Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: 0eh+6u6Yy8sRdKxpqJkQBC6vSTyz+hgzkpwXnByLrV0=
Subject key identifier: C0:C1:FE:71:E0:17:FF:CA:1B:9A:C3:88:DF:BC:FE:BA:0E:59:6B:5C
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 0194BBCE3BE0F5402E672932ED13156642A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: PChfmkYH1UkmZGJcsJncl3z9vJolZYGuDmmHJoFC6mk=)
2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:e0:f5:40:2e:67:29:32:ed:13:15:66:42:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=c0c1fe71e017ffca1b9ac388dfbcfeba0e596b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:ca:c9:77:df:0e:2f:60:80:5c:9d:68:63:
91:22:22:3a:89:75:fe:9a:14:04:4c:2e:94:9e:42:
b6:50:40:09:fe:93:33:d8:dc:a8:48:6f:62:66:78:
9e:22:93:cf:d2:30:37:3f:c8:6c:96:d7:dd:31:90:
51:4f:e2:24:74:7c:08:85:d4:8a:2b:32:98:ab:16:
66:05:a1:74:0c:87:03:40:5c:3c:11:47:b8:01:86:
84:92:4a:f3:56:ce:c7:55:c2:94:2b:29:ae:09:8a:
60:f8:a5:ba:db:2f:51:15:19:73:c7:9e:8b:70:3c:
f8:46:91:6a:53:c0:1b:47:fc:c1:06:5c:ef:c7:5c:
01:fe:96:06:8a:df:db:c5:b1:86:99:e6:6a:57:07:
69:75:7d:84:90:27:1c:a1:03:c3:27:af:e2:35:be:
9c:fe:33:8f:d3:f5:a6:3c:46:c0:36:79:26:77:f1:
b1:3c:69:3b:b0:ca:6f:84:55:7f:19:e5:d5:e1:60:
d3:91:e4:6e:d1:8f:49:e0:e2:8e:df:82:97:19:8d:
84:d9:6a:58:88:00:30:29:6b:c1:fe:9f:99:eb:68:
1a:38:7a:48:50:ea:26:10:88:f0:61:0b:f5:45:8d:
dc:d0:00:91:6d:83:da:ef:4e:c4:26:25:a9:ab:f7:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:FE:71:E0:17:FF:CA:1B:9A:C3:88:DF:BC:FE:BA:0E:59:6B:5C
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:93:92:a3:39:bb:e3:1d:a3:3a:f9:4b:03:e0:94:6f:57:92:
69:30:19:06:53:95:a2:2e:31:31:1c:47:0e:c1:79:f8:8a:81:
75:66:6f:28:8f:da:98:7f:d2:0e:79:f5:7c:f1:d0:9f:85:97:
35:14:3d:9c:ee:49:a3:b6:ed:e7:c1:bf:e0:2c:f6:95:4d:b3:
7e:98:b6:55:ba:1f:c6:ae:5e:36:35:15:1c:5a:d4:3b:60:f1:
93:a6:f3:fe:93:bb:f8:ee:9c:61:c7:e7:e8:ca:fd:ac:34:ae:
c3:f0:b6:53:00:77:05:88:bd:a2:c9:b2:f8:63:19:58:8c:21:
01:d6:4c:f6:22:e0:e5:78:af:8d:32:f5:b3:fd:ea:94:a8:81:
99:46:57:43:79:b6:0c:fc:ab:ff:dc:61:2d:7f:52:cf:29:c5:
8c:da:a5:b8:13:fb:36:29:02:b5:7d:a6:88:8e:41:9a:18:80:
90:ad:ed:39:5d:68:89:ff:af:92:e2:a7:4f:90:cf:e0:ea:bc:
35:5c:3d:d0:85:df:fb:ad:98:db:08:c4:80:f8:9a:4e:f6:e7:
fb:0c:da:f0:2a:c1:76:46:f7:e5:5c:ab:ec:b7:61:a5:1f:10:
66:4c:79:f8:ed:d2:76:d0:97:32:27:3b:ce:54:f3:70:d9:7e:
85:28:74:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjvg9UAuZyky7RMVZkKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi
ZGVkMDUwHhcNMjUwMTMxMTAwMDQyWhcNMjUwMjAxMTAwMDQyWjAzMTEwLwYDVQQD
EyhjMGMxZmU3MWUwMTdmZmNhMWI5YWMzODhkZmJjZmViYTBlNTk2YjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx57KyXffDi9ggFydaGORIiI6iXX+
mhQETC6UnkK2UEAJ/pMz2NyoSG9iZnieIpPP0jA3P8hsltfdMZBRT+IkdHwIhdSK
KzKYqxZmBaF0DIcDQFw8EUe4AYaEkkrzVs7HVcKUKymuCYpg+KW62y9RFRlzx56L
cDz4RpFqU8AbR/zBBlzvx1wB/pYGit/bxbGGmeZqVwdpdX2EkCccoQPDJ6/iNb6c
/jOP0/WmPEbANnkmd/GxPGk7sMpvhFV/GeXV4WDTkeRu0Y9J4OKO34KXGY2E2WpY
iAAwKWvB/p+Z62gaOHpIUOomEIjwYQv1RY3c0ACRbYPa707EJiWpq/fuxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDB/nHgF//KG5rDiN+8/roOWWtcMB8GA1UdIwQY
MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct
MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw
LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpOSozm7
4x2jOvlLA+CUb1eSaTAZBlOVoi4xMRxHDsF5+IqBdWZvKI/amH/SDnn1fPHQn4WX
NRQ9nO5Jo7bt58G/4Cz2lU2zfpi2Vbofxq5eNjUVHFrUO2Dxk6bz/pO7+O6cYcfn
6Mr9rDSuw/C2UwB3BYi9osmy+GMZWIwhAdZM9iLg5XivjTL1s/3qlKiBmUZXQ3m2
DPyr/9xhLX9SzynFjNqluBP7NikCtX2miI5BmhiAkK3tOV1oif+vkuKnT5DP4Oq8
NVw90IXf+62Y2wjEgPiaTvbn+wza8CrBdkb35Vyr7LdhpR8QZkx5+O3SdtCXMic7
zlTzcNl+hSh0Nw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:54 2025 by rpki-client