Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: EXeDoqWPHKYRaqdjrxfNIEDmuz7JXFqvUDOvhPLAdQ8=
Subject key identifier: EA:8D:1E:BF:8A:39:8B:C3:34:3E:8F:6E:AF:84:36:D9:4F:45:6A:09
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 0194BD857D7A27160D0C348035C455EA5795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0AD5
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: CdABBd2D8KQ2BDaK3Nd+dC89mmX1mJp0KN7CQIlGRQE=)
2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:7a:27:16:0d:0c:34:80:35:c4:55:ea:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=ea8d1ebf8a398bc3343e8f6eaf8436d94f456a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:c9:a4:54:c6:81:33:ed:2d:e6:fb:b3:cf:
9d:4a:4a:79:43:54:a8:a7:64:b4:d6:26:09:21:bc:
8d:8f:bc:50:c2:6a:c8:41:7b:2e:79:f0:49:cd:f3:
59:6d:b1:21:6b:25:bf:4d:06:31:35:56:5b:3a:aa:
e5:58:4e:a6:fa:0a:36:15:84:e2:98:d3:6e:6f:d7:
2e:a5:1b:c7:82:4f:f6:d4:db:93:38:97:37:5b:a3:
15:bf:c3:61:58:60:a4:6c:4e:1a:6d:70:bc:76:b0:
0b:98:4f:5f:ac:a8:e4:75:51:aa:5b:46:e5:ac:84:
dc:a5:8a:f6:87:73:a7:67:e0:c4:7c:aa:a8:95:e4:
31:f7:35:2c:9a:0d:91:48:8c:7f:c0:60:69:1d:44:
e1:42:c4:2e:4c:2d:f6:c5:ee:73:70:9e:e4:1f:59:
a4:f7:06:6e:9b:20:03:a2:73:a1:99:6f:46:b9:21:
78:38:b7:49:d4:cb:29:5f:ab:91:46:97:fd:57:25:
90:12:3c:07:4d:e0:fb:05:eb:ef:81:d8:1f:0a:83:
f7:17:ae:4d:4e:f9:42:a9:37:3c:d8:d1:25:e9:bc:
ef:a4:91:1b:d2:c6:10:28:5f:cc:56:a5:6b:48:a1:
af:e3:51:eb:02:ef:0c:cf:96:9c:1f:36:8e:0c:9e:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:1E:BF:8A:39:8B:C3:34:3E:8F:6E:AF:84:36:D9:4F:45:6A:09
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:c8:22:cd:9f:3f:d9:55:e0:dd:b3:2b:8b:01:68:5d:c0:
23:7c:38:6e:8e:12:fb:94:17:03:8a:8a:d8:92:13:c6:64:67:
00:ff:ee:ae:f3:38:a7:ad:b0:8f:db:38:ab:29:f7:e7:e7:97:
34:56:d2:ba:b3:5b:eb:dd:44:b5:92:22:e7:49:9b:d3:04:aa:
7f:d7:7a:ad:d6:80:3d:b6:2e:9a:2c:7d:95:71:55:59:21:3e:
4a:95:1c:89:65:75:e5:1d:e2:d3:dd:82:20:c7:21:ae:51:8a:
f8:a4:b9:67:f3:8e:1d:4e:1e:01:7a:b1:40:08:8c:c8:4c:89:
98:e4:ee:10:4d:8b:38:a9:58:f0:e7:9b:8e:3b:79:15:54:24:
47:42:b6:a3:99:9f:20:2e:e0:f5:2b:9a:be:5b:d8:e8:59:41:
cb:d2:d0:9c:9f:81:a1:ff:65:c0:a7:79:d4:d4:5c:ba:60:c1:
20:ea:a6:4a:88:2c:d6:58:04:00:ca:02:9d:a4:74:eb:36:39:
25:4d:d7:e0:00:97:55:02:bf:bb:be:d0:24:55:d2:76:11:d9:
2a:c9:09:f1:c3:ef:a5:81:48:94:5d:97:7c:60:5a:be:55:1e:
08:81:91:b2:8d:f5:33:a0:fa:92:8e:47:35:77:7a:49:7d:83:
3a:20:6a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hX16JxYNDDSANcRV6leVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm
YzA5NzgwHhcNMjUwMTMxMTgwMDI5WhcNMjUwMjAxMTgwMDI5WjAzMTEwLwYDVQQD
EyhlYThkMWViZjhhMzk4YmMzMzQzZThmNmVhZjg0MzZkOTRmNDU2YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDvJpFTGgTPtLeb7s8+dSkp5Q1So
p2S01iYJIbyNj7xQwmrIQXsuefBJzfNZbbEhayW/TQYxNVZbOqrlWE6m+go2FYTi
mNNub9cupRvHgk/21NuTOJc3W6MVv8NhWGCkbE4abXC8drALmE9frKjkdVGqW0bl
rITcpYr2h3OnZ+DEfKqoleQx9zUsmg2RSIx/wGBpHUThQsQuTC32xe5zcJ7kH1mk
9wZumyADonOhmW9GuSF4OLdJ1MspX6uRRpf9VyWQEjwHTeD7BevvgdgfCoP3F65N
TvlCqTc82NEl6bzvpJEb0sYQKF/MVqVrSKGv41HrAu8Mz5acHzaODJ6/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqNHr+KOYvDND6Pbq+ENtlPRWoJMB8GA1UdIwQY
MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt
NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi
LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASq3IIs2f
P9lV4N2zK4sBaF3AI3w4bo4S+5QXA4qK2JITxmRnAP/urvM4p62wj9s4qyn35+eX
NFbSurNb691EtZIi50mb0wSqf9d6rdaAPbYumix9lXFVWSE+SpUciWV15R3i092C
IMchrlGK+KS5Z/OOHU4eAXqxQAiMyEyJmOTuEE2LOKlY8Oebjjt5FVQkR0K2o5mf
IC7g9SuavlvY6FlBy9LQnJ+Bof9lwKd51NRcumDBIOqmSogs1lgEAMoCnaR06zY5
JU3X4ACXVQK/u77QJFXSdhHZKskJ8cPvpYFIlF2XfGBavlUeCIGRso31M6D6ko5H
NXd6SX2DOiBq/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:24 2025 by rpki-client