Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File: n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier: glmgvpsN8V+MThcvooKsYSFxaQ9qGGv7A54I36AfgmI=
Subject key identifier: A9:5A:EE:09:05:56:40:D8:E2:9C:FF:D0:FA:A4:5B:BB:EF:FD:D2:E0
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial: 0194BD85AD29A1E46941A288545B6CB84ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number: 092C
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: II71lUXGl2p111aanD+B7dzaH2I6b4OcdhUjsDwl6zg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:29:a1:e4:69:41:a2:88:54:5b:6c:b8:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=a95aee09055640d8e29cffd0faa45bbbeffdd2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:52:0e:a4:af:85:d5:95:d3:7f:5e:0d:ec:
44:7d:d1:b6:77:6a:aa:4b:4c:84:5d:22:ac:10:c3:
80:74:0d:60:5a:38:61:08:95:b9:ab:df:0a:a9:68:
f7:bf:8a:f2:48:4c:54:17:2e:aa:e0:8b:c5:bb:e4:
d8:75:c1:fc:f8:7c:6b:89:91:70:e1:c9:1f:6a:86:
6b:04:c3:c4:c4:b9:8c:a1:1f:76:54:a9:e0:f0:b3:
7c:d4:5e:3a:b1:d3:14:57:e1:53:e1:cf:44:b8:8e:
3d:1a:c3:4a:9d:8c:c2:7d:94:48:57:26:41:3b:7f:
83:e4:d1:67:f0:33:b9:50:06:90:92:4b:e0:e4:1c:
6e:32:07:9c:16:b7:56:59:0c:93:d4:63:a0:71:50:
f7:b6:34:65:a7:21:54:43:89:fd:44:4b:e3:b5:a2:
03:ee:5d:d1:2a:4d:1a:80:cd:9c:7b:5e:8d:aa:87:
39:ee:42:a9:93:3c:f9:68:26:ed:f1:30:b0:16:22:
3d:c6:bb:61:4d:91:36:e8:4d:d9:6e:ea:b7:16:dc:
62:cd:e0:5e:fa:05:2a:49:89:bf:28:64:fa:7f:e6:
b9:ed:9b:d0:76:96:2a:86:73:c8:71:2a:b6:78:01:
2b:5b:d6:66:75:a0:85:9d:22:25:a7:6a:35:13:0e:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:EE:09:05:56:40:D8:E2:9C:FF:D0:FA:A4:5B:BB:EF:FD:D2:E0
X509v3 Authority Key Identifier:
keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:e3:61:b1:f9:e0:f2:44:9d:8f:1e:3e:85:89:fc:c8:7a:
fb:2b:74:59:06:54:18:16:a0:6b:8f:dc:3f:4d:04:c8:20:c0:
69:e8:6c:73:6f:76:9d:55:8f:b3:b6:bc:1a:1c:60:f7:e3:b9:
6f:e7:3d:1e:92:95:5c:cb:6b:cd:1a:27:d6:07:59:6e:b8:27:
3c:88:c6:6b:4b:2b:5f:06:87:65:0c:2f:b4:bd:03:39:05:97:
6d:9f:02:a3:a8:35:e6:62:bf:eb:05:36:6b:af:89:25:4d:6f:
7d:f8:18:8e:90:60:8c:51:6c:ff:28:39:84:d1:1f:4c:b4:cf:
9b:0a:31:a4:5f:60:b5:35:e8:b5:59:78:67:17:e2:c9:e2:8d:
47:a5:f1:0a:7e:1b:55:06:2d:2b:e6:63:b0:7a:3c:91:4f:45:
62:96:27:c5:9d:b3:99:22:62:99:cd:e1:3a:b2:da:ed:75:b7:
3b:a9:37:26:54:25:6e:5e:88:68:09:d5:cf:a8:61:a3:49:bb:
7d:25:32:3e:c6:1b:11:12:db:2f:6a:db:ca:92:ce:46:21:ea:
9c:38:13:97:dc:a2:16:8e:a0:c1:72:6c:22:3c:5d:f5:4b:ba:
1c:7e:30:d0:83:ed:c8:9c:44:49:79:5e:65:67:82:3b:ad:09:
d5:26:53:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha0poeRpQaKIVFtsuEraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmY2MyZjNlZTZiNWMzZmY2ZGM1MzQ2YTc1MzU1MDZmYTgy
NDEyM2UwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EyhhOTVhZWUwOTA1NTY0MGQ4ZTI5Y2ZmZDBmYWE0NWJiYmVmZmRkMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mdSDqSvhdWV039eDexEfdG2d2qq
S0yEXSKsEMOAdA1gWjhhCJW5q98KqWj3v4rySExUFy6q4IvFu+TYdcH8+HxriZFw
4ckfaoZrBMPExLmMoR92VKng8LN81F46sdMUV+FT4c9EuI49GsNKnYzCfZRIVyZB
O3+D5NFn8DO5UAaQkkvg5BxuMgecFrdWWQyT1GOgcVD3tjRlpyFUQ4n9REvjtaID
7l3RKk0agM2ce16Nqoc57kKpkzz5aCbt8TCwFiI9xrthTZE26E3Zbuq3FtxizeBe
+gUqSYm/KGT6f+a57ZvQdpYqhnPIcSq2eAErW9ZmdaCFnSIlp2o1Ew6YBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKla7gkFVkDY4pz/0PqkW7vv/dLgMB8GA1UdIwQY
MBaAFJ/MLz7mtcP/bcU0anU1UG+oJBI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83Zjg0MGQtM2JkNC00ZmFkLTlhMTUt
OGJmMDRhZjRiMmI0LzEvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83Zjg0MGQtM2JkNC00ZmFkLTlhMTUtOGJmMDRhZjRiMmI0
LzEvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK3jYbH5
4PJEnY8ePoWJ/Mh6+yt0WQZUGBaga4/cP00EyCDAaehsc292nVWPs7a8Ghxg9+O5
b+c9HpKVXMtrzRon1gdZbrgnPIjGa0srXwaHZQwvtL0DOQWXbZ8Co6g15mK/6wU2
a6+JJU1vffgYjpBgjFFs/yg5hNEfTLTPmwoxpF9gtTXotVl4ZxfiyeKNR6XxCn4b
VQYtK+ZjsHo8kU9FYpYnxZ2zmSJimc3hOrLa7XW3O6k3JlQlbl6IaAnVz6hho0m7
fSUyPsYbERLbL2rbypLORiHqnDgTl9yiFo6gwXJsIjxd9Uu6HH4w0IPtyJxESXle
ZWeCO60J1SZTjA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:54 2025 by rpki-client