Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: 75cJXRkjdxSGhzxhmLFNgaQDxhzSpp1Em516Tf+DJN4=
Subject key identifier: 82:7C:F7:90:AF:21:22:E8:01:B1:B4:EC:BC:9C:50:A1:59:D9:4A:C2
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 0194BBCEBD42D1791FCADED8BA4A1F6AE55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0D2E
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: Ap6oBx2i7E0c+NsLwhNwmrTinYZOC2UQNYQZfbs3G68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:42:d1:79:1f:ca:de:d8:ba:4a:1f:6a:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=827cf790af2122e801b1b4ecbc9c50a159d94ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:e7:86:ac:5d:35:0d:e0:63:dd:03:a0:5f:
f8:90:a9:32:28:47:e5:83:12:fc:b3:5a:4a:a7:51:
0d:c1:ea:33:4b:79:33:a5:0a:9c:56:b3:23:2f:34:
b8:76:1a:d7:97:02:ef:fe:09:bc:0c:0d:6a:98:47:
e4:71:46:03:62:26:af:b5:bd:3c:7c:93:eb:47:78:
0e:91:ce:6a:7d:82:8a:a2:d3:48:e8:e1:d7:7b:98:
14:86:ec:af:28:c5:b4:20:76:04:d4:f4:82:a2:d2:
30:3d:e1:d6:ca:79:77:57:b6:cb:44:d0:d9:77:15:
86:5e:41:89:c8:3c:1c:08:fa:17:17:9b:b5:86:22:
f4:24:27:96:d8:57:4d:ed:98:71:71:0e:b3:4f:87:
44:f7:a2:38:f1:65:02:dd:67:9d:31:3d:58:45:e8:
82:27:2d:24:1f:1e:b0:4b:69:db:ef:ea:f5:6e:1c:
21:c2:6a:b2:38:dc:30:73:0e:06:f7:90:38:31:d5:
74:2d:fd:65:e7:7d:ff:65:ff:df:14:80:bf:ba:90:
ab:34:0b:85:a6:38:cc:79:ee:f3:97:5b:f5:63:e7:
8a:01:26:16:7f:13:97:7d:df:d3:78:f0:de:3f:76:
a0:fd:d7:c2:e9:c4:cd:a4:4f:ad:de:4a:b4:8b:cc:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:F7:90:AF:21:22:E8:01:B1:B4:EC:BC:9C:50:A1:59:D9:4A:C2
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:4a:01:f2:95:a3:a7:95:31:27:c9:a6:b2:4b:db:95:bd:
8b:6f:9a:46:36:5f:a9:e3:40:b0:aa:3a:ef:02:8e:2d:cf:3d:
b6:ad:5e:b0:cf:0d:4d:20:77:41:06:11:a6:de:39:21:de:6b:
ac:a1:db:75:1d:9a:61:db:dd:63:01:02:a3:61:0f:dd:de:ff:
c1:7f:d1:4a:c1:a5:c4:84:09:68:af:02:a8:20:3a:a2:d8:92:
29:37:f0:06:d2:35:bd:e9:bf:b6:c6:e1:c5:0b:99:fc:bc:fb:
01:ab:42:ca:2f:f4:23:83:84:4e:c6:8d:03:72:e4:2e:ba:d8:
a5:b3:c6:1e:94:bc:e8:5e:88:dd:01:8b:2b:26:a8:63:ab:14:
82:8c:18:ba:43:12:87:e2:3d:94:cc:62:77:cf:c0:07:19:83:
b2:f4:f5:40:80:72:dc:17:7d:c8:a5:db:9d:27:0a:c7:b4:02:
7e:f0:54:9f:a5:8b:40:50:fe:46:99:d2:df:1e:d4:3a:a6:8c:
fe:9e:8c:1c:82:3c:0a:fe:44:6c:da:af:7f:9f:ec:eb:30:19:
31:bc:0e:71:52:f2:2f:74:59:c3:4b:b0:e4:a3:72:1d:6d:77:
f9:77:5a:f2:1d:7b:00:58:49:7d:f6:29:6f:26:99:a1:63:f6:
aa:14:8d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zr1C0Xkfyt7YukofauVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTc4Mjc3NDgwY2YyZGFkNmM5ZWIwYTUyYmU0OGRmN2Fi
NjY3NWEwHhcNMjUwMTMxMTAwMTE1WhcNMjUwMjAxMTAwMTE1WjAzMTEwLwYDVQQD
Eyg4MjdjZjc5MGFmMjEyMmU4MDFiMWI0ZWNiYzljNTBhMTU5ZDk0YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A/nhqxdNQ3gY90DoF/4kKkyKEfl
gxL8s1pKp1ENweozS3kzpQqcVrMjLzS4dhrXlwLv/gm8DA1qmEfkcUYDYiavtb08
fJPrR3gOkc5qfYKKotNI6OHXe5gUhuyvKMW0IHYE1PSCotIwPeHWynl3V7bLRNDZ
dxWGXkGJyDwcCPoXF5u1hiL0JCeW2FdN7ZhxcQ6zT4dE96I48WUC3WedMT1YReiC
Jy0kHx6wS2nb7+r1bhwhwmqyONwwcw4G95A4MdV0Lf1l533/Zf/fFIC/upCrNAuF
pjjMee7zl1v1Y+eKASYWfxOXfd/TePDeP3ag/dfC6cTNpE+t3kq0i8yh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ895CvISLoAbG07LycUKFZ2UrCMB8GA1UdIwQY
MBaAFJ6ngndIDPLa1snrClK+SN96tmdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmIt
MWE5MmZiMGRjMWM3LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmItMWE5MmZiMGRjMWM3
LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEVKAfKV
o6eVMSfJprJL25W9i2+aRjZfqeNAsKo67wKOLc89tq1esM8NTSB3QQYRpt45Id5r
rKHbdR2aYdvdYwECo2EP3d7/wX/RSsGlxIQJaK8CqCA6otiSKTfwBtI1vem/tsbh
xQuZ/Lz7AatCyi/0I4OETsaNA3LkLrrYpbPGHpS86F6I3QGLKyaoY6sUgowYukMS
h+I9lMxid8/ABxmDsvT1QIBy3Bd9yKXbnScKx7QCfvBUn6WLQFD+RpnS3x7UOqaM
/p6MHII8Cv5EbNqvf5/s6zAZMbwOcVLyL3RZw0uw5KNyHW13+Xda8h17AFhJffYp
byaZoWP2qhSNkA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:21 2025 by rpki-client