Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: aLozujf2tNZyZ3O7v0cFEEH7NmpjuS6T2dolLMmzNqA=
Subject key identifier: 50:2A:F1:00:64:77:A9:C8:DA:8A:74:83:7E:78:BB:D3:3C:B4:16:98
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 0194BCE089036497F44301A0DAEC69F4DD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1237
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: aSGxpu9kIrUgysoGIeJZbyXtklSmtIB0MfkllNomLLA=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:03:64:97:f4:43:01:a0:da:ec:69:f4:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=502af1006477a9c8da8a74837e78bbd33cb41698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:29:45:a1:5c:c1:ca:f0:ca:27:cc:a9:ce:
43:f9:c5:ac:8a:af:82:1a:4b:65:46:c5:fd:d0:cc:
8f:fd:a5:3f:5e:7d:1c:1e:00:2f:14:d9:ec:08:27:
fa:0d:14:1e:70:b6:40:a9:c9:1b:7e:ad:4e:d2:61:
ed:2b:09:76:de:c2:d2:75:25:19:b5:7f:96:67:1f:
92:f4:6c:b0:d2:d8:da:09:e6:6d:63:69:fa:11:31:
2a:bf:b0:4f:fa:a6:dd:cc:8f:89:26:50:f4:f8:95:
14:d8:73:2b:26:25:d9:00:01:37:31:30:6a:28:92:
26:4d:02:82:25:56:70:86:4a:c0:9a:3d:dd:b4:01:
68:0a:09:4c:44:12:4b:ee:ff:6d:77:9d:9a:da:df:
f1:d2:c4:b0:2b:11:9b:87:30:88:ea:d7:69:de:9b:
92:41:f2:79:0e:b6:03:b8:6b:77:51:b7:0c:6d:9a:
d5:53:70:af:75:e7:ac:e9:8f:39:ae:61:45:0d:1d:
a3:bf:ef:3c:c9:0e:60:c5:df:06:ec:75:65:ef:05:
f9:ed:65:56:93:f8:95:49:92:3e:87:0d:c8:e1:a6:
7a:bf:dd:58:f6:67:1a:66:eb:f9:c5:4b:07:e0:5e:
82:7a:42:8b:6a:e2:6b:2e:b4:b2:b9:31:cd:cc:95:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:F1:00:64:77:A9:C8:DA:8A:74:83:7E:78:BB:D3:3C:B4:16:98
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:d3:83:7b:b1:b2:35:97:e1:87:88:74:b3:4b:65:31:8a:
67:85:06:51:76:da:82:f4:9f:17:03:c3:67:2f:52:3a:99:14:
f0:4d:d7:4c:a8:0b:19:de:80:bc:8d:3f:3a:d6:6b:e9:cd:6b:
d0:bd:3a:86:5e:ff:4a:c3:86:ec:11:3d:5c:80:0e:bc:1a:6b:
19:32:11:19:14:a1:4b:87:21:b0:de:19:ec:5f:ba:d3:60:31:
17:88:27:0d:91:26:79:8a:b7:61:b7:bf:c9:4f:85:df:49:cc:
b1:2e:b0:cb:d3:8d:2f:93:bb:32:00:17:d2:b4:0b:49:a3:f2:
0c:ae:24:f7:99:98:93:e1:54:9e:f5:90:3e:61:37:03:63:c4:
41:1e:64:51:0b:a1:e4:29:74:2c:94:ee:f1:01:7d:16:3e:76:
02:09:32:86:44:d0:47:a6:db:7f:75:54:b6:13:84:0e:fd:d5:
33:04:c4:1a:a9:b0:06:ca:ea:ab:8a:a7:d1:fb:16:d0:74:ad:
96:d2:ad:e9:b4:03:9a:42:1c:88:9b:d3:e0:83:10:6a:77:3b:
de:c3:a3:e4:4c:f4:1a:c2:60:da:f9:9c:56:51:4f:4b:62:fe:
d4:df:22:f6:5e:6b:a9:a0:88:eb:b2:80:2f:7a:5a:24:61:2c:
5c:86:5e:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IkDZJf0QwGg2uxp9N2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw
ODk3NWEwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
Eyg1MDJhZjEwMDY0NzdhOWM4ZGE4YTc0ODM3ZTc4YmJkMzNjYjQxNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/0pRaFcwcrwyifMqc5D+cWsiq+C
GktlRsX90MyP/aU/Xn0cHgAvFNnsCCf6DRQecLZAqckbfq1O0mHtKwl23sLSdSUZ
tX+WZx+S9Gyw0tjaCeZtY2n6ETEqv7BP+qbdzI+JJlD0+JUU2HMrJiXZAAE3MTBq
KJImTQKCJVZwhkrAmj3dtAFoCglMRBJL7v9td52a2t/x0sSwKxGbhzCI6tdp3puS
QfJ5DrYDuGt3UbcMbZrVU3Cvdees6Y85rmFFDR2jv+88yQ5gxd8G7HVl7wX57WVW
k/iVSZI+hw3I4aZ6v91Y9mcaZuv5xUsH4F6CekKLauJrLrSyuTHNzJWvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAq8QBkd6nI2op0g354u9M8tBaYMB8GA1UdIwQY
MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt
NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx
LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIjTg3ux
sjWX4YeIdLNLZTGKZ4UGUXbagvSfFwPDZy9SOpkU8E3XTKgLGd6AvI0/OtZr6c1r
0L06hl7/SsOG7BE9XIAOvBprGTIRGRShS4chsN4Z7F+602AxF4gnDZEmeYq3Ybe/
yU+F30nMsS6wy9ONL5O7MgAX0rQLSaPyDK4k95mYk+FUnvWQPmE3A2PEQR5kUQuh
5Cl0LJTu8QF9Fj52AgkyhkTQR6bbf3VUthOEDv3VMwTEGqmwBsrqq4qn0fsW0HSt
ltKt6bQDmkIciJvT4IMQanc73sOj5Ez0GsJg2vmcVlFPS2L+1N8i9l5rqaCI67KA
L3paJGEsXIZeKA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:46 2025 by rpki-client