Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json)
Hash identifier: SV90ktjXWugRoS2Fz0yQpD262fn3Po5olQtN8Mn2iuU=
Subject key identifier: E9:69:A7:35:A8:DA:06:9E:F5:31:3B:B4:43:5B:66:C6:CF:4C:6F:5F
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 0194BC3BD29B540DEB59265FEC16D09A4672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: CCyLcXlC12-UMDMoxqDnrPshIBg.roa (hash: LT9h4WfkBWG9L3NwCuO2vo6dr4LeBnWUYWaCK9tGS6U=)
2: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=)
3: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=)
4: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=)
5: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=)
6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: LzYKb2BPEMHFA/FxEytwfhsobPXSltlpjfoCXvNg+Lo=)
7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=)
8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=)
9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=)
10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=)
11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d2:9b:54:0d:eb:59:26:5f:ec:16:d0:9a:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=e969a735a8da069ef5313bb4435b66c6cf4c6f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:34:55:2f:79:b7:5c:24:85:9a:29:4a:92:
36:98:76:0b:60:37:ad:9d:cc:c3:8f:d0:a4:03:8c:
f8:a8:ca:e9:0a:57:59:6b:56:f1:b1:be:9b:32:f9:
7b:95:c9:d3:83:f0:e2:6d:a3:d4:72:f9:53:a0:83:
3b:cb:13:81:80:ae:31:54:e6:f5:5a:0c:ed:ea:76:
b4:51:0e:0c:7d:f1:75:62:65:d0:d8:90:5a:5c:98:
c7:e3:04:5d:87:16:97:6b:50:58:54:f7:76:1c:ea:
26:3c:56:ab:f6:a8:39:f9:1a:c0:cd:45:f2:61:01:
a8:72:58:92:18:9c:42:d9:aa:5c:be:17:04:0f:9c:
81:7a:fd:5b:d5:a5:45:9a:ca:a0:9a:23:78:08:36:
67:e8:8c:3a:0d:2a:ad:f5:59:76:8e:97:2a:47:24:
fc:fb:1d:e6:bc:69:70:cd:e9:f7:86:f0:21:d4:0c:
c7:ff:9f:92:c6:ea:40:e0:74:70:8e:9f:62:5f:94:
80:d9:82:40:42:69:56:fa:c5:8d:c1:6e:71:61:a8:
10:26:51:ae:03:78:a5:71:96:8f:46:83:91:c4:22:
8e:96:3f:99:84:1a:58:4a:bd:4c:ee:b3:6b:11:55:
31:ff:1a:94:3c:01:30:dd:45:9a:72:86:f4:9f:96:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:A7:35:A8:DA:06:9E:F5:31:3B:B4:43:5B:66:C6:CF:4C:6F:5F
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:94:a2:04:0c:35:87:2a:8c:93:a7:fc:5c:cf:c7:a3:ee:
68:6a:95:ca:b1:62:b2:0b:63:92:ce:91:13:7c:dd:72:d8:96:
d5:90:50:3a:09:c4:1a:96:58:a6:7f:69:76:f0:73:3c:b3:8c:
7e:72:2b:ae:df:a7:66:1c:82:2f:22:7d:f4:bb:17:80:9f:80:
29:83:20:d1:56:7e:6e:c2:ea:b9:8e:dd:23:9a:71:82:54:e5:
a3:5e:6f:9c:a6:0d:37:a1:5e:1f:e4:75:96:49:87:4a:84:57:
c4:87:2a:be:9d:cb:90:6a:e0:69:de:ca:ee:d2:bb:fc:5e:d2:
55:6a:51:bf:67:c8:60:c2:e6:54:ec:b1:b2:9d:47:eb:0b:2c:
a4:a2:b1:a2:73:87:51:71:da:00:b3:6a:bc:42:ae:f0:0f:f5:
3b:65:fa:f4:05:98:0c:5e:3e:e6:86:6c:38:63:91:cd:f2:85:
df:b5:39:b7:af:b5:99:6a:c3:9f:63:9f:15:59:4f:86:47:eb:
ac:3e:85:fb:ad:1f:54:ad:e9:45:87:ea:5d:ca:45:59:aa:36:
b4:4b:56:45:9c:73:7d:1d:e4:88:c6:90:2b:8d:eb:cf:6d:1f:
37:01:22:1d:e8:a3:dd:0e:d2:e8:88:11:41:d3:ea:06:14:53:
71:ef:b2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9KbVA3rWSZf7BbQmkZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
EyhlOTY5YTczNWE4ZGEwNjllZjUzMTNiYjQ0MzViNjZjNmNmNGM2ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ao0VS95t1wkhZopSpI2mHYLYDet
nczDj9CkA4z4qMrpCldZa1bxsb6bMvl7lcnTg/DibaPUcvlToIM7yxOBgK4xVOb1
Wgzt6na0UQ4MffF1YmXQ2JBaXJjH4wRdhxaXa1BYVPd2HOomPFar9qg5+RrAzUXy
YQGocliSGJxC2apcvhcED5yBev1b1aVFmsqgmiN4CDZn6Iw6DSqt9Vl2jpcqRyT8
+x3mvGlwzen3hvAh1AzH/5+SxupA4HRwjp9iX5SA2YJAQmlW+sWNwW5xYagQJlGu
A3ilcZaPRoORxCKOlj+ZhBpYSr1M7rNrEVUx/xqUPAEw3UWacob0n5Z9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlppzWo2gae9TE7tENbZsbPTG9fMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7GUogQM
NYcqjJOn/FzPx6PuaGqVyrFisgtjks6RE3zdctiW1ZBQOgnEGpZYpn9pdvBzPLOM
fnIrrt+nZhyCLyJ99LsXgJ+AKYMg0VZ+bsLquY7dI5pxglTlo15vnKYNN6FeH+R1
lkmHSoRXxIcqvp3LkGrgad7K7tK7/F7SVWpRv2fIYMLmVOyxsp1H6wsspKKxonOH
UXHaALNqvEKu8A/1O2X69AWYDF4+5oZsOGORzfKF37U5t6+1mWrDn2OfFVlPhkfr
rD6F+60fVK3pRYfqXcpFWao2tEtWRZxzfR3kiMaQK43rz20fNwEiHeij3Q7S6IgR
QdPqBhRTce+yEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client