Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier: JfYiTn9/ztc7yNfc9i5+5Fd8EZzXIXk5ckYxNcTz2ww=
Subject key identifier: 72:59:2E:BC:8F:35:16:35:7B:BD:D5:0D:E7:29:45:65:62:EF:D7:C6
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer: /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial: 0194BC728132659D0F6D15019DDB0CCD5A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number: 02D3
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: CexANwmKbbGhnoHIvyWZzPTZmFqOTQXozxfMclzKWP0=)
2: b7x6ZKsbLCwY_tMdnPo9QIIdiU8.roa (hash: ZFZsgVw2f50KESlxtMB2pklQZAw0SjfBRhWTVivxDpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:81:32:65:9d:0f:6d:15:01:9d:db:0c:cd:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=72592ebc8f3516357bbdd50de729456562efd7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:c9:06:c3:9e:77:be:85:8b:6c:11:d4:29:
b4:03:c1:98:9b:43:37:7e:a8:55:30:69:29:96:c1:
0a:d2:d8:0a:32:a7:af:2f:b5:a9:07:cc:f0:d1:c6:
f4:1f:24:e0:25:50:93:37:9f:c5:c7:db:75:de:c0:
38:01:31:a9:0a:f1:e8:eb:56:97:e1:11:23:d9:79:
25:33:67:64:57:40:10:3c:b8:8c:1c:57:c4:d5:45:
3e:59:04:fa:cc:52:db:86:dd:dd:aa:06:ea:85:d8:
88:15:af:d6:75:bc:ba:69:28:73:ae:22:80:ce:dd:
a2:93:e1:37:92:50:ae:50:f4:7c:79:95:ff:ea:8f:
a6:93:8a:bb:c8:53:87:bf:0c:51:45:ca:04:f6:9f:
b0:41:d0:3c:f3:04:90:2a:c1:a2:2c:53:8b:d6:df:
a7:6d:c6:f4:67:0e:81:d9:c9:55:83:48:7e:67:af:
8f:d3:c6:b9:2a:4d:19:8e:32:87:4e:53:98:36:f8:
a8:3e:6d:e7:9f:15:3f:48:60:56:31:87:f7:63:3f:
75:05:d1:ba:d9:c7:a9:14:04:55:c9:35:b2:bd:e4:
32:92:83:ed:5c:25:36:8a:d2:a4:03:7e:bd:bf:49:
6e:10:95:a6:5c:85:da:5b:18:eb:a9:9d:ca:38:ab:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:2E:BC:8F:35:16:35:7B:BD:D5:0D:E7:29:45:65:62:EF:D7:C6
X509v3 Authority Key Identifier:
keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:ca:c7:bb:50:86:2c:e7:3e:f3:87:59:fc:0c:aa:7e:07:
56:59:c3:ff:f7:26:35:96:ee:4b:8c:f8:a8:7f:41:85:c8:91:
bd:6b:98:d8:13:c9:f0:47:a0:87:a9:58:2e:dc:a7:0d:15:b4:
b2:3c:99:9e:c4:9e:f2:df:c2:2d:91:32:7c:58:d4:a0:be:86:
51:56:5e:9a:b1:ff:4d:98:c2:df:9c:82:82:62:cb:ec:07:4e:
21:4f:ad:2c:30:db:af:c5:80:0e:e0:31:4b:36:c7:91:49:83:
4f:56:4d:85:54:31:9e:c1:de:2a:0f:c1:d3:d2:0a:6d:54:d2:
61:11:b5:33:36:9d:62:67:d3:fa:a6:cd:84:dc:48:a4:5f:af:
76:8b:52:b0:ba:37:e3:dc:0e:15:1d:80:4e:9b:96:07:b0:71:
4e:71:1b:79:7a:e9:29:12:10:a7:16:6b:3d:6a:d9:88:e0:77:
6d:15:07:78:fd:28:fc:5c:20:2f:75:63:dc:a5:bf:fc:aa:08:
dc:5d:e3:be:ef:92:36:a3:1f:e0:80:ac:99:c4:ab:8a:5d:8d:
a6:f6:92:d3:b8:15:16:60:07:f3:7c:6b:81:96:d5:b7:7d:d2:
9c:a4:5e:10:12:93:66:83:81:75:76:33:e0:68:b7:ba:44:97:
df:56:ba:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coEyZZ0PbRUBndsMzVp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NWNjMTc4Y2RmNWFkOTI3OTkzOWU1NzY4YWU4ODgzZmZi
ZjM1ZWIwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
Eyg3MjU5MmViYzhmMzUxNjM1N2JiZGQ1MGRlNzI5NDU2NTYyZWZkN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1HJBsOed76Fi2wR1Cm0A8GYm0M3
fqhVMGkplsEK0tgKMqevL7WpB8zw0cb0HyTgJVCTN5/Fx9t13sA4ATGpCvHo61aX
4REj2XklM2dkV0AQPLiMHFfE1UU+WQT6zFLbht3dqgbqhdiIFa/Wdby6aShzriKA
zt2ik+E3klCuUPR8eZX/6o+mk4q7yFOHvwxRRcoE9p+wQdA88wSQKsGiLFOL1t+n
bcb0Zw6B2clVg0h+Z6+P08a5Kk0ZjjKHTlOYNvioPm3nnxU/SGBWMYf3Yz91BdG6
2cepFARVyTWyveQykoPtXCU2itKkA369v0luEJWmXIXaWxjrqZ3KOKteNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJZLryPNRY1e73VDecpRWVi79fGMB8GA1UdIwQY
MBaAFOlcwXjN9a2SeZOeV2iuiIP/vzXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYt
MmRmOTlkODEyM2I3LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYtMmRmOTlkODEyM2I3
LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZazKx7tQ
hiznPvOHWfwMqn4HVlnD//cmNZbuS4z4qH9BhciRvWuY2BPJ8Eegh6lYLtynDRW0
sjyZnsSe8t/CLZEyfFjUoL6GUVZemrH/TZjC35yCgmLL7AdOIU+tLDDbr8WADuAx
SzbHkUmDT1ZNhVQxnsHeKg/B09IKbVTSYRG1MzadYmfT+qbNhNxIpF+vdotSsLo3
49wOFR2ATpuWB7BxTnEbeXrpKRIQpxZrPWrZiOB3bRUHeP0o/FwgL3Vj3KW//KoI
3F3jvu+SNqMf4ICsmcSril2NpvaS07gVFmAH83xrgZbVt33SnKReEBKTZoOBdXYz
4Gi3ukSX31a6Ew==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:57 2025 by rpki-client