Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: lzuwUxjUChLUeDiDbPmaagw+g6rcuseDHQRJpfcDzNg=
Subject key identifier: 7C:04:4C:3A:3D:FB:94:EB:FA:A8:E6:40:52:B8:D0:B1:B5:AC:70:87
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 0194BD8523FAC007E81A2CE27EB862085723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0744
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: Ri2+jpR064DdkorTXh85dXrznLk6ZRnI5zd5mI4FULY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:23:fa:c0:07:e8:1a:2c:e2:7e:b8:62:08:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=7c044c3a3dfb94ebfaa8e64052b8d0b1b5ac7087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:32:cc:77:d5:d8:7c:99:26:46:d7:ec:b3:
d0:4a:3d:76:d0:9e:7d:46:cd:de:a5:51:2a:f0:27:
11:41:04:a4:c4:98:20:3f:b0:60:c5:0d:72:08:8b:
3e:0f:0c:26:b7:25:4e:7a:fc:b0:2e:54:e4:ed:27:
e0:11:cd:e7:24:54:e2:62:c0:78:c2:e2:b8:79:35:
fc:cd:42:6c:3d:33:c6:94:93:da:d9:35:8d:24:e3:
e3:22:1f:63:97:5e:9b:24:ef:fe:85:da:0d:10:d1:
34:02:a7:c9:1c:36:4d:2d:21:e0:43:8e:e1:ed:f2:
f3:3b:51:0d:33:7e:ad:e4:1a:ec:2a:fb:4a:6a:44:
78:ce:07:e2:09:76:79:aa:f2:02:0c:94:65:ff:75:
02:82:34:94:6d:2d:2d:50:63:92:7f:8f:db:54:3e:
12:95:d2:56:a3:62:dd:d0:9e:5f:04:74:3b:c0:b5:
99:50:45:c2:3f:6f:73:95:d4:d6:e4:56:4b:fb:8c:
ad:62:76:7e:1f:fa:9b:e0:a6:7e:8a:00:d4:8b:11:
14:7a:82:b7:cb:9f:de:57:ae:28:15:3d:79:ec:44:
ad:97:34:55:f0:ba:7f:fd:ce:56:18:1b:b4:17:13:
c9:65:ae:39:16:b4:d5:dc:ed:01:96:16:f6:ac:ed:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:4C:3A:3D:FB:94:EB:FA:A8:E6:40:52:B8:D0:B1:B5:AC:70:87
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c9:ab:49:bd:26:08:f3:d8:5b:77:56:03:dc:b8:d7:63:db:
a8:cd:67:08:ee:84:c9:48:9e:df:8b:be:04:fc:d8:e6:7b:c1:
55:00:ad:1e:62:a0:1f:d8:c4:63:b7:99:61:f3:c0:0b:65:15:
3f:bc:a0:b6:a1:39:2e:88:e0:aa:94:f9:26:73:29:43:ca:ee:
b3:ce:f3:fb:21:d2:cf:fd:5a:0a:f1:89:70:49:d4:de:c9:f4:
ce:77:bf:eb:59:1f:1c:d1:78:10:f9:c2:60:2e:e3:06:67:76:
f3:f8:23:90:2e:e4:51:83:58:9d:46:84:a5:98:29:cd:75:bc:
0e:ae:15:c0:34:32:95:fe:53:ac:5b:00:55:0b:c2:c5:14:83:
47:7d:73:07:d0:f2:64:bc:ca:60:6b:d6:a2:23:b2:d0:45:d4:
cd:ad:27:83:1f:bd:64:b0:f5:d7:75:85:81:02:44:f5:a3:41:
38:b1:f6:e1:76:9b:a6:6b:0d:e3:31:1e:0c:94:8f:b8:00:89:
71:1d:2b:d0:90:6b:c5:6a:86:62:ab:a3:99:4e:68:83:09:ed:
1c:b9:4b:f2:72:fa:99:20:c6:d6:bd:85:7b:5c:96:57:99:98:
10:c7:b2:4f:a9:7e:46:e6:2e:07:b0:b1:59:35:46:41:93:f2:
4c:d6:8a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSP6wAfoGizifrhiCFcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4
MzFmNTIwHhcNMjUwMTMxMTgwMDA2WhcNMjUwMjAxMTgwMDA2WjAzMTEwLwYDVQQD
Eyg3YzA0NGMzYTNkZmI5NGViZmFhOGU2NDA1MmI4ZDBiMWI1YWM3MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5YyzHfV2HyZJkbX7LPQSj120J59
Rs3epVEq8CcRQQSkxJggP7BgxQ1yCIs+DwwmtyVOevywLlTk7SfgEc3nJFTiYsB4
wuK4eTX8zUJsPTPGlJPa2TWNJOPjIh9jl16bJO/+hdoNENE0AqfJHDZNLSHgQ47h
7fLzO1ENM36t5BrsKvtKakR4zgfiCXZ5qvICDJRl/3UCgjSUbS0tUGOSf4/bVD4S
ldJWo2Ld0J5fBHQ7wLWZUEXCP29zldTW5FZL+4ytYnZ+H/qb4KZ+igDUixEUeoK3
y5/eV64oFT157EStlzRV8Lp//c5WGBu0FxPJZa45FrTV3O0Blhb2rO0HbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwETDo9+5Tr+qjmQFK40LG1rHCHMB8GA1UdIwQY
MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt
M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx
LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMmrSb0m
CPPYW3dWA9y412PbqM1nCO6EyUie34u+BPzY5nvBVQCtHmKgH9jEY7eZYfPAC2UV
P7ygtqE5LojgqpT5JnMpQ8rus87z+yHSz/1aCvGJcEnU3sn0zne/61kfHNF4EPnC
YC7jBmd28/gjkC7kUYNYnUaEpZgpzXW8Dq4VwDQylf5TrFsAVQvCxRSDR31zB9Dy
ZLzKYGvWoiOy0EXUza0ngx+9ZLD113WFgQJE9aNBOLH24XabpmsN4zEeDJSPuACJ
cR0r0JBrxWqGYqujmU5ogwntHLlL8nL6mSDG1r2Fe1yWV5mYEMeyT6l+RuYuB7Cx
WTVGQZPyTNaK0g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:16 2025 by rpki-client