Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier: tMJ3mk1i1hCqERflR9Wec6KGPBEYCSrMq1z2DU7Vr08=
Subject key identifier: 5F:B8:63:83:F1:29:AD:FA:DF:B6:84:6F:3C:55:51:0C:67:2E:34:2F
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 0194BCA9DCEE2B471A54DD6A3CECBED66078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number: 10CD
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: hOUHwufbwiAON37CZxwP9p1yEvm1d3H5D5bL/M2Vda4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:ee:2b:47:1a:54:dd:6a:3c:ec:be:d6:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=5fb86383f129adfadfb6846f3c55510c672e342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:b3:55:ec:c1:ad:c5:02:c0:34:bd:5f:5d:
89:a0:7e:b6:d1:13:e9:28:29:00:77:36:56:06:96:
52:b6:fb:99:b7:ce:91:9d:6d:c3:3b:4d:b3:4c:f4:
8e:29:f4:39:35:f7:bb:0b:02:a7:e5:d4:61:6c:30:
66:67:68:f6:74:5c:2d:68:97:c8:86:a8:79:31:1b:
f1:7e:bf:9b:c0:dc:4a:11:bd:aa:9e:b0:49:a8:4c:
ee:56:ed:68:b2:95:d7:01:81:af:ef:48:f9:69:89:
16:4e:2b:81:f0:ce:02:cd:d0:4c:5f:8f:e8:4b:7a:
02:69:99:d7:88:b0:3a:6d:19:b6:84:f8:4c:a6:29:
52:8e:4d:89:22:41:ec:7d:4d:fb:f7:f3:59:51:d0:
9a:f5:51:19:05:8f:a0:01:ba:58:1b:de:85:48:6d:
e7:c1:ee:a9:e7:39:51:9a:e3:e0:fe:f2:c9:fa:e3:
33:f9:91:44:d4:23:40:0e:05:97:66:b5:96:0c:07:
26:3d:87:a7:c9:36:9c:bb:78:23:17:6e:9d:27:f2:
6e:1e:42:6a:16:60:45:76:b3:1b:6b:f5:b1:f9:11:
5f:8e:87:cd:58:04:70:c7:21:4f:57:42:1e:24:20:
fa:77:f7:00:c3:36:12:e8:12:23:59:6c:e2:24:3b:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:63:83:F1:29:AD:FA:DF:B6:84:6F:3C:55:51:0C:67:2E:34:2F
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:eb:77:87:4f:1b:dc:eb:89:66:94:fd:e9:ef:16:40:4c:1c:
f9:8b:67:72:9f:b4:69:4d:55:4e:0b:1c:b5:01:be:90:f3:ac:
15:cf:cc:4e:71:53:27:f1:dd:4c:b8:8b:83:31:3f:17:8e:c3:
7a:79:d0:61:f6:8f:58:e5:2e:ce:1f:b9:13:f1:17:90:38:f0:
b9:9e:b4:c0:06:f2:d6:81:a7:37:0d:37:c2:d2:30:99:8e:3d:
ac:a2:8b:a0:0f:9b:37:c6:2a:a9:39:42:0c:1f:a5:11:a5:07:
11:e7:51:23:46:dd:3b:59:1c:97:81:03:b5:ee:86:7b:dd:f5:
97:a0:ab:a0:15:0c:f9:ab:74:4a:05:9b:ff:84:cc:82:99:8b:
97:b3:66:f1:02:0a:4a:8d:3d:2d:43:6b:9e:10:0a:1d:22:42:
e0:b2:c1:0d:cc:f7:e8:8f:c8:8d:bc:be:80:b6:d5:c7:33:55:
49:56:ac:c8:26:65:55:b2:66:b7:50:57:84:5c:34:b4:fb:2f:
4f:16:a0:97:57:ab:1a:ad:ab:21:60:4a:96:cc:d7:a4:7e:7b:
96:83:ee:98:19:0b:d4:7a:ad:fe:74:20:be:a4:6f:d7:ca:a5:
8d:fd:ea:8b:1e:45:10:33:8f:18:60:e3:f7:e3:8a:07:61:82:
92:ff:5b:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdzuK0caVN1qPOy+1mB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmQ3ZDViODJjODM3OGJhMjE1Mzk0M2NlOTQ4MmNlNGNk
NDk1MWIwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
Eyg1ZmI4NjM4M2YxMjlhZGZhZGZiNjg0NmYzYzU1NTEwYzY3MmUzNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqOzVezBrcUCwDS9X12JoH620RPp
KCkAdzZWBpZStvuZt86RnW3DO02zTPSOKfQ5Nfe7CwKn5dRhbDBmZ2j2dFwtaJfI
hqh5MRvxfr+bwNxKEb2qnrBJqEzuVu1ospXXAYGv70j5aYkWTiuB8M4CzdBMX4/o
S3oCaZnXiLA6bRm2hPhMpilSjk2JIkHsfU379/NZUdCa9VEZBY+gAbpYG96FSG3n
we6p5zlRmuPg/vLJ+uMz+ZFE1CNADgWXZrWWDAcmPYenyTacu3gjF26dJ/JuHkJq
FmBFdrMba/Wx+RFfjofNWARwxyFPV0IeJCD6d/cAwzYS6BIjWWziJDud+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+4Y4PxKa3637aEbzxVUQxnLjQvMB8GA1UdIwQY
MBaAFJ4tfVuCyDeLohU5Q86Ugs5M1JUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAt
YjI5NjA2ZDUxZjlkLzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAtYjI5NjA2ZDUxZjlk
LzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVet3h08b
3OuJZpT96e8WQEwc+Ytncp+0aU1VTgsctQG+kPOsFc/MTnFTJ/HdTLiLgzE/F47D
ennQYfaPWOUuzh+5E/EXkDjwuZ60wAby1oGnNw03wtIwmY49rKKLoA+bN8YqqTlC
DB+lEaUHEedRI0bdO1kcl4EDte6Ge931l6CroBUM+at0SgWb/4TMgpmLl7Nm8QIK
So09LUNrnhAKHSJC4LLBDcz36I/Ijby+gLbVxzNVSVasyCZlVbJmt1BXhFw0tPsv
Txagl1erGq2rIWBKlszXpH57loPumBkL1Hqt/nQgvqRv18qljf3qix5FEDOPGGDj
9+OKB2GCkv9b6w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:27 2025 by rpki-client