Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
File: NVyaW8uDQBCKQchiduHLlKYefak.mft (raw, json)
Hash identifier: G7rpLsn1VAZV37QHFF9AuseN2C6c57IhkBPKsF5CLc0=
Subject key identifier: 0E:C3:03:0D:0E:2B:26:C7:0C:A4:5D:26:6A:C8:72:71:BD:41:7E:13
Authority key identifier: 35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
Certificate issuer: /CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Certificate serial: 0194BC72B7D832367208F10778C89A22B18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
Manifest number: 0CC3
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 5KKpk9qEveM_ucLAOYR8lDjQsvs.roa (hash: FsEABHDgSk6DaTySsepeca9yMLpdy1J0E11YMBOaZ9k=)
2: NVyaW8uDQBCKQchiduHLlKYefak.crl (hash: DWd/PAKd08IEuPd2WgFmIaPkkS+4Yi6j60YOEO9NFN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:d8:32:36:72:08:f1:07:78:c8:9a:22:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=0ec3030d0e2b26c70ca45d266ac87271bd417e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:c9:af:fa:fd:53:be:d5:c8:07:e9:ff:ea:
e6:6f:2c:41:d7:60:f8:7b:59:06:49:92:70:76:4e:
08:a9:35:64:9c:e3:bb:9b:38:10:73:0a:e5:f2:df:
f1:d9:68:70:ca:60:02:8b:53:fb:8a:78:c1:d9:df:
a3:45:00:94:a4:45:2d:c6:9d:00:04:9c:f3:10:6d:
3c:5f:46:52:26:ae:bc:b1:18:bf:63:8b:e4:73:05:
12:da:47:e7:22:bb:09:9d:b2:19:1b:2c:21:c4:38:
e6:7e:56:3e:e7:e1:9a:1d:e7:fe:dd:ea:58:8d:45:
48:21:5c:bd:f3:52:d8:22:01:22:9c:0b:48:a3:63:
5f:05:b1:86:49:24:20:b5:63:0b:b0:c5:22:95:58:
26:1f:26:28:2c:9e:f3:72:1b:85:fd:7e:54:d3:0f:
fa:cf:6a:1c:48:1e:f5:8f:cd:c2:0c:9e:ad:c2:ac:
ad:5b:b4:9f:b8:eb:13:66:6d:39:5c:de:44:68:7f:
2d:7b:cf:e6:40:75:ce:35:9d:5d:2c:d2:01:b0:7a:
85:67:86:b5:f6:f1:14:50:d1:d6:fb:6b:58:82:5f:
3c:b5:31:a0:d5:e2:1a:77:72:5f:70:f0:09:f9:be:
11:46:d0:41:bf:8d:bd:be:73:9d:ac:19:cd:06:91:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C3:03:0D:0E:2B:26:C7:0C:A4:5D:26:6A:C8:72:71:BD:41:7E:13
X509v3 Authority Key Identifier:
keyid:35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:c0:fd:95:94:0a:e9:1d:e6:ad:21:33:c3:f5:3a:7f:95:
5d:77:1e:10:e5:9f:c5:11:b5:9f:e1:3f:23:1e:4b:4d:7c:54:
a4:e6:7a:33:7d:38:0f:b9:1e:65:eb:2b:3e:5f:28:a1:db:51:
54:4b:4c:61:d2:d9:02:5b:b8:48:9f:8d:32:93:22:9d:1a:a7:
a0:74:33:30:80:28:16:53:80:2f:42:aa:07:e0:db:2a:cd:8d:
ba:b0:b1:a4:41:53:21:a9:49:ad:04:66:e7:c2:c5:16:2b:39:
59:b8:73:94:34:45:d6:bc:ad:06:1a:c0:70:ad:81:8e:a0:93:
72:15:7b:34:3d:fb:40:d0:bd:bc:5d:aa:a3:aa:cb:3c:c2:d3:
98:bd:77:79:4c:5d:a4:2d:87:9e:0e:58:a3:77:a9:0f:e4:96:
27:fb:2b:ae:3e:25:d5:ab:72:dd:50:20:bc:0b:e0:6a:08:7e:
03:c2:42:2d:5b:02:00:4b:eb:1f:97:e4:33:7a:e2:ed:a1:3f:
c9:5b:3b:c8:10:17:be:ac:7d:09:f4:b3:12:b7:6b:55:ea:a4:
c3:a7:ce:56:02:0d:a1:8f:a7:f0:8a:7b:f5:3c:d3:1a:a3:f9:
a6:8f:b6:0b:33:db:ce:89:36:14:38:b7:fc:96:0c:20:97:b7:
74:e9:4d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crfYMjZyCPEHeMiaIrGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NWM5YTViY2I4MzQwMTA4YTQxYzg2Mjc2ZTFjYjk0YTYx
ZTdkYTkwHhcNMjUwMTMxMTMwMDIyWhcNMjUwMjAxMTMwMDIyWjAzMTEwLwYDVQQD
EygwZWMzMDMwZDBlMmIyNmM3MGNhNDVkMjY2YWM4NzI3MWJkNDE3ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkHJr/r9U77VyAfp/+rmbyxB12D4
e1kGSZJwdk4IqTVknOO7mzgQcwrl8t/x2WhwymACi1P7injB2d+jRQCUpEUtxp0A
BJzzEG08X0ZSJq68sRi/Y4vkcwUS2kfnIrsJnbIZGywhxDjmflY+5+GaHef+3epY
jUVIIVy981LYIgEinAtIo2NfBbGGSSQgtWMLsMUilVgmHyYoLJ7zchuF/X5U0w/6
z2ocSB71j83CDJ6twqytW7SfuOsTZm05XN5EaH8te8/mQHXONZ1dLNIBsHqFZ4a1
9vEUUNHW+2tYgl88tTGg1eIad3JfcPAJ+b4RRtBBv429vnOdrBnNBpFROQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7DAw0OKybHDKRdJmrIcnG9QX4TMB8GA1UdIwQY
MBaAFDVcmlvLg0AQikHIYnbhy5SmHn2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZ5YVc4dURRQkNLUWNoaWR1SExsS1llZmFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zZjQyNmYtNzllZS00Y2IyLWFiMTct
MzBkNjRmZjcwYjkwLzEvTlZ5YVc4dURRQkNLUWNoaWR1SExsS1llZmFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zZjQyNmYtNzllZS00Y2IyLWFiMTctMzBkNjRmZjcwYjkw
LzEvTlZ5YVc4dURRQkNLUWNoaWR1SExsS1llZmFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzjA/ZWU
Cukd5q0hM8P1On+VXXceEOWfxRG1n+E/Ix5LTXxUpOZ6M304D7keZesrPl8oodtR
VEtMYdLZAlu4SJ+NMpMinRqnoHQzMIAoFlOAL0KqB+DbKs2NurCxpEFTIalJrQRm
58LFFis5WbhzlDRF1rytBhrAcK2BjqCTchV7ND37QNC9vF2qo6rLPMLTmL13eUxd
pC2Hng5Yo3epD+SWJ/srrj4l1aty3VAgvAvgagh+A8JCLVsCAEvrH5fkM3ri7aE/
yVs7yBAXvqx9CfSzErdrVeqkw6fOVgINoY+n8Ip79TzTGqP5po+2CzPbzok2FDi3
/JYMIJe3dOlNTw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:02 2025 by rpki-client