Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: 0y8Z9tdOvk5mw9/CEYzeVIOGaFwvmilsUTdZpMFhfAw=
Subject key identifier: C0:4E:C8:9B:6F:73:CE:7C:3F:3C:65:2B:67:40:C0:C7:FC:0F:94:23
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 0194BC0527CD760AFDCABA155E54EBA48947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 100A
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: loaVaQRF0fK9v1ic8GE8tohgjkwjfAY2oq109HEE9KE=)
2: aPFNqKZrV_epMPFvc-8vIsgJFgg.roa (hash: 83I0vKl1m5ZTxLcVY4fj2guNAuZT35HFxx/AGVAfz8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:cd:76:0a:fd:ca:ba:15:5e:54:eb:a4:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=c04ec89b6f73ce7c3f3c652b6740c0c7fc0f9423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:a5:ac:a4:63:1d:89:f0:1d:e0:74:e8:aa:
e0:9b:db:92:53:60:98:0f:8d:43:8c:74:5f:83:81:
7f:5c:10:a8:da:28:98:dd:64:78:4a:6f:06:6b:98:
b7:ea:87:e2:43:90:76:44:3b:22:27:8b:1f:7d:3c:
83:29:ba:c9:f8:17:a0:c4:25:16:1d:de:77:78:1e:
8f:d4:cc:9a:81:50:44:23:af:4f:d2:68:3d:7e:bf:
b8:a6:37:e3:08:a5:2b:8f:b1:c6:45:6e:89:a1:5d:
7d:45:d9:ee:84:55:c6:db:58:50:4e:04:3b:35:72:
ca:5f:b6:ce:70:81:b6:bc:ae:cb:f1:74:7b:85:41:
79:07:99:9f:f6:40:bd:2b:1d:cf:aa:ee:78:ea:9e:
0b:fa:06:99:74:73:a4:6f:10:f1:6c:cd:a6:5e:9d:
ed:23:f0:b5:62:74:00:a3:8a:92:a3:fc:52:ff:cf:
5a:30:47:ce:e8:d9:0a:e7:2b:68:dc:ae:7d:cc:80:
0d:b1:f1:43:9d:fd:e4:b8:ce:b5:c8:46:db:dc:14:
e9:63:a3:3d:c9:e6:33:54:ee:c8:56:3d:fb:06:ba:
19:72:a7:09:7b:33:cf:e2:a2:31:dd:e0:d5:9b:58:
fb:c0:85:80:52:98:37:66:5c:62:cd:8d:62:1a:eb:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4E:C8:9B:6F:73:CE:7C:3F:3C:65:2B:67:40:C0:C7:FC:0F:94:23
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:f8:13:88:c4:d3:60:26:76:c2:46:4e:cf:4e:11:b5:56:
e6:54:4e:44:35:87:85:dd:23:c4:2b:f3:45:70:17:5c:1e:20:
0c:a7:2d:c4:99:86:29:98:0d:0d:99:d0:90:1a:fb:e2:0b:7b:
3b:fa:f5:31:ba:e9:87:5b:24:0c:27:58:4b:aa:99:52:36:0c:
02:40:dd:23:25:fa:c8:10:4d:a9:26:e9:0e:38:3a:86:06:ec:
15:1b:f6:bd:bb:72:b2:31:fe:28:11:8b:cb:75:d6:c4:d5:7e:
26:ed:d1:a6:72:48:b7:39:d5:39:12:31:a7:cc:80:1e:93:62:
3d:4c:ff:80:86:48:77:c3:62:bd:66:f1:b1:8f:e2:57:80:e3:
f7:61:7b:ba:e0:28:96:19:cb:3d:5d:10:df:eb:43:a2:82:55:
59:35:c2:ae:e3:5c:39:a2:2e:11:51:81:be:dd:27:6b:b3:38:
7f:e1:fb:d7:64:a6:82:6a:b8:f7:be:52:39:a0:44:7a:13:7f:
90:89:2d:44:c5:80:6d:46:3e:e1:cb:29:cd:90:95:c4:70:0d:
2e:c5:78:90:c0:43:f2:2c:17:e2:e8:a8:97:8c:66:b6:d2:d2:
64:71:20:bc:4a:2c:4f:f0:cd:24:ca:51:25:72:4b:cd:34:76:
bd:d2:26:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSfNdgr9yroVXlTrpIlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGRjYmM4ZjYxYjI2MGZkM2YzZTc4YjZiODY4NzdjYjk1
ZmQ4M2UwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
EyhjMDRlYzg5YjZmNzNjZTdjM2YzYzY1MmI2NzQwYzBjN2ZjMGY5NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZqlrKRjHYnwHeB06Krgm9uSU2CY
D41DjHRfg4F/XBCo2iiY3WR4Sm8Ga5i36ofiQ5B2RDsiJ4sffTyDKbrJ+BegxCUW
Hd53eB6P1MyagVBEI69P0mg9fr+4pjfjCKUrj7HGRW6JoV19RdnuhFXG21hQTgQ7
NXLKX7bOcIG2vK7L8XR7hUF5B5mf9kC9Kx3Pqu546p4L+gaZdHOkbxDxbM2mXp3t
I/C1YnQAo4qSo/xS/89aMEfO6NkK5yto3K59zIANsfFDnf3kuM61yEbb3BTpY6M9
yeYzVO7IVj37BroZcqcJezPP4qIx3eDVm1j7wIWAUpg3ZlxizY1iGuun6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBOyJtvc858PzxlK2dAwMf8D5QjMB8GA1UdIwQY
MBaAFDTdy8j2GyYP0/Pni2uGh3y5X9g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NTA4YTEtNDQxMi00MGM3LThhNzIt
NTJjZDZlODlhYThkLzEvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82NTA4YTEtNDQxMi00MGM3LThhNzItNTJjZDZlODlhYThk
LzEvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbr4E4jE
02AmdsJGTs9OEbVW5lRORDWHhd0jxCvzRXAXXB4gDKctxJmGKZgNDZnQkBr74gt7
O/r1Mbrph1skDCdYS6qZUjYMAkDdIyX6yBBNqSbpDjg6hgbsFRv2vbtysjH+KBGL
y3XWxNV+Ju3RpnJItznVORIxp8yAHpNiPUz/gIZId8NivWbxsY/iV4Dj92F7uuAo
lhnLPV0Q3+tDooJVWTXCruNcOaIuEVGBvt0na7M4f+H712Smgmq4975SOaBEehN/
kIktRMWAbUY+4cspzZCVxHANLsV4kMBD8iwX4uiol4xmttLSZHEgvEosT/DNJMpR
JXJLzTR2vdImuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:23 2025 by rpki-client