Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: eoZw5AfJOq5YE8C2e3nzGugTkoJM5bB6dbHkM6wFBTY=
Subject key identifier: 72:72:57:71:1F:54:34:9E:C3:8A:D9:F5:83:0F:A3:45:A7:C1:6A:D2
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 0194BCAA008AEE481F9E304EE21CDF0237A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0BE2
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: PLqDH+f5j48ShtTWn5E8oKIOz6QxDqss0Y+BhJ3jW3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:00:8a:ee:48:1f:9e:30:4e:e2:1c:df:02:37:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=727257711f54349ec38ad9f5830fa345a7c16ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:d5:0e:d8:c8:76:fa:b7:91:90:79:0f:81:
a7:8a:9b:9d:41:33:6f:f8:e3:0d:a8:89:0b:1f:68:
b1:4f:d5:01:41:62:b9:5c:0e:5e:16:68:6e:e3:4d:
63:4e:dd:00:04:f5:5d:78:37:0e:ba:c1:6c:ba:22:
b4:76:4e:2b:f7:aa:95:8b:6d:7a:55:2b:e2:49:54:
0a:1e:aa:0c:2e:20:a3:cb:8f:bb:95:f9:b6:10:61:
04:dc:07:0a:d0:ca:21:ec:98:9b:9e:55:6f:31:61:
16:04:32:c6:a9:ae:ae:69:9c:2a:e5:7a:77:37:b1:
fb:b4:e0:c5:5b:6b:f1:9f:d0:2c:10:f1:a0:b6:3c:
d2:da:59:58:3e:18:f5:e6:21:da:ca:bb:5b:c4:12:
30:70:35:35:7a:5c:4f:7f:48:fc:55:dd:66:39:a5:
e6:b2:1e:b1:13:16:6c:76:37:44:33:e7:3b:85:60:
a4:a2:92:ff:73:6c:e7:d7:57:52:ad:95:b2:33:1b:
8e:57:26:7e:a1:15:99:6d:59:7f:f2:8c:1f:dc:ef:
ad:b1:69:fc:f0:34:10:c4:24:60:22:78:41:a7:84:
f6:cf:c4:8c:c6:41:60:43:ba:48:5a:2c:6c:a3:65:
c3:32:cb:e6:50:74:d4:a1:f2:9f:21:5a:73:eb:e1:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:57:71:1F:54:34:9E:C3:8A:D9:F5:83:0F:A3:45:A7:C1:6A:D2
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:4c:c8:33:f3:6d:db:46:27:dc:6f:80:49:4b:97:bd:4b:
7c:85:54:11:19:6c:54:74:5c:49:8b:a0:3b:2b:db:78:54:cc:
cd:b8:e6:fe:f1:ae:1b:5c:c1:81:54:17:c8:c3:ff:24:ab:b6:
78:a0:5a:4f:7b:2c:58:a2:9f:a4:59:c5:d0:e3:8a:f9:b4:95:
bd:1a:d5:59:43:26:b8:04:97:5a:64:88:ad:9a:9f:29:47:e1:
4e:ae:0d:da:0b:56:84:99:84:6a:7d:b9:9d:66:87:1b:fb:60:
3c:0b:b9:d3:3c:51:7e:23:c3:2c:0c:09:b5:cd:f4:fb:95:ba:
fc:c0:a0:26:9f:0d:f4:fa:b2:71:20:9b:38:8b:c7:77:e0:f7:
13:21:82:70:5a:df:2e:5e:c6:1b:a2:54:8e:1c:7c:c1:aa:6d:
63:67:c6:93:79:c6:4c:a7:4c:3e:f6:e7:d7:c1:b0:cd:c8:3c:
89:f0:6d:22:ce:34:1b:91:97:b2:61:aa:c7:81:35:54:96:ce:
1f:95:6e:69:84:45:89:c5:8d:26:23:e7:60:91:ff:11:36:f4:
32:d4:0c:02:e1:e8:ca:38:c9:7c:7b:a3:04:ad:c8:8a:3e:57:
14:b0:dd:6f:2a:39:f7:58:06:12:dd:f4:32:a0:5b:c6:5a:88:
7d:01:82:2a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qgCK7kgfnjBO4hzfAjeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz
MDdkMTgwHhcNMjUwMTMxMTQwMDQ1WhcNMjUwMjAxMTQwMDQ1WjAzMTEwLwYDVQQD
Eyg3MjcyNTc3MTFmNTQzNDllYzM4YWQ5ZjU4MzBmYTM0NWE3YzE2YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NHVDtjIdvq3kZB5D4GnipudQTNv
+OMNqIkLH2ixT9UBQWK5XA5eFmhu401jTt0ABPVdeDcOusFsuiK0dk4r96qVi216
VSviSVQKHqoMLiCjy4+7lfm2EGEE3AcK0Moh7JibnlVvMWEWBDLGqa6uaZwq5Xp3
N7H7tODFW2vxn9AsEPGgtjzS2llYPhj15iHayrtbxBIwcDU1elxPf0j8Vd1mOaXm
sh6xExZsdjdEM+c7hWCkopL/c2zn11dSrZWyMxuOVyZ+oRWZbVl/8owf3O+tsWn8
8DQQxCRgInhBp4T2z8SMxkFgQ7pIWixso2XDMsvmUHTUofKfIVpz6+GtGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHJyV3EfVDSew4rZ9YMPo0WnwWrSMB8GA1UdIwQY
MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0
LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx
M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+hM
yDPzbdtGJ9xvgElLl71LfIVUERlsVHRcSYugOyvbeFTMzbjm/vGuG1zBgVQXyMP/
JKu2eKBaT3ssWKKfpFnF0OOK+bSVvRrVWUMmuASXWmSIrZqfKUfhTq4N2gtWhJmE
an25nWaHG/tgPAu50zxRfiPDLAwJtc30+5W6/MCgJp8N9PqycSCbOIvHd+D3EyGC
cFrfLl7GG6JUjhx8waptY2fGk3nGTKdMPvbn18Gwzcg8ifBtIs40G5GXsmGqx4E1
VJbOH5VuaYRFicWNJiPnYJH/ETb0MtQMAuHoyjjJfHujBK3Iij5XFLDdbyo591gG
Et30MqBbxlqIfQGCKg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:34:58 2025 by rpki-client