Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier: UG18uDK6UCfjBSPqD4v1QHCMdb3zJ/36XPvmQ2fqG6Q=
Subject key identifier: D5:48:81:76:BE:78:A6:DC:73:5B:AD:A3:DD:46:53:6F:35:A5:85:52
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0194BCAA3ACB9615CB8B3A32700E13B3CC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number: 1447
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=)
2: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (hash: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=)
3: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=)
4: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=)
5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=)
6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=)
7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=)
8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=)
9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=)
10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: YlbnRC01jdVY5wbly1KxNP/ILmnmT9SyHwCB7/Z/qO0=)
11: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=)
12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=)
13: VufdicgIFan1jsDCf-sZLGuwp0g.roa (hash: vJuq8lo3RWIe59gYKl/s0D5AiIhMTyrcU4xMbfyblcY=)
14: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=)
15: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=)
16: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=)
17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=)
18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=)
19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=)
20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3a:cb:96:15:cb:8b:3a:32:70:0e:13:b3:cc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=d5488176be78a6dc735bada3dd46536f35a58552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:0e:db:90:b2:00:1c:42:89:77:96:50:dc:
af:0c:21:97:94:68:ba:d5:09:f1:0f:75:84:ec:30:
1b:9d:e2:0e:0b:57:63:ed:50:d9:31:74:45:7c:94:
56:aa:4f:c6:ea:00:b9:17:be:40:0b:df:fd:86:3b:
e1:5c:cb:e1:ef:04:de:cd:9f:39:e9:4e:ce:df:1b:
f2:07:4d:68:fe:65:09:1a:d5:26:a6:e6:b2:22:62:
c0:db:f7:f0:a7:86:af:7b:7e:9d:81:dc:51:fc:de:
16:fd:98:ea:60:b2:c5:27:36:b4:1b:d6:40:00:ed:
57:d0:71:3c:27:03:25:6e:29:72:18:c3:16:df:9e:
51:80:08:0d:c3:3d:52:a4:99:f7:d6:b2:9b:66:2e:
03:d0:88:28:dd:d6:47:ad:46:5e:a1:57:78:bd:47:
a3:e8:0b:56:f8:d0:c4:29:7c:1e:11:d8:3d:b3:da:
55:bb:5d:26:96:81:44:2e:b3:a2:42:89:cd:88:35:
80:76:c1:9f:ef:56:14:2a:26:cd:18:a9:57:b8:c7:
64:79:19:f0:b5:c2:2d:f2:f7:ad:3c:40:be:8f:ef:
81:60:32:bc:ef:1c:90:6f:96:78:bf:de:9b:93:5a:
25:7a:2b:e2:69:98:ed:ba:ad:12:52:93:f4:df:76:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:48:81:76:BE:78:A6:DC:73:5B:AD:A3:DD:46:53:6F:35:A5:85:52
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4f:6c:6c:48:1a:c5:0b:52:8f:48:59:01:f0:8b:53:73:e9:
64:a4:f9:6b:d7:36:eb:2f:66:26:32:68:0c:69:f8:32:db:c2:
cd:fb:43:40:a4:0e:bd:e4:02:12:d2:a1:38:92:85:b4:5a:c3:
0b:65:36:18:8f:04:11:3b:0d:5b:05:94:5c:ce:56:d9:fb:13:
1d:76:a2:d9:87:e3:bb:95:66:cd:63:40:01:3e:78:50:1b:26:
5c:d9:d2:92:10:46:fb:d2:bd:61:f0:f4:d2:cb:d8:32:25:18:
5a:a4:00:2d:4d:2b:37:f9:be:a1:7d:d8:a5:6e:f4:4c:86:fb:
e5:6c:ce:7d:91:fa:c3:a5:3f:41:c7:63:28:44:79:22:b9:4d:
d2:ef:1f:87:49:62:a5:6a:f3:ab:a2:58:a3:df:9a:ff:1c:be:
fe:59:ca:7d:91:e4:e7:7d:30:5b:8c:a6:df:f7:be:e1:1c:ac:
71:d0:df:6f:6e:e3:35:1c:f6:de:1e:1b:ae:97:24:2e:8c:7a:
e4:7a:b0:10:44:8b:37:9f:e2:f6:ca:3a:3a:ca:5d:12:2d:06:
b4:56:82:04:31:3a:0c:43:16:f9:3e:fa:a9:60:5e:07:65:86:
04:34:b7:2f:43:fa:4a:1c:1b:c9:23:ef:e1:94:1a:6e:3b:af:
91:7e:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:49 2025 by rpki-client