Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: zU0YzSbXTPTltEZYRfaLWNUXhSofuBIF0nxBR4pxFDg=
Subject key identifier: F7:BF:8D:33:C0:4D:8F:21:63:37:B5:6D:3C:70:93:5C:9E:31:17:3F
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 0194BD176D828FA8CCC633933B08D41B7BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 06E2
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: krN6lOSoWvClIceonQ3xF5WQCJmCQAdfELo9fMN3vLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:82:8f:a8:cc:c6:33:93:3b:08:d4:1b:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=f7bf8d33c04d8f216337b56d3c70935c9e31173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:a1:00:48:71:54:7b:77:52:54:87:fd:1a:
c1:56:b4:c6:b6:24:ee:5c:f9:16:ee:9d:f5:53:64:
2f:ef:8c:c1:78:de:7a:6b:6a:55:cd:9e:47:2e:f0:
9b:21:9e:d6:09:f8:a9:6f:86:75:9d:08:41:70:aa:
23:9e:07:6c:73:71:b0:1b:d3:4f:ae:45:14:f8:94:
6f:93:4c:80:71:86:21:cd:24:31:b6:12:1b:ab:d1:
62:6a:ea:cd:fc:a2:25:2c:49:f5:20:55:94:f9:6b:
47:48:28:d7:25:2b:40:44:d9:09:fb:cd:99:7a:be:
6d:ab:10:68:f6:a2:b7:88:d3:84:64:1f:63:25:77:
03:8e:94:3c:ed:5b:6f:15:59:ab:c2:3d:bb:ab:93:
de:0e:ab:71:78:2d:90:b5:b5:d8:43:93:fe:76:d8:
7f:e7:b3:29:c0:00:d5:44:88:f7:7b:8e:91:10:6f:
f9:5c:71:54:4d:eb:02:a3:d7:e3:b5:19:fa:f5:1a:
ac:89:34:66:7a:5b:17:ad:89:6d:f8:89:3d:45:42:
ff:c0:7c:32:54:42:76:f2:06:dd:dc:42:bf:56:ba:
0c:59:89:95:3f:4d:b4:42:8e:71:0e:8c:d3:9e:ee:
e7:b7:52:67:e1:31:2f:48:3d:a2:e3:cd:f3:47:62:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:8D:33:C0:4D:8F:21:63:37:B5:6D:3C:70:93:5C:9E:31:17:3F
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:db:e8:d7:61:20:d6:99:f0:f4:10:32:9a:3a:f6:2f:79:a6:
85:8f:7e:e6:89:af:d7:a4:c5:f2:43:24:4f:df:0d:02:e9:e5:
5f:cd:47:53:f3:99:b6:04:3f:79:e6:61:cd:8d:5d:10:f8:26:
6c:e2:d8:85:f9:b7:d9:c0:90:c7:d2:50:3e:f4:08:a0:43:cb:
f9:da:e4:71:25:f3:4d:57:0a:ed:c8:27:1d:37:4b:32:84:81:
99:4d:ca:e3:30:08:35:00:94:b7:1e:ab:6b:21:b4:fc:71:27:
7a:2f:01:60:c7:c6:03:fc:8c:9d:16:6b:e2:89:d4:74:2f:03:
48:ba:30:85:d9:d6:c9:2b:23:0e:77:ed:2b:9b:12:98:e3:be:
3c:7e:3e:4c:bd:6f:55:9b:87:43:26:06:b9:ee:a3:65:e0:17:
cb:50:80:eb:58:c4:85:a2:35:66:45:b2:06:fb:73:17:a3:a7:
33:af:1b:e2:4d:21:ba:1a:eb:85:cd:c5:5c:54:c6:67:9b:4f:
b6:9a:50:ef:0e:c3:4d:f6:87:d2:a3:7b:0d:39:ce:41:71:8c:
27:20:9b:76:b6:4c:24:2c:6f:c5:f2:2e:36:89:3f:7a:e4:26:
70:70:68:a1:3f:69:7e:9b:8f:56:f9:79:64:40:ba:e1:6d:6f:
07:f8:02:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F22Cj6jMxjOTOwjUG3vuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmMzNjBmZTVjODRmMTk1NjFjN2FlOWJiY2Y0ZjljZmE0
NzhiNGYwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
EyhmN2JmOGQzM2MwNGQ4ZjIxNjMzN2I1NmQzYzcwOTM1YzllMzExNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGOhAEhxVHt3UlSH/RrBVrTGtiTu
XPkW7p31U2Qv74zBeN56a2pVzZ5HLvCbIZ7WCfipb4Z1nQhBcKojngdsc3GwG9NP
rkUU+JRvk0yAcYYhzSQxthIbq9FiaurN/KIlLEn1IFWU+WtHSCjXJStARNkJ+82Z
er5tqxBo9qK3iNOEZB9jJXcDjpQ87VtvFVmrwj27q5PeDqtxeC2QtbXYQ5P+dth/
57MpwADVRIj3e46REG/5XHFUTesCo9fjtRn69RqsiTRmelsXrYlt+Ik9RUL/wHwy
VEJ28gbd3EK/VroMWYmVP020Qo5xDozTnu7nt1Jn4TEvSD2i483zR2LptQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe/jTPATY8hYze1bTxwk1yeMRc/MB8GA1UdIwQY
MBaAFJ5sNg/lyE8ZVhx66bvPT5z6R4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm13MkQtWElUeGxXSEhycHU4OVBuUHBIaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kMjIzM2MtYTc0MS00YmQ5LWI2ZGIt
N2VkOTk4ZGRiODVhLzEvbm13MkQtWElUeGxXSEhycHU4OVBuUHBIaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kMjIzM2MtYTc0MS00YmQ5LWI2ZGItN2VkOTk4ZGRiODVh
LzEvbm13MkQtWElUeGxXSEhycHU4OVBuUHBIaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtvo12Eg
1pnw9BAymjr2L3mmhY9+5omv16TF8kMkT98NAunlX81HU/OZtgQ/eeZhzY1dEPgm
bOLYhfm32cCQx9JQPvQIoEPL+drkcSXzTVcK7cgnHTdLMoSBmU3K4zAINQCUtx6r
ayG0/HEnei8BYMfGA/yMnRZr4onUdC8DSLowhdnWySsjDnftK5sSmOO+PH4+TL1v
VZuHQyYGue6jZeAXy1CA61jEhaI1ZkWyBvtzF6OnM68b4k0huhrrhc3FXFTGZ5tP
tppQ7w7DTfaH0qN7DTnOQXGMJyCbdrZMJCxvxfIuNok/euQmcHBooT9pfpuPVvl5
ZEC64W1vB/gCNg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:09 2025 by rpki-client