Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: ckt3rcO+qf3dvUDdw32dpd3C233eVE2di7apAujqZCA=
Subject key identifier: 3C:B7:07:B6:4C:D3:A3:D7:B1:65:27:01:14:03:60:45:B5:4F:9B:FD
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 0194BD4E3BAE7F2AC578990A232C90F071CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 0E07
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: dMap626HCxPFhKssWy6lFzhqH4l6BL+KzxkfqBhYKYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3b:ae:7f:2a:c5:78:99:0a:23:2c:90:f0:71:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=3cb707b64cd3a3d7b165270114036045b54f9bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:09:c8:c3:2d:d3:8d:15:39:83:3b:e8:3f:
c4:2d:e4:27:93:03:75:fa:71:22:95:0f:5c:d4:7e:
aa:74:5f:79:a9:b9:74:85:9d:4f:c1:a2:df:d7:78:
c9:f6:4c:7f:dc:9c:07:5e:7a:39:52:52:7e:44:f6:
9f:2c:74:ed:d4:2f:8d:ed:4b:f9:cd:b9:bf:e3:2f:
a4:ff:1b:4e:e6:4d:20:08:f1:4d:16:c0:41:65:30:
0f:d7:a1:4a:df:14:5c:8f:16:3f:c4:f5:5c:68:53:
c6:0a:22:28:64:95:d6:4b:d3:69:b5:59:94:8b:7e:
55:7e:88:55:0e:cb:a6:4c:88:58:fb:d1:66:c5:fa:
4d:7b:36:84:e1:8c:6d:39:d4:f3:c4:c0:7a:51:83:
29:7c:fe:86:aa:80:96:95:30:f4:d8:98:7f:fd:e5:
e6:34:0b:66:3c:01:4f:f3:63:ef:3a:1c:47:3a:44:
52:cb:ac:1d:f5:dc:08:11:e0:76:a5:99:41:ff:cc:
cd:01:91:44:f7:bb:1e:2c:5a:75:63:4c:c9:03:ab:
6f:bb:0d:60:fa:98:b9:c4:f2:94:01:82:d8:8d:68:
85:dc:19:c0:54:20:d3:3d:3f:f4:5b:1a:ab:96:67:
60:9b:07:a4:f8:00:67:27:66:ed:08:c3:a8:e3:1d:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:07:B6:4C:D3:A3:D7:B1:65:27:01:14:03:60:45:B5:4F:9B:FD
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:87:92:72:10:c6:ff:45:d1:58:57:78:67:7d:19:dd:4a:1f:
2f:91:79:18:55:79:9b:5e:30:80:01:5a:ba:e1:d1:c1:d2:77:
1f:96:c3:ff:7a:8b:d4:f7:6c:32:1c:7d:34:04:a1:1e:4e:7f:
1b:27:d4:33:2c:00:4d:99:6a:c2:ca:6b:d9:ed:1b:44:05:24:
9f:f1:a2:50:ee:b3:c7:dc:8b:d1:0a:2c:e9:a4:c6:83:aa:74:
d2:1b:fd:1a:19:81:b4:e9:ef:44:b6:b0:00:1e:27:9e:60:2a:
50:c3:5a:ce:5d:2a:ec:cf:4f:0c:42:ff:70:81:db:c2:00:f7:
56:79:24:31:bb:4f:a4:9f:e3:e7:ec:0d:0e:ed:08:b6:0f:e1:
ec:db:d2:34:3e:52:ab:58:fb:ca:9e:3e:c8:8e:f2:6d:10:f6:
23:6f:df:40:84:09:c2:53:9f:e5:8c:7f:f3:3e:2f:29:a0:5e:
9e:dd:d3:30:8e:f4:a8:56:ee:50:91:62:6c:c6:1a:94:9e:15:
ad:7e:83:07:7c:4b:09:7a:01:29:84:88:e3:c4:6c:58:5f:27:
b9:38:64:21:fd:f8:80:94:07:a3:84:02:5d:14:a3:5f:0f:2b:
80:df:d3:6e:e7:b9:a5:96:c0:49:4a:29:50:3f:09:4f:63:2f:
b5:8f:24:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TjuufyrFeJkKIyyQ8HHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjI4OWYzZDllMTNiZTY3YTI0NGI3MmJkMjQ5NDViMmMz
MjBhNjMwHhcNMjUwMTMxMTcwMDA4WhcNMjUwMjAxMTcwMDA4WjAzMTEwLwYDVQQD
EygzY2I3MDdiNjRjZDNhM2Q3YjE2NTI3MDExNDAzNjA0NWI1NGY5YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqcJyMMt040VOYM76D/ELeQnkwN1
+nEilQ9c1H6qdF95qbl0hZ1PwaLf13jJ9kx/3JwHXno5UlJ+RPafLHTt1C+N7Uv5
zbm/4y+k/xtO5k0gCPFNFsBBZTAP16FK3xRcjxY/xPVcaFPGCiIoZJXWS9NptVmU
i35VfohVDsumTIhY+9FmxfpNezaE4YxtOdTzxMB6UYMpfP6GqoCWlTD02Jh//eXm
NAtmPAFP82PvOhxHOkRSy6wd9dwIEeB2pZlB/8zNAZFE97seLFp1Y0zJA6tvuw1g
+pi5xPKUAYLYjWiF3BnAVCDTPT/0Wxqrlmdgmwek+ABnJ2btCMOo4x2/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDy3B7ZM06PXsWUnARQDYEW1T5v9MB8GA1UdIwQY
MBaAFJ6yifPZ4TvmeiRLcr0klFssMgpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUt
ZDhlMTgzNTY5M2NkLzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUtZDhlMTgzNTY5M2Nk
LzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoeSchDG
/0XRWFd4Z30Z3UofL5F5GFV5m14wgAFauuHRwdJ3H5bD/3qL1PdsMhx9NAShHk5/
GyfUMywATZlqwspr2e0bRAUkn/GiUO6zx9yL0Qos6aTGg6p00hv9GhmBtOnvRLaw
AB4nnmAqUMNazl0q7M9PDEL/cIHbwgD3VnkkMbtPpJ/j5+wNDu0Itg/h7NvSND5S
q1j7yp4+yI7ybRD2I2/fQIQJwlOf5Yx/8z4vKaBent3TMI70qFbuUJFibMYalJ4V
rX6DB3xLCXoBKYSI48RsWF8nuThkIf34gJQHo4QCXRSjXw8rgN/Tbue5pZbASUop
UD8JT2MvtY8kXg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:33 2025 by rpki-client