Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: PHjEAWprgZoBFQYjfaQavQSDTxTdebPAWDtsOA6XA/0=
Subject key identifier: 64:BA:97:6F:C0:CD:CF:E1:61:17:1C:C4:C0:EA:F3:06:B2:5D:5C:D7
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 0194BBCDE30C82AFFC15A2775371638410DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 0972
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: RM8Ubkl7O3kqmA1gLhDnr5LSTflivO3SkqG//DADzjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e3:0c:82:af:fc:15:a2:77:53:71:63:84:10:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=64ba976fc0cdcfe161171cc4c0eaf306b25d5cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:78:cb:ed:76:89:04:72:d6:94:f5:38:5b:
c1:6a:a1:f1:3d:75:df:5d:9b:65:d8:8b:90:01:a5:
aa:28:20:62:fb:f9:ef:c5:fc:fe:d3:63:89:83:fe:
4c:f0:7b:89:2e:c5:28:82:fe:47:56:ec:c6:cd:04:
e8:99:a0:04:fe:59:e0:19:23:38:96:25:b8:19:0e:
12:f5:33:6a:ee:4d:fb:d9:26:60:29:3a:88:51:56:
45:6d:4e:0d:97:57:71:08:f5:f2:98:9e:d9:7e:18:
24:68:e9:15:03:2a:6e:72:0a:e0:6d:ad:f8:79:a5:
55:4c:f6:d9:2b:29:0c:c2:35:64:f2:9d:da:9b:61:
f6:9d:c7:3d:aa:81:ea:e6:eb:78:81:91:45:9e:79:
98:ba:39:89:1e:ef:43:98:5d:6a:76:46:39:70:69:
0c:f5:cb:37:c5:4e:2b:e3:d7:07:15:02:6d:3c:33:
ac:55:d5:f9:06:81:6d:5a:be:ef:45:ee:6d:07:54:
2b:d9:6b:aa:27:b3:61:b8:81:36:38:b8:11:81:da:
bc:a8:13:e6:69:3b:71:51:30:45:ab:78:01:fd:8c:
d8:8e:b7:84:91:d1:c2:a4:b2:7e:3b:20:d8:83:23:
8d:30:95:72:a6:4c:c0:df:56:7c:7e:65:1c:72:2f:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:97:6F:C0:CD:CF:E1:61:17:1C:C4:C0:EA:F3:06:B2:5D:5C:D7
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:06:6e:f7:6e:c4:f6:f7:62:6a:4e:ac:98:6e:78:d7:69:
68:29:60:5e:a9:81:cd:6f:be:fa:54:a9:5f:f5:b5:08:78:41:
88:50:5a:c3:16:b9:9e:4d:dc:eb:de:20:32:da:24:7a:5b:28:
19:4f:54:63:ad:af:05:4d:32:06:fa:74:40:4c:61:51:89:89:
fa:6f:ce:b9:fc:6c:1f:6d:0c:78:76:d3:3d:9e:0a:6c:8d:1f:
62:9e:d1:79:02:0c:07:25:d5:d0:3f:23:64:3a:d4:68:02:b7:
ce:b0:30:63:77:72:41:ea:15:85:4a:81:79:23:64:aa:4b:e8:
fd:29:8e:11:75:66:dd:e3:78:76:7a:40:5d:41:42:22:59:42:
92:aa:34:a5:40:3e:bd:7c:7d:cc:8c:bb:b1:4e:f6:a6:97:81:
e8:03:03:16:77:5f:cd:fe:65:7d:aa:05:9b:c7:39:62:14:96:
d6:85:eb:88:7c:4c:47:d8:0a:fe:96:42:46:64:e4:48:08:70:
81:a5:c9:2e:69:d7:c2:30:f4:b8:02:11:df:8e:f6:89:f6:41:
b2:d2:42:cb:10:b5:8a:9b:1b:03:ba:d4:1e:28:70:44:e2:60:
92:0e:8c:9f:09:25:b7:d9:d5:78:05:b7:5d:25:f9:33:4f:e0:
be:a2:4b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeMMgq/8FaJ3U3FjhBDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMzc1MjI2ZmNlNjI3ZTMyMjgwNmM5M2E1NDNlMjNmMjZm
NTQ5MTYwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
Eyg2NGJhOTc2ZmMwY2RjZmUxNjExNzFjYzRjMGVhZjMwNmIyNWQ1Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I54y+12iQRy1pT1OFvBaqHxPXXf
XZtl2IuQAaWqKCBi+/nvxfz+02OJg/5M8HuJLsUogv5HVuzGzQTomaAE/lngGSM4
liW4GQ4S9TNq7k372SZgKTqIUVZFbU4Nl1dxCPXymJ7ZfhgkaOkVAypucgrgba34
eaVVTPbZKykMwjVk8p3am2H2ncc9qoHq5ut4gZFFnnmYujmJHu9DmF1qdkY5cGkM
9cs3xU4r49cHFQJtPDOsVdX5BoFtWr7vRe5tB1Qr2WuqJ7NhuIE2OLgRgdq8qBPm
aTtxUTBFq3gB/YzYjreEkdHCpLJ+OyDYgyONMJVypkzA31Z8fmUcci/S5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS6l2/Azc/hYRccxMDq8wayXVzXMB8GA1UdIwQY
MBaAFJw3Uib85ifjIoBsk6VD4j8m9UkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YzQ3MjQtMzVlMC00NmRiLWFkZWQt
Y2I2ZDhiNjIwZGM4LzEvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC82YzQ3MjQtMzVlMC00NmRiLWFkZWQtY2I2ZDhiNjIwZGM4
LzEvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhUGbvdu
xPb3YmpOrJhueNdpaClgXqmBzW+++lSpX/W1CHhBiFBawxa5nk3c694gMtokelso
GU9UY62vBU0yBvp0QExhUYmJ+m/OufxsH20MeHbTPZ4KbI0fYp7ReQIMByXV0D8j
ZDrUaAK3zrAwY3dyQeoVhUqBeSNkqkvo/SmOEXVm3eN4dnpAXUFCIllCkqo0pUA+
vXx9zIy7sU72ppeB6AMDFndfzf5lfaoFm8c5YhSW1oXriHxMR9gK/pZCRmTkSAhw
gaXJLmnXwjD0uAIR3472ifZBstJCyxC1ipsbA7rUHihwROJgkg6Mnwklt9nVeAW3
XSX5M0/gvqJLxQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client