Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: cLIUBMQIvGen2S/VYvJYp1NazxQb7YmJ/+aR/MAEgLk=
Subject key identifier: 5F:46:70:C4:1A:37:54:92:9F:FD:69:AA:AE:97:FD:DF:CE:B5:D7:F3
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 0194BC04EED6E4806116A205DA7BB84F31BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: p9ajGU0ubiGp3VAlH1N5VrMg7M3xhdOByDSLdoBnT9I=)
2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:d6:e4:80:61:16:a2:05:da:7b:b8:4f:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=5f4670c41a3754929ffd69aaae97fddfceb5d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:7e:cb:49:a0:e7:b2:51:52:39:f2:2f:52:
c0:71:b9:23:dd:fd:80:c6:b8:7f:03:78:ab:d0:8c:
a7:2e:44:ae:29:1b:5c:79:34:ad:65:82:18:e4:a0:
b9:99:33:25:a8:f7:52:71:cb:93:18:f7:2b:df:2a:
f7:a8:10:2b:89:f6:17:74:95:37:b1:13:ec:8f:91:
28:5c:fd:c3:37:6d:4f:50:3c:4e:9d:f4:a1:e3:70:
04:9e:4c:9a:98:92:b1:22:f7:b2:42:f8:89:3c:ad:
24:a4:6d:61:21:49:73:7d:30:16:1f:cb:ff:8a:54:
f8:11:9e:08:70:a0:77:08:4c:6b:c3:7a:01:ef:66:
04:dc:77:f0:7b:33:9c:f2:90:7f:74:45:bc:cc:0b:
3b:70:84:ff:96:21:bf:60:14:e2:6b:e3:d0:16:ac:
ab:26:7e:c8:f4:91:2b:ed:dc:e7:e4:79:40:ac:b3:
dc:62:82:06:2e:b3:98:7a:8e:23:5d:07:c5:2e:37:
07:0c:92:f6:c8:9b:9a:ab:cd:6a:3e:57:9c:07:dc:
a1:c0:ec:e5:18:31:4a:fe:a2:c4:bf:d3:9d:a3:47:
29:ac:3f:50:28:56:d5:b2:6f:ac:bf:ed:78:e7:42:
44:3d:9a:fe:4c:31:ba:d7:e8:31:1a:94:85:af:3d:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:46:70:C4:1A:37:54:92:9F:FD:69:AA:AE:97:FD:DF:CE:B5:D7:F3
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:10:d6:57:4a:a8:be:a3:15:5c:74:2d:11:e0:e4:85:42:
3f:a8:b3:24:18:d3:f3:07:5c:c6:61:8a:73:3b:1b:fc:86:6c:
5c:4f:0d:24:60:04:ee:65:49:87:36:52:04:12:bf:bf:b1:53:
5d:18:4c:f6:9d:0b:12:cb:65:54:bb:50:4f:9d:c4:e5:bf:3f:
72:6e:f2:f4:fb:4f:0c:ad:6d:f6:f1:e9:fc:a6:d7:77:4a:ef:
a8:4c:49:84:e3:62:ef:75:3e:65:c6:0c:ca:20:19:89:65:50:
aa:77:2a:a7:bf:bb:2f:c1:e3:c4:24:36:7a:0a:64:1c:4a:0f:
17:1d:7f:f0:09:3c:c3:27:9c:be:64:68:bf:35:d8:77:bf:da:
ac:f1:94:5d:b7:ec:01:80:13:d9:9c:b6:03:8a:13:8c:49:ed:
5d:f4:48:93:21:b3:55:dc:ca:71:31:d2:98:4b:c5:1e:6d:72:
bf:3b:66:57:0c:1c:80:82:f1:0b:97:e9:be:57:ba:46:08:85:
92:53:98:46:df:6f:40:8c:0e:16:75:86:0b:f0:51:03:f3:20:
c3:45:85:f1:98:52:9a:85:4e:f9:fa:71:a0:75:ca:78:2e:cd:
14:ce:27:a1:b8:6f:4b:8f:de:f5:e8:73:d2:5d:cb:32:2d:1d:
79:81:12:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BO7W5IBhFqIF2nu4TzG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy
NDYxNTUwHhcNMjUwMTMxMTEwMDI3WhcNMjUwMjAxMTEwMDI3WjAzMTEwLwYDVQQD
Eyg1ZjQ2NzBjNDFhMzc1NDkyOWZmZDY5YWFhZTk3ZmRkZmNlYjVkN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7J+y0mg57JRUjnyL1LAcbkj3f2A
xrh/A3ir0IynLkSuKRtceTStZYIY5KC5mTMlqPdSccuTGPcr3yr3qBArifYXdJU3
sRPsj5EoXP3DN21PUDxOnfSh43AEnkyamJKxIveyQviJPK0kpG1hIUlzfTAWH8v/
ilT4EZ4IcKB3CExrw3oB72YE3HfwezOc8pB/dEW8zAs7cIT/liG/YBTia+PQFqyr
Jn7I9JEr7dzn5HlArLPcYoIGLrOYeo4jXQfFLjcHDJL2yJuaq81qPlecB9yhwOzl
GDFK/qLEv9Odo0cprD9QKFbVsm+sv+1450JEPZr+TDG61+gxGpSFrz3lgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9GcMQaN1SSn/1pqq6X/d/OtdfzMB8GA1UdIwQY
MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It
MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh
LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiO0Q1ldK
qL6jFVx0LRHg5IVCP6izJBjT8wdcxmGKczsb/IZsXE8NJGAE7mVJhzZSBBK/v7FT
XRhM9p0LEstlVLtQT53E5b8/cm7y9PtPDK1t9vHp/KbXd0rvqExJhONi73U+ZcYM
yiAZiWVQqncqp7+7L8HjxCQ2egpkHEoPFx1/8Ak8wyecvmRovzXYd7/arPGUXbfs
AYAT2Zy2A4oTjEntXfRIkyGzVdzKcTHSmEvFHm1yvztmVwwcgILxC5fpvle6RgiF
klOYRt9vQIwOFnWGC/BRA/Mgw0WF8ZhSmoVO+fpxoHXKeC7NFM4nobhvS4/e9ehz
0l3LMi0deYESQg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:13 2025 by rpki-client