Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: Q4r2/VOopAD5kF+ZAotBp1b4+3K8NMVDAAR8EHgQXzQ=
Subject key identifier: 08:2E:B5:9E:16:CF:24:E5:CC:2F:AD:92:13:66:FE:DB:23:01:D2:97
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0194BBCDC9068FB10E22264E68AE99B8B979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 03F8
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: _ySRDLzQdwiGbOJn6VG0WghGnvs.roa (hash: iftvJSfyvy0E59eeWCgB+fQqIp2vGxrZU/nTeE6jx9c=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: zFYFskQf93ne3blpjwgkndbr4SkWAdJfBf6NhMNt6fY=)
3: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:06:8f:b1:0e:22:26:4e:68:ae:99:b8:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=082eb59e16cf24e5cc2fad921366fedb2301d297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:0d:e0:2f:85:4a:b0:4c:8b:4b:ac:a7:ab:
93:87:c6:c8:e1:99:43:59:14:26:e3:53:6c:41:70:
0b:fb:59:d2:55:7e:70:42:d6:b4:75:2c:7c:d7:0d:
fd:9f:90:60:d6:dd:a6:fa:04:87:79:3c:e0:db:d4:
db:ec:6c:03:c5:cc:be:10:53:6d:30:b3:7c:66:8c:
b1:3f:db:b2:60:a4:9f:86:c8:b9:2f:11:82:a8:83:
89:45:1d:4f:17:ea:75:40:75:7a:66:b3:59:2d:90:
43:57:99:d7:7c:72:9f:6e:c7:a3:80:72:a4:66:a6:
2a:bc:ac:e4:12:82:8d:06:90:c1:7b:52:2e:24:35:
d0:5a:fb:32:e2:ff:44:d4:a5:b5:11:0a:c4:01:5a:
3a:68:c9:f5:15:b7:6b:64:d1:67:82:51:25:26:86:
2b:1d:20:67:bf:95:ab:b8:77:82:fa:5e:49:bf:d1:
34:50:fa:f3:55:10:a2:6f:59:12:d0:97:79:6c:7d:
d3:9c:24:87:bb:88:16:be:99:4f:9e:1d:72:a5:53:
70:e6:ed:e9:4f:b5:8d:ff:97:ed:35:37:74:eb:ec:
ad:4c:e7:b5:2f:60:d5:04:a8:02:df:98:77:a5:54:
cd:69:95:ad:3e:3d:f4:66:97:d2:f2:8b:9d:22:2e:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:B5:9E:16:CF:24:E5:CC:2F:AD:92:13:66:FE:DB:23:01:D2:97
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:57:8d:37:9e:05:07:dd:69:40:86:42:35:c1:5c:87:e7:c8:
c2:4d:fe:a6:6e:f6:40:d9:36:81:84:58:29:7f:4d:d0:ca:b5:
e6:9e:22:d8:79:53:8b:09:8f:b8:7d:db:c6:49:a5:d7:d7:cd:
e9:e2:b2:a0:83:15:10:03:3a:36:18:b2:91:12:56:d2:d1:cb:
48:46:e0:08:63:9d:29:8e:dc:ad:58:19:92:72:b3:89:f1:15:
2c:19:c3:67:a9:16:da:1c:47:04:b5:a3:ce:27:92:36:f8:a1:
7c:d2:0d:1a:11:00:a6:f0:65:15:12:34:9d:97:3d:8e:4b:83:
93:a2:fe:53:cb:d8:2b:61:b4:8b:e1:1d:fb:7e:58:7d:d1:53:
d4:be:59:1a:3d:7b:d9:9b:cb:a6:c6:3f:fb:ad:ba:ab:f0:3d:
78:81:01:ef:39:3b:65:c6:ed:05:b9:55:35:07:cb:2c:c7:f3:
c7:9e:fa:c3:09:45:8d:bf:b8:44:f5:83:53:e3:45:39:af:d8:
da:04:ab:7e:06:fc:e8:66:63:7d:12:f4:34:5b:33:11:fd:0f:
e4:67:45:f8:3e:a7:5d:f2:62:a3:3e:5e:2a:73:31:e1:66:22:
b1:c5:8c:3c:29:6e:0c:67:77:27:bb:5e:7e:84:f8:1a:08:81:
dd:44:b0:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zckGj7EOIiZOaK6ZuLl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1
NjBkZTMwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
EygwODJlYjU5ZTE2Y2YyNGU1Y2MyZmFkOTIxMzY2ZmVkYjIzMDFkMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkMN4C+FSrBMi0usp6uTh8bI4ZlD
WRQm41NsQXAL+1nSVX5wQta0dSx81w39n5Bg1t2m+gSHeTzg29Tb7GwDxcy+EFNt
MLN8ZoyxP9uyYKSfhsi5LxGCqIOJRR1PF+p1QHV6ZrNZLZBDV5nXfHKfbsejgHKk
ZqYqvKzkEoKNBpDBe1IuJDXQWvsy4v9E1KW1EQrEAVo6aMn1FbdrZNFnglElJoYr
HSBnv5WruHeC+l5Jv9E0UPrzVRCib1kS0Jd5bH3TnCSHu4gWvplPnh1ypVNw5u3p
T7WN/5ftNTd06+ytTOe1L2DVBKgC35h3pVTNaZWtPj30ZpfS8oudIi5FXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgutZ4WzyTlzC+tkhNm/tsjAdKXMB8GA1UdIwQY
MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt
N2JhMjVkNTU5NWZhLzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh
LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVeNN54F
B91pQIZCNcFch+fIwk3+pm72QNk2gYRYKX9N0Mq15p4i2HlTiwmPuH3bxkml19fN
6eKyoIMVEAM6NhiykRJW0tHLSEbgCGOdKY7crVgZknKzifEVLBnDZ6kW2hxHBLWj
zieSNvihfNINGhEApvBlFRI0nZc9jkuDk6L+U8vYK2G0i+Ed+35YfdFT1L5ZGj17
2ZvLpsY/+626q/A9eIEB7zk7ZcbtBblVNQfLLMfzx576wwlFjb+4RPWDU+NFOa/Y
2gSrfgb86GZjfRL0NFszEf0P5GdF+D6nXfJioz5eKnMx4WYiscWMPCluDGd3J7te
foT4GgiB3USwCg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:03 2025 by rpki-client