Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier: JXWkGoYqvmg9uobTOQMB2FBk4oXe9kGIsgbPn17Hfxw=
Subject key identifier: 2A:B2:19:A3:00:86:BC:6B:BA:CC:04:72:25:24:3C:36:72:3D:1C:93
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 0194BCA9EAB24E5E99CE003A47E18D8D4EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number: 04DC
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: qhCAnBMDNxpg6kDa9P7qzDC+vgzUWMN52v/50zmEW3w=)
2: b5A8GlRvIxklOSIq2iD6QFLf8Zg.roa (hash: tkDUlXl5aQGshVl9qpG9acQyqwhYwSAWWDiYiBxguT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:b2:4e:5e:99:ce:00:3a:47:e1:8d:8d:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=2ab219a30086bc6bbacc047225243c36723d1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:2c:e4:2b:02:d4:00:e2:8f:ab:44:d6:e3:
b0:c3:52:5e:7c:7b:a0:95:01:3f:07:a9:cd:2c:60:
db:0d:21:db:5f:02:69:38:40:53:22:b2:42:58:b1:
ac:a5:d6:fe:d1:ae:00:16:58:10:fa:80:ad:03:76:
7c:35:4a:ef:c3:29:8f:2b:0d:7d:45:71:9a:00:0a:
78:60:73:0b:07:14:d6:18:92:0b:2f:1f:9f:c6:b1:
f4:a8:72:16:ab:17:2e:73:10:15:cf:a7:6b:f5:3b:
9e:63:36:cc:13:9a:a4:c2:2d:b0:5c:10:ca:4e:1a:
67:3e:f1:91:c9:5b:9e:8b:c3:27:12:0e:74:c0:8d:
cd:c9:b0:9d:31:29:a9:63:f2:be:72:b2:33:4c:b2:
dd:1d:2e:b9:9e:43:b0:91:2d:70:1b:27:27:f2:fb:
b8:26:54:4f:e0:60:4c:46:5e:9f:cc:55:4f:55:66:
32:65:e6:5f:27:41:44:ab:aa:c1:05:79:ac:48:03:
bb:7c:36:d7:42:1d:a4:68:a5:26:a0:7e:91:e9:ce:
fd:2e:c0:e5:e1:a1:d7:db:13:58:a2:7a:ef:59:cd:
a5:5e:e6:41:2a:bd:27:c2:65:70:b0:09:e9:8c:6f:
35:a0:14:42:13:20:4c:cb:87:3c:e3:55:c1:31:3f:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:19:A3:00:86:BC:6B:BA:CC:04:72:25:24:3C:36:72:3D:1C:93
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8e:77:65:c7:e5:eb:d5:e4:22:ab:b9:1c:a4:4c:c7:8a:79:
98:2b:89:48:a2:f0:3f:99:46:dc:42:5e:f7:db:69:9b:6a:43:
f6:0d:09:bd:cd:39:c7:5d:91:93:03:9b:7b:e0:57:1a:69:74:
73:02:8c:aa:47:f6:3e:f5:ca:c1:15:9c:dd:dc:32:2a:38:52:
82:2a:82:dc:1e:b4:e4:4e:c7:43:b0:bc:5d:f0:25:9d:96:b6:
13:a6:82:11:e8:46:65:7b:bd:68:58:77:94:fa:aa:f9:d5:97:
8d:57:64:c9:a5:e0:95:9d:4a:03:98:20:e6:36:50:6b:08:37:
7a:5a:e6:17:3a:f7:39:07:fe:69:26:41:89:05:9f:4d:bf:78:
72:09:a7:79:22:40:49:22:ff:b0:72:04:6f:46:f1:4d:4a:01:
c4:fe:61:14:65:3b:ca:ca:55:c0:a0:b5:48:d7:da:ec:73:dc:
03:83:9d:7e:b8:8a:d0:a2:5f:bf:c8:58:3e:a0:06:b9:04:6e:
4e:58:55:a3:df:a6:12:47:41:05:2a:71:19:0a:27:0b:cd:a4:
eb:f7:80:d1:ee:f9:c2:cd:4b:9a:91:1d:3a:fd:a4:01:97:1d:
8a:e2:f4:eb:9a:74:8d:c9:a8:9b:e4:1d:86:c5:9c:66:01:b5:
6f:7a:21:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeqyTl6ZzgA6R+GNjU66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjNlNDViODE2NDkzY2NkYmRkNGIwNzcwOGEyMWZiNzNh
MWU1OTkwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
EygyYWIyMTlhMzAwODZiYzZiYmFjYzA0NzIyNTI0M2MzNjcyM2QxYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1cs5CsC1ADij6tE1uOww1JefHug
lQE/B6nNLGDbDSHbXwJpOEBTIrJCWLGspdb+0a4AFlgQ+oCtA3Z8NUrvwymPKw19
RXGaAAp4YHMLBxTWGJILLx+fxrH0qHIWqxcucxAVz6dr9TueYzbME5qkwi2wXBDK
ThpnPvGRyVuei8MnEg50wI3NybCdMSmpY/K+crIzTLLdHS65nkOwkS1wGycn8vu4
JlRP4GBMRl6fzFVPVWYyZeZfJ0FEq6rBBXmsSAO7fDbXQh2kaKUmoH6R6c79LsDl
4aHX2xNYonrvWc2lXuZBKr0nwmVwsAnpjG81oBRCEyBMy4c841XBMT+PDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqyGaMAhrxruswEciUkPDZyPRyTMB8GA1UdIwQY
MBaAFDdj5FuBZJPM291LB3CKIftzoeWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJQa1c0RmtrOHpiM1VzSGNJb2gtM09oNVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZGJiNDctNTcyYS00OWNjLWE2ZDAt
NTFmZjIwZjlmZWY5LzEvTjJQa1c0RmtrOHpiM1VzSGNJb2gtM09oNVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZGJiNDctNTcyYS00OWNjLWE2ZDAtNTFmZjIwZjlmZWY5
LzEvTjJQa1c0RmtrOHpiM1VzSGNJb2gtM09oNVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro53Zcfl
69XkIqu5HKRMx4p5mCuJSKLwP5lG3EJe99tpm2pD9g0Jvc05x12RkwObe+BXGml0
cwKMqkf2PvXKwRWc3dwyKjhSgiqC3B605E7HQ7C8XfAlnZa2E6aCEehGZXu9aFh3
lPqq+dWXjVdkyaXglZ1KA5gg5jZQawg3elrmFzr3OQf+aSZBiQWfTb94cgmneSJA
SSL/sHIEb0bxTUoBxP5hFGU7yspVwKC1SNfa7HPcA4OdfriK0KJfv8hYPqAGuQRu
TlhVo9+mEkdBBSpxGQonC82k6/eA0e75ws1LmpEdOv2kAZcdiuL065p0jcmom+Qd
hsWcZgG1b3ohlA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client