Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: ALm/yc9smDCBWvn1lUGEZtPvMXl6C7qXNWQ48qlT4Eg=
Subject key identifier: B5:16:5D:C8:A5:33:77:EA:40:5C:2E:86:0D:73:01:5F:EE:C7:4B:80
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0194BCE098427AA3DF60F0BCC45DC9EAC59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 112D
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: l9HoLqf/dkWEAB92ez4stjFy8ybQNfLLhs5aNip2axs=)
2: nnSYLRU9hKxo3UTh-LEIyp0QB5A.roa (hash: V3Ul2Q6lPbgEHnF1LxPYXzGlFtY7Ipl/LIDBFIja0cQ=)
3: zPv_dadT06hNuRKo3iASqBxQSS0.roa (hash: wxHTtDXP3pWqU5npUaGQWQD9gJXDFqHuFN3U69JTSgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:42:7a:a3:df:60:f0:bc:c4:5d:c9:ea:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=b5165dc8a53377ea405c2e860d73015feec74b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:9a:bd:9d:24:bf:98:43:57:ee:ca:90:97:
ce:95:c6:e3:01:c6:20:62:a2:0f:f3:44:5c:3d:6c:
3b:0d:fc:b1:ef:60:fc:8c:e5:75:53:59:1b:c5:b4:
ad:97:c8:c6:95:52:ea:22:2d:f3:44:58:fc:e6:e4:
7a:ac:4b:90:4b:bc:09:aa:e2:8e:94:f4:a4:8b:7d:
a6:c6:f3:0f:86:00:a8:42:9e:8b:0d:90:0c:2c:36:
ad:99:fd:41:5b:1b:ca:cd:9a:29:36:f9:f7:9d:4f:
2f:6a:36:7c:8b:ce:6f:18:f9:ac:cb:1b:96:b2:1d:
e2:3e:57:9f:82:77:5b:a3:1d:05:d6:23:6a:60:d1:
9b:1c:3f:f2:58:d3:5c:1e:2d:86:5c:28:5f:1f:9d:
4e:e6:0f:d1:fa:59:18:67:00:40:c0:02:e7:06:3c:
ed:09:78:50:40:95:a9:1e:9b:43:f2:eb:1a:33:6a:
b6:8e:3a:0b:6e:5d:af:ec:7e:98:c3:5b:a6:ac:57:
14:f7:95:39:8e:36:4e:86:66:e4:15:4a:a9:39:9c:
d0:0b:e1:b6:26:78:57:f7:0f:65:3c:84:e3:54:7e:
5f:54:ec:67:43:70:cb:67:21:28:a5:1b:4b:67:c4:
f1:2e:03:69:62:a6:49:6d:d8:71:38:0a:e1:6c:fd:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:5D:C8:A5:33:77:EA:40:5C:2E:86:0D:73:01:5F:EE:C7:4B:80
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:48:a4:25:4c:46:58:8f:5f:9a:60:1e:70:14:c4:e1:18:
61:09:73:84:f0:5d:0a:ed:37:0d:ff:58:54:64:09:26:8d:9b:
54:bb:51:96:3a:d4:d9:a3:97:56:75:f3:96:52:8e:aa:81:5c:
15:5e:33:cf:12:a9:bf:e3:c7:3b:c3:4f:6e:95:3a:0b:3d:0f:
4c:39:a2:32:c5:ea:6b:16:b4:08:39:8a:c7:8a:bd:bc:f8:50:
f4:6f:76:cf:88:f4:ba:cd:89:ea:f8:c7:85:d8:29:e6:e3:36:
a7:61:6f:f2:24:14:5c:c0:70:99:be:7b:2f:e0:9f:65:f0:fd:
dd:9d:eb:e3:4c:58:1b:98:ac:06:d6:c8:c2:72:39:4c:9d:e7:
45:27:88:cd:f8:62:f1:86:d4:5e:2e:a1:50:a4:38:54:06:f5:
5c:06:49:05:bf:ef:c8:07:fa:e5:68:0b:0c:a2:90:2f:15:06:
6e:e9:ae:27:e8:a6:c5:59:8e:5e:60:44:0f:4c:76:06:16:29:
9f:22:a8:f6:02:fb:f6:b0:ed:d7:46:b8:ee:01:c4:82:52:42:
32:d9:a6:9b:da:be:8d:74:6c:80:53:9d:fd:69:cb:d2:d8:f3:
96:4f:66:7f:88:72:60:43:05:2c:17:5b:ea:35:a7:50:cf:91:
9b:ae:d9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JhCeqPfYPC8xF3J6sWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EyhiNTE2NWRjOGE1MzM3N2VhNDA1YzJlODYwZDczMDE1ZmVlYzc0YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YmavZ0kv5hDV+7KkJfOlcbjAcYg
YqIP80RcPWw7Dfyx72D8jOV1U1kbxbStl8jGlVLqIi3zRFj85uR6rEuQS7wJquKO
lPSki32mxvMPhgCoQp6LDZAMLDatmf1BWxvKzZopNvn3nU8vajZ8i85vGPmsyxuW
sh3iPlefgndbox0F1iNqYNGbHD/yWNNcHi2GXChfH51O5g/R+lkYZwBAwALnBjzt
CXhQQJWpHptD8usaM2q2jjoLbl2v7H6Yw1umrFcU95U5jjZOhmbkFUqpOZzQC+G2
JnhX9w9lPITjVH5fVOxnQ3DLZyEopRtLZ8TxLgNpYqZJbdhxOArhbP1GkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUWXcilM3fqQFwuhg1zAV/ux0uAMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaZIpCVM
RliPX5pgHnAUxOEYYQlzhPBdCu03Df9YVGQJJo2bVLtRljrU2aOXVnXzllKOqoFc
FV4zzxKpv+PHO8NPbpU6Cz0PTDmiMsXqaxa0CDmKx4q9vPhQ9G92z4j0us2J6vjH
hdgp5uM2p2Fv8iQUXMBwmb57L+CfZfD93Z3r40xYG5isBtbIwnI5TJ3nRSeIzfhi
8YbUXi6hUKQ4VAb1XAZJBb/vyAf65WgLDKKQLxUGbumuJ+imxVmOXmBED0x2BhYp
nyKo9gL79rDt10a47gHEglJCMtmmm9q+jXRsgFOd/WnL0tjzlk9mf4hyYEMFLBdb
6jWnUM+Rm67ZmQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:38:13 2025 by rpki-client