Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: ViiOYlOfhQ0fhsmcxoIYIRjkVY8BWW2WUsHFUM50Tdw=
Subject key identifier: 6B:46:52:99:53:AA:31:3D:9D:9F:A6:6E:E2:7A:92:5D:AD:6A:95:99
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 0194BCE09F36205194FF1B7D6AE603DF9A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: Xjd7k3puhc5clk0DhCSgSVrUiGfCO8saWWc+jEfIXbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9f:36:20:51:94:ff:1b:7d:6a:e6:03:df:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=6b46529953aa313d9d9fa66ee27a925dad6a9599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:b8:f9:2f:17:a5:35:78:b3:c5:bb:5e:7f:
3c:15:b3:41:20:8b:6e:7b:0a:ca:27:fa:9d:b6:aa:
a6:37:01:87:66:90:01:27:b8:b9:39:66:a1:f4:c9:
f8:5b:fb:29:69:2e:0d:06:55:8b:a2:4e:e5:8a:57:
eb:06:31:fe:1c:7f:f4:bc:06:b9:e2:1c:2a:d3:6b:
11:0d:78:58:75:a8:f0:61:cd:b9:49:76:be:28:2f:
72:2c:68:2b:24:ad:ec:5e:82:72:84:43:ef:f0:0a:
62:f8:27:a2:bd:fe:74:e8:88:4a:2e:8e:32:56:28:
f1:66:3c:96:a5:5f:ed:4e:3f:cc:7b:7b:5e:0f:f8:
98:96:13:9c:77:85:25:2c:d2:aa:6b:0b:9f:a9:5a:
1d:89:0a:0d:82:63:67:50:af:54:96:18:a7:78:e2:
17:2b:67:5d:cc:10:59:9e:e3:ba:e0:43:b9:c6:64:
7e:63:00:07:b6:4c:2a:e0:7a:e0:c3:52:27:17:ad:
0f:15:da:05:0d:92:06:89:29:89:c2:21:1a:5b:59:
70:37:ac:4b:4b:1e:e8:71:5c:0b:b6:8a:6b:9e:cb:
a0:b1:5c:4b:04:7e:75:74:eb:10:bd:6c:8f:3a:f0:
d2:75:c6:56:fe:aa:d2:b9:a9:09:2f:8a:88:a0:d4:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:52:99:53:AA:31:3D:9D:9F:A6:6E:E2:7A:92:5D:AD:6A:95:99
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:b4:7c:13:a6:28:17:ca:57:64:79:e7:01:c4:7e:76:94:
50:8d:d9:7c:ab:8e:be:1f:55:3a:b0:2e:4a:1d:2a:b2:3a:08:
84:20:35:72:d8:5b:55:1e:ac:64:79:76:51:cc:c3:6f:7c:a3:
ea:ae:56:1c:17:e9:3b:1e:5e:42:3b:c1:f6:92:6c:20:01:b0:
7b:91:82:21:ba:a1:f0:f2:b8:0f:8b:c4:a7:5a:8e:af:36:23:
82:99:af:75:7a:6a:02:4d:e5:19:b4:39:fe:a3:ab:10:b9:c1:
25:2d:67:4b:99:e0:bd:2d:51:16:34:93:50:ad:95:af:f1:59:
94:34:a6:c5:9e:ac:71:6d:82:84:16:a4:94:11:be:e5:30:92:
0f:08:a0:56:db:08:97:ee:fe:72:31:69:d9:8b:91:2a:ee:94:
42:82:69:c7:07:15:9d:47:e8:b1:08:0e:40:ac:40:0d:66:18:
4b:10:44:a5:13:c7:a9:7a:b1:61:cf:1e:b2:b2:e1:8e:ee:04:
d8:6e:e3:33:ab:cf:84:90:99:20:b2:63:c7:6d:4d:35:89:f3:
ce:62:76:1f:13:72:86:49:8b:ec:15:2f:5b:56:6a:7a:43:aa:
75:40:36:dd:a1:87:e5:44:f3:70:13:a9:95:e0:22:3c:9f:f9:
af:0a:a6:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84J82IFGU/xt9auYD35pNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllN2ZhNGQ3MWZmNjFkZGQ3NTJhNTZlNWU5Y2EzMTY5N2E5
NTJiMzQwHhcNMjUwMTMxMTUwMDI0WhcNMjUwMjAxMTUwMDI0WjAzMTEwLwYDVQQD
Eyg2YjQ2NTI5OTUzYWEzMTNkOWQ5ZmE2NmVlMjdhOTI1ZGFkNmE5NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfi4+S8XpTV4s8W7Xn88FbNBIItu
ewrKJ/qdtqqmNwGHZpABJ7i5OWah9Mn4W/spaS4NBlWLok7lilfrBjH+HH/0vAa5
4hwq02sRDXhYdajwYc25SXa+KC9yLGgrJK3sXoJyhEPv8Api+Ceivf506IhKLo4y
VijxZjyWpV/tTj/Me3teD/iYlhOcd4UlLNKqawufqVodiQoNgmNnUK9UlhineOIX
K2ddzBBZnuO64EO5xmR+YwAHtkwq4Hrgw1InF60PFdoFDZIGiSmJwiEaW1lwN6xL
Sx7ocVwLtoprnsugsVxLBH51dOsQvWyPOvDSdcZW/qrSuakJL4qIoNRbAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtGUplTqjE9nZ+mbuJ6kl2tapWZMB8GA1UdIwQY
MBaAFJ5/pNcf9h3ddSpW5enKMWl6lSs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQt
MThlMzZiZGRjMjFjLzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQtMThlMzZiZGRjMjFj
LzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4q0fBOm
KBfKV2R55wHEfnaUUI3ZfKuOvh9VOrAuSh0qsjoIhCA1cthbVR6sZHl2UczDb3yj
6q5WHBfpOx5eQjvB9pJsIAGwe5GCIbqh8PK4D4vEp1qOrzYjgpmvdXpqAk3lGbQ5
/qOrELnBJS1nS5ngvS1RFjSTUK2Vr/FZlDSmxZ6scW2ChBaklBG+5TCSDwigVtsI
l+7+cjFp2YuRKu6UQoJpxwcVnUfosQgOQKxADWYYSxBEpRPHqXqxYc8esrLhju4E
2G7jM6vPhJCZILJjx21NNYnzzmJ2HxNyhkmL7BUvW1ZqekOqdUA23aGH5UTzcBOp
leAiPJ/5rwqmeg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:53 2025 by rpki-client