Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: Vz9DL1vk57QAqbyjvZ+WMKGa4q3CYlwtZFH5wROPrJM=
Subject key identifier: 37:F0:8A:04:1F:F2:2A:31:2D:9D:63:4A:30:47:F0:A6:BC:5A:AE:21
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 0194BC3C87FEFC5E1EDBD698D08E47E55E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0D9E
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: U5hzwciDHIZPz5LbLAQQj4mPaLo.roa (hash: A9CDmLH9SGWXWsOb7X/cVdtpTLJlPOuoq4kxRMSCYTY=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: xPgC08oX65zU6pyjbJHUmdqYjtmNSU0SHz496IlqisQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:fe:fc:5e:1e:db:d6:98:d0:8e:47:e5:5e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=37f08a041ff22a312d9d634a3047f0a6bc5aae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:e7:93:3c:1c:27:b9:de:95:8e:25:6c:ba:
31:18:be:55:1e:e7:04:e1:d0:ee:bc:63:28:9b:af:
a7:24:28:b4:88:85:29:0f:34:7b:83:6d:4e:dd:ac:
12:03:5e:e6:f8:d0:73:18:92:9e:66:83:ac:23:12:
73:03:e0:e9:63:b6:06:88:e9:0a:dc:8f:4f:1d:22:
ba:f9:13:61:19:7e:0a:48:cd:ff:97:25:a4:ba:8e:
54:da:29:e6:81:64:85:19:74:b7:89:8b:e6:61:37:
d7:ed:17:de:dc:80:93:43:e3:4e:13:cf:f1:fa:9a:
db:de:5d:a1:77:bb:2a:6a:7c:ab:ae:e6:cf:97:f6:
32:04:af:0f:e7:5b:96:8c:eb:98:de:52:34:19:e6:
ec:eb:a1:47:6f:7b:3e:15:62:8e:49:c0:36:6f:cf:
ce:1e:7c:0c:3b:9a:c0:56:ce:94:3f:96:ed:ae:8f:
fe:3d:df:5b:cb:5d:cd:48:0d:39:13:15:f0:f8:1e:
40:05:68:82:29:19:66:82:7f:7e:ac:56:e3:c6:0c:
46:31:35:57:4f:78:bc:4c:34:27:e4:eb:3d:b9:1a:
81:76:4b:90:4f:3a:e3:b2:26:94:f7:c8:46:d5:a9:
43:b3:97:d7:57:96:b4:a8:53:d7:f8:e7:50:85:26:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:8A:04:1F:F2:2A:31:2D:9D:63:4A:30:47:F0:A6:BC:5A:AE:21
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:14:51:50:24:13:9d:c2:b3:90:97:16:3b:b3:01:78:bd:8f:
51:a0:0b:ff:7a:97:61:29:08:7a:3d:27:16:84:4f:ad:95:ef:
5f:d0:ad:f0:a6:92:4c:b6:37:d4:b9:ba:5c:6f:e9:a7:37:1a:
52:b6:c0:ed:97:79:21:ae:2a:56:e8:c3:48:9e:02:fc:90:a0:
b2:dd:de:18:e4:cd:07:57:46:ab:16:eb:9e:96:a6:14:92:fb:
df:d6:01:05:36:b5:21:d1:09:dd:b5:52:aa:95:17:9d:e0:d0:
4d:4c:b3:72:e8:9b:d1:ae:96:77:3b:1c:5c:c2:2f:65:4f:76:
f1:4a:b1:f7:e8:5b:c3:35:22:a7:f7:01:16:61:93:6d:fd:b1:
c5:d0:3e:b6:85:e4:16:bf:de:7c:cd:18:13:22:ad:3e:cc:a8:
ec:0e:06:b1:f1:47:8f:ff:13:af:64:61:d1:d9:30:62:58:bf:
33:e3:6e:3d:52:35:57:76:66:52:52:cc:73:f8:af:5e:ed:89:
3f:fa:8b:5e:de:7a:a2:99:1b:b6:9a:5d:be:1c:4b:7c:05:56:
bb:03:6f:8b:f1:15:d3:49:6f:0b:98:5d:b9:79:25:1a:ca:a6:
96:40:a9:2a:28:4c:61:ad:2e:6a:dd:18:05:b3:dd:b5:63:59:
76:37:ab:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIf+/F4e29aY0I5H5V5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjUwMTMxMTIwMTExWhcNMjUwMjAxMTIwMTExWjAzMTEwLwYDVQQD
EygzN2YwOGEwNDFmZjIyYTMxMmQ5ZDYzNGEzMDQ3ZjBhNmJjNWFhZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ3nkzwcJ7nelY4lbLoxGL5VHucE
4dDuvGMom6+nJCi0iIUpDzR7g21O3awSA17m+NBzGJKeZoOsIxJzA+DpY7YGiOkK
3I9PHSK6+RNhGX4KSM3/lyWkuo5U2inmgWSFGXS3iYvmYTfX7Rfe3ICTQ+NOE8/x
+prb3l2hd7sqanyrrubPl/YyBK8P51uWjOuY3lI0Gebs66FHb3s+FWKOScA2b8/O
HnwMO5rAVs6UP5btro/+Pd9by13NSA05ExXw+B5ABWiCKRlmgn9+rFbjxgxGMTVX
T3i8TDQn5Os9uRqBdkuQTzrjsiaU98hG1alDs5fXV5a0qFPX+OdQhSaF8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfwigQf8ioxLZ1jSjBH8Ka8Wq4hMB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxRRUCQT
ncKzkJcWO7MBeL2PUaAL/3qXYSkIej0nFoRPrZXvX9Ct8KaSTLY31Lm6XG/ppzca
UrbA7Zd5Ia4qVujDSJ4C/JCgst3eGOTNB1dGqxbrnpamFJL739YBBTa1IdEJ3bVS
qpUXneDQTUyzcuib0a6WdzscXMIvZU928Uqx9+hbwzUip/cBFmGTbf2xxdA+toXk
Fr/efM0YEyKtPsyo7A4GsfFHj/8Tr2Rh0dkwYli/M+NuPVI1V3ZmUlLMc/ivXu2J
P/qLXt56opkbtppdvhxLfAVWuwNvi/EV00lvC5hduXklGsqmlkCpKihMYa0uat0Y
BbPdtWNZdjerEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:52 2025 by rpki-client