFXshY0mUn8zM9ZllpZDl38f2svIi5tKfY9PM2JJ45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzTDxjMYExP+p9g9/2ETizTIEqYMB8GA1UdIwQY
MBaAFDUTW4G2we3S9vW8HGCKX8n+kmR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMGEwYTAtZDI1YS00NzQ2LTkxMzkt
YTcxNDU2ZGY5OTk3LzEvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kMGEwYTAtZDI1YS00NzQ2LTkxMzktYTcxNDU2ZGY5OTk3
LzEvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyRgxBdy
S76YpktZZi/QUROO1wVwasZS/LnDsldufO0UyVJPSYD2sqSYP6LYsxmpNs+XRKqm
68uAxMn17TZD2aD8wBw1g8Kl4mmcAQbTFoD7uLXKD0KKSKUDBfw52Ok/e5DekWVb
WkckXwg9NI8AIEyv0y0YEm1GepmGD0GeUIHuExDtyKh8BuyU+LPxUCN99BF0gx5m
tExIT3UAb8+BoluqwT9h/+NsTGxZTmezJnRVqDH+wW2bqQPYpPpNU8NHRejqF1oJ
tYdxQojEOTSkour71x50caujVd/GkdbkDJXxZP1N4X1zSmywWTXb/uJI0p6lOJVf
6sAfXx79f4lI0w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client