Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 6wFcGgZupJ3yCUbu32iD0QjywJhr6rlwcf+ivXKABpE=
Subject key identifier: F6:24:8A:BF:A9:4B:23:E7:19:42:6D:09:7B:53:56:B0:5B:33:81:F1
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 0194BC3C4E6E85A7FD35D5E2E70C81A1AC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: j/hRlN7+dpWbUpijlr8S060atmHVVAiERmTc1Dqt/gI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:6e:85:a7:fd:35:d5:e2:e7:0c:81:a1:ac:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=f6248abfa94b23e719426d097b5356b05b3381f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:b6:96:f4:c3:4e:83:b6:85:0f:12:97:cc:
03:bc:d7:d9:ef:f1:bd:11:03:75:84:a5:96:52:14:
12:27:5f:76:51:4e:48:3f:e9:57:55:ff:b7:6c:41:
4f:90:46:90:5d:cb:0a:a4:66:22:db:e2:c0:69:20:
db:72:6e:fa:ed:6a:14:d0:4a:66:a8:ce:2e:12:e9:
ad:7b:16:6f:4e:00:0e:1f:cd:64:84:9c:ce:ca:04:
e8:2f:39:76:e7:bb:9b:d3:ba:0d:92:90:b2:96:e3:
28:4f:b2:5f:d8:a1:18:61:3b:61:a4:03:83:8c:85:
20:74:d7:30:ff:aa:07:30:7c:20:de:bf:b2:05:ae:
d5:1c:71:4e:86:38:39:f3:90:74:8e:c6:fa:d0:3f:
2d:4c:3b:75:96:14:71:e9:fc:32:76:58:2c:30:39:
93:fe:f9:18:bc:24:cc:30:dd:c5:c8:36:10:41:92:
4a:e4:0a:47:de:8a:07:09:70:58:f8:31:25:23:c1:
c5:06:b8:64:84:8d:e3:68:b3:5f:54:c6:f8:78:c6:
aa:30:52:73:d9:76:25:19:5b:3a:e7:9a:52:a3:67:
d7:f2:d6:94:d5:a6:6d:64:b6:80:e4:23:bd:de:ab:
f3:51:84:c6:34:7e:37:29:70:d8:44:63:72:66:ff:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:8A:BF:A9:4B:23:E7:19:42:6D:09:7B:53:56:B0:5B:33:81:F1
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0a:87:87:bf:ed:ef:7f:6b:ab:9d:92:65:33:39:3f:b0:3a:
03:3e:7d:ba:c5:69:2a:d8:fd:8d:24:ce:55:37:c8:99:b5:76:
b5:f0:65:ea:30:dd:88:45:70:42:3e:0d:48:ff:76:23:0b:71:
af:86:b2:93:b5:2b:a7:33:3c:df:4d:f0:9c:44:18:91:7a:ac:
f3:de:b2:f4:a2:d1:b8:50:0a:c5:d3:f3:bd:97:32:de:3a:3a:
08:2c:93:c3:57:20:0a:10:0b:65:e7:35:ab:36:4f:d8:0e:90:
f2:4e:db:eb:73:99:1e:fc:6b:45:4b:29:c3:03:69:23:6a:95:
e8:93:55:98:9b:c0:12:c1:b9:e9:ed:26:06:94:1b:4d:f6:a2:
d3:8b:89:5b:e2:ca:b9:c3:00:76:a6:59:0f:ab:3f:01:95:4a:
5f:62:d5:b2:b5:f2:e5:5e:de:27:fe:56:d4:46:88:3f:76:b1:
1f:c1:d8:45:6e:50:20:61:ed:f5:c4:89:02:c3:4c:96:9e:1d:
6a:9e:9d:68:8f:4e:36:3a:24:95:2c:97:85:f7:db:cf:32:3c:
a3:c0:a5:cc:11:72:b5:cf:89:71:1c:65:fd:a1:6c:26:9c:98:
1f:20:24:16:6d:20:89:e9:2c:16:86:d4:93:e4:12:27:f1:a6:
a6:0a:fd:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PE5uhaf9NdXi5wyBoaxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
EyhmNjI0OGFiZmE5NGIyM2U3MTk0MjZkMDk3YjUzNTZiMDViMzM4MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNy2lvTDToO2hQ8Sl8wDvNfZ7/G9
EQN1hKWWUhQSJ192UU5IP+lXVf+3bEFPkEaQXcsKpGYi2+LAaSDbcm767WoU0Epm
qM4uEumtexZvTgAOH81khJzOygToLzl257ub07oNkpCyluMoT7Jf2KEYYTthpAOD
jIUgdNcw/6oHMHwg3r+yBa7VHHFOhjg585B0jsb60D8tTDt1lhRx6fwydlgsMDmT
/vkYvCTMMN3FyDYQQZJK5ApH3ooHCXBY+DElI8HFBrhkhI3jaLNfVMb4eMaqMFJz
2XYlGVs655pSo2fX8taU1aZtZLaA5CO93qvzUYTGNH43KXDYRGNyZv+R1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYkir+pSyPnGUJtCXtTVrBbM4HxMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAqHh7/t
739rq52SZTM5P7A6Az59usVpKtj9jSTOVTfImbV2tfBl6jDdiEVwQj4NSP92Iwtx
r4ayk7UrpzM8303wnEQYkXqs896y9KLRuFAKxdPzvZcy3jo6CCyTw1cgChALZec1
qzZP2A6Q8k7b63OZHvxrRUspwwNpI2qV6JNVmJvAEsG56e0mBpQbTfai04uJW+LK
ucMAdqZZD6s/AZVKX2LVsrXy5V7eJ/5W1EaIP3axH8HYRW5QIGHt9cSJAsNMlp4d
ap6daI9ONjoklSyXhffbzzI8o8ClzBFytc+JcRxl/aFsJpyYHyAkFm0gieksFobU
k+QSJ/Gmpgr96w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:02 2025 by rpki-client