Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: qBVKnGT9+I+T3BaY4aXwdwiurij2pQh29JjxBWeXnGU=
Subject key identifier: AD:19:B2:BC:70:CB:5E:34:BE:86:EB:6A:54:57:24:B2:D6:2F:99:CF
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 0194BD855971E57BA7DC09836857105459E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0D8B
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: ldT2G1OAAmdJYnxl4lKSDPU0kS5wykFdqcFrT8H1QB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:71:e5:7b:a7:dc:09:83:68:57:10:54:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=ad19b2bc70cb5e34be86eb6a545724b2d62f99cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b0:32:3f:ba:a3:85:10:d0:a0:fe:d3:84:3f:
44:76:9b:8d:86:6b:ac:8c:7a:87:ca:93:47:4b:56:
a0:16:d3:27:76:24:3e:88:05:36:e2:94:51:7f:80:
99:8c:1f:a1:ea:ec:c9:67:b6:58:d7:0e:e8:eb:2a:
fc:ea:46:e5:83:23:af:61:8f:a4:7c:9a:f4:bc:2d:
54:a0:5f:0e:5d:49:08:11:ae:e9:d7:54:72:83:06:
fe:d0:65:2c:2e:28:d6:64:9b:06:c6:ad:1a:20:7e:
12:3c:d2:dd:7a:c5:99:0d:a5:79:fc:39:4c:77:f0:
70:4d:b8:19:be:72:92:2e:cc:48:d8:c2:0b:60:e3:
37:7a:33:ff:fe:77:ee:33:15:57:19:4d:5f:75:24:
69:38:85:1a:7e:b0:db:c7:3f:dc:93:d2:dd:6f:a8:
da:4b:2b:47:2f:43:15:ab:69:65:ec:c7:f5:5d:d6:
02:45:3c:ee:81:4f:9c:66:fe:54:56:66:a9:78:87:
bf:10:a0:99:e5:4b:5b:22:2a:5b:69:91:95:b1:8e:
9f:0a:c7:cc:20:71:b7:07:bd:03:a9:5f:fa:be:95:
e5:84:4c:18:30:4a:0d:f2:35:a4:20:18:ef:49:ca:
c4:1d:24:64:af:5e:31:4f:c6:db:45:4c:a8:f9:74:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:B2:BC:70:CB:5E:34:BE:86:EB:6A:54:57:24:B2:D6:2F:99:CF
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:92:8a:cd:c6:43:e1:60:ae:18:91:d4:0f:12:95:b1:ac:
ef:85:ab:fa:12:58:f4:c9:a8:70:c2:05:03:c0:2f:84:1e:75:
58:fa:9f:97:d7:83:db:8f:5d:75:09:31:70:a6:8c:3d:f6:75:
56:26:33:a1:62:b5:b8:3f:0f:f1:bc:a6:36:2e:ad:a0:a4:fb:
71:63:58:e1:ed:36:5a:4a:73:66:f0:54:c5:47:36:00:12:67:
56:2f:fa:9b:54:db:b2:df:48:48:33:63:00:47:9c:a6:8c:01:
99:a9:f5:ec:1e:ab:a9:e0:0d:7a:9c:1c:a0:01:72:93:0f:ec:
52:93:4d:00:91:22:85:55:72:fe:e6:ae:cf:09:48:15:61:2f:
5f:8f:10:dc:e1:a4:dc:6e:f9:04:d2:71:c1:c4:78:e7:81:75:
ce:21:1f:b8:33:18:cf:a2:0f:62:cb:a4:18:7a:ce:ac:52:0c:
ba:83:61:5e:95:d9:9c:a2:df:bc:54:2a:b3:60:f8:50:2d:a4:
49:2a:b1:48:f1:c7:27:2f:3b:86:4a:32:ff:65:31:a4:c0:75:
fa:70:d9:0c:98:1b:c2:be:db:cf:b9:b9:87:97:15:38:0e:b3:
ff:6d:6c:22:55:4b:8b:64:6d:63:a5:2f:59:53:0f:91:f3:f0:
68:50:48:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVlx5Xun3AmDaFcQVFnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi
ZThiNGIwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EyhhZDE5YjJiYzcwY2I1ZTM0YmU4NmViNmE1NDU3MjRiMmQ2MmY5OWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7AyP7qjhRDQoP7ThD9EdpuNhmus
jHqHypNHS1agFtMndiQ+iAU24pRRf4CZjB+h6uzJZ7ZY1w7o6yr86kblgyOvYY+k
fJr0vC1UoF8OXUkIEa7p11Rygwb+0GUsLijWZJsGxq0aIH4SPNLdesWZDaV5/DlM
d/BwTbgZvnKSLsxI2MILYOM3ejP//nfuMxVXGU1fdSRpOIUafrDbxz/ck9Ldb6ja
SytHL0MVq2ll7Mf1XdYCRTzugU+cZv5UVmapeIe/EKCZ5UtbIipbaZGVsY6fCsfM
IHG3B70DqV/6vpXlhEwYMEoN8jWkIBjvScrEHSRkr14xT8bbRUyo+XQYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0Zsrxwy140vobralRXJLLWL5nPMB8GA1UdIwQY
MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt
NGEwY2IyNTVkNzNhLzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh
LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVKSis3G
Q+FgrhiR1A8SlbGs74Wr+hJY9MmocMIFA8AvhB51WPqfl9eD249ddQkxcKaMPfZ1
ViYzoWK1uD8P8bymNi6toKT7cWNY4e02WkpzZvBUxUc2ABJnVi/6m1Tbst9ISDNj
AEecpowBman17B6rqeANepwcoAFykw/sUpNNAJEihVVy/uauzwlIFWEvX48Q3OGk
3G75BNJxwcR454F1ziEfuDMYz6IPYsukGHrOrFIMuoNhXpXZnKLfvFQqs2D4UC2k
SSqxSPHHJy87hkoy/2UxpMB1+nDZDJgbwr7bz7m5h5cVOA6z/21sIlVLi2RtY6Uv
WVMPkfPwaFBIdA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:56 2025 by rpki-client