Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier: EYEVP+R2mJtUliOdiZjcEeF28uLzlghUYhvnZq+3Io4=
Subject key identifier: 1E:1B:86:20:B0:F6:30:92:2D:10:35:D8:3D:86:9D:0F:82:21:CD:2D
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 0194BC052648EE61E3B38396A3BE47BB1D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number: 141F
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: i65/6gnk+aZHCIwxbnkdajyW5OIPoLyyvJ/2vioZLyU=)
2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:26:48:ee:61:e3:b3:83:96:a3:be:47:bb:1d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=1e1b8620b0f630922d1035d83d869d0f8221cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:c2:10:aa:3c:3f:fc:28:ea:3c:da:94:d0:
e8:7c:8b:cc:82:cf:08:01:56:8d:55:e4:1a:51:da:
25:12:1c:c7:ab:f3:b8:bc:5c:d6:c5:b9:e5:e1:a4:
2a:f9:7b:06:b9:c7:ee:a4:b5:54:e1:d9:65:25:40:
7b:17:2c:05:2a:fc:60:08:77:78:eb:07:8a:02:37:
50:f4:5c:00:4c:a0:31:bd:f9:cb:63:58:46:6d:23:
49:bc:13:d2:e3:26:03:bd:a6:ac:a9:a2:fd:46:53:
04:87:52:06:74:52:fe:5d:55:b9:b6:ce:ef:5c:0f:
b9:af:3a:f0:77:ac:73:cf:b4:4b:e9:fe:45:31:6f:
0e:18:97:6c:aa:59:5e:4f:f6:5b:62:97:da:70:e0:
7d:a7:f1:a0:fe:93:1e:7e:78:a8:c9:cf:5f:38:4c:
10:9d:f6:98:16:c1:da:96:e5:82:3e:bc:89:48:1f:
bf:9c:af:ed:8b:d8:33:36:ab:a2:f3:4d:60:e3:5c:
6e:3d:86:36:70:6f:3c:cd:89:2d:89:b3:16:a4:0d:
a2:7a:d7:ba:fb:99:65:52:03:09:8d:fa:c1:c7:d7:
b3:df:ec:8f:cc:4a:02:1c:13:58:1e:87:b2:35:29:
22:63:2e:2f:e9:72:f3:ee:3a:16:d8:dd:8f:c7:64:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1B:86:20:B0:F6:30:92:2D:10:35:D8:3D:86:9D:0F:82:21:CD:2D
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:24:9e:39:1b:a1:bd:75:2d:c7:45:7b:1a:ad:f2:b5:33:
40:bd:e8:4b:33:92:be:01:a9:79:7d:db:ed:c7:6f:f6:3f:77:
9e:c8:70:9f:c1:1c:7e:b0:4f:b3:d5:5b:e2:64:a7:27:d3:66:
79:33:eb:48:2c:ae:09:49:25:3b:38:f9:d0:94:62:30:f3:7f:
82:6d:ff:6d:3c:d5:a1:0f:40:04:a4:87:a7:c6:a9:51:ca:25:
bb:72:11:29:98:a5:79:28:86:20:6a:3a:bd:4b:06:dd:f7:a2:
cb:9f:bb:eb:45:94:be:40:73:18:59:39:f2:ee:8f:38:55:d8:
23:d2:c7:7f:53:d1:37:58:76:ad:b9:31:89:ac:f4:0e:aa:03:
f4:04:cb:eb:22:e6:67:e1:6c:c1:6c:ec:4e:c6:ed:63:53:4b:
f3:c9:b4:84:75:65:00:33:33:fd:77:aa:09:ee:5d:db:cb:04:
18:11:44:55:eb:22:72:2b:1a:c6:72:ec:93:fb:8a:2e:b6:9d:
3a:97:cb:c1:45:77:9e:3c:f3:e2:40:14:32:a9:b2:99:e3:0c:
21:59:0a:a3:2e:e2:a1:f0:20:23:59:78:02:da:2b:41:00:49:
ff:b8:fa:6d:6a:f0:79:c1:da:33:57:f3:02:8e:b7:ad:50:3f:
71:fe:32:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSZI7mHjs4OWo75Hux1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDk5NzU0MzlmZTRmZmE5MzEwMjYyYWNiZGQ1ZjcyM2Nl
ZTIyMjMwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
EygxZTFiODYyMGIwZjYzMDkyMmQxMDM1ZDgzZDg2OWQwZjgyMjFjZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4srCEKo8P/wo6jzalNDofIvMgs8I
AVaNVeQaUdolEhzHq/O4vFzWxbnl4aQq+XsGucfupLVU4dllJUB7FywFKvxgCHd4
6weKAjdQ9FwATKAxvfnLY1hGbSNJvBPS4yYDvaasqaL9RlMEh1IGdFL+XVW5ts7v
XA+5rzrwd6xzz7RL6f5FMW8OGJdsqlleT/ZbYpfacOB9p/Gg/pMefnioyc9fOEwQ
nfaYFsHaluWCPryJSB+/nK/ti9gzNqui801g41xuPYY2cG88zYktibMWpA2iete6
+5llUgMJjfrBx9ez3+yPzEoCHBNYHoeyNSkiYy4v6XLz7joW2N2Px2QlUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4bhiCw9jCSLRA12D2GnQ+CIc0tMB8GA1UdIwQY
MBaAFDdJl1Q5/k/6kxAmKsvdX3I87iIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEt
YmUwMGE2NTEwM2FkLzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEtYmUwMGE2NTEwM2Fk
LzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyAknjkb
ob11LcdFexqt8rUzQL3oSzOSvgGpeX3b7cdv9j93nshwn8EcfrBPs9Vb4mSnJ9Nm
eTPrSCyuCUklOzj50JRiMPN/gm3/bTzVoQ9ABKSHp8apUcolu3IRKZileSiGIGo6
vUsG3feiy5+760WUvkBzGFk58u6POFXYI9LHf1PRN1h2rbkxiaz0DqoD9ATL6yLm
Z+FswWzsTsbtY1NL88m0hHVlADMz/XeqCe5d28sEGBFEVesicisaxnLsk/uKLrad
OpfLwUV3njzz4kAUMqmymeMMIVkKoy7iofAgI1l4AtorQQBJ/7j6bWrwecHaM1fz
Ao63rVA/cf4yrw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:46:29 2025 by rpki-client