Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: V+DtwDDsgzeI5bdGke+yWo9hf5a4oxdkNL6dhGkGFdM=
Subject key identifier: 5F:DD:69:2A:F2:2A:F7:03:A4:28:31:46:62:92:6B:5F:EC:11:77:75
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 0194BCCFDC67EE686DC93081EA882E75A37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:42:06 +0000
Manifest this update: Fri 31 Jan 2025 14:42:06 +0000
Manifest next update: Sat 01 Feb 2025 14:42:06 +0000
Files and hashes: 1: bFdS6Z9odio9q-vWjVJd2U4_RXY.roa (hash: 0lIWTq7zDaRXk2oNHIa2UJG3U8riAM5UGXf3Gj4peFg=)
2: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: RNxtgt/skR+QY2vlApjGL38SecY0whakl4293drjKpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:cf:dc:67:ee:68:6d:c9:30:81:ea:88:2e:75:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jan 31 14:42:06 2025 GMT
Not After : Feb 1 14:42:06 2025 GMT
Subject: CN=5fdd692af22af703a428314662926b5fec117775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:e3:fb:7b:2c:e8:99:ae:48:88:a7:00:71:
5f:31:0c:93:47:95:b6:8c:f0:e1:29:c7:f2:9c:d8:
26:13:6f:ee:a9:ca:44:31:3a:fa:49:29:77:37:02:
bb:ff:bc:5f:31:17:67:9a:32:cf:b1:5f:55:20:b9:
70:3f:16:b5:28:80:bf:4b:86:95:8d:ee:e2:c1:04:
a5:e6:3d:81:60:00:75:de:78:11:13:1f:22:84:fe:
43:70:2c:1c:c6:84:25:c1:54:93:9d:7c:7c:29:7e:
d1:ca:3f:d4:f3:81:78:9c:36:2a:e3:fe:93:a1:78:
44:36:5b:43:fb:d4:7d:93:ba:9f:58:ff:df:ac:8e:
8d:01:a4:5e:3a:cd:c4:6d:c6:55:e1:b4:0d:93:c0:
4c:73:a8:61:f5:9d:9c:22:02:8e:0d:c0:06:a0:85:
b9:d3:57:85:60:d6:8d:95:2d:78:56:2d:3d:6e:9b:
8c:25:58:9c:05:83:54:a7:d3:96:32:04:33:39:0e:
31:c9:d3:d6:68:cd:cf:08:a5:8a:b1:b3:99:5f:71:
4a:80:df:ee:7d:50:40:d9:d5:8d:e6:d0:71:2f:51:
bb:22:6f:a6:3b:61:8e:19:b5:36:61:23:63:ab:a3:
11:7b:fa:02:d2:eb:68:4e:db:e5:5a:e7:85:1b:06:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:69:2A:F2:2A:F7:03:A4:28:31:46:62:92:6B:5F:EC:11:77:75
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c8:e3:c7:3c:4e:4a:4a:c0:3e:28:9e:8c:f7:ba:f4:71:35:
44:be:64:7e:80:63:3d:f0:f8:ff:a2:32:c3:85:03:15:ea:18:
d4:e9:88:de:b4:0a:af:1f:25:96:ee:53:ae:13:7c:7d:7b:19:
4f:a7:eb:a5:32:88:f4:f9:94:db:2c:dd:5e:e8:83:fd:bb:dd:
6e:d4:a3:d3:8f:5c:1e:c8:9a:3c:ed:68:74:88:13:9c:5b:b6:
b4:d6:ee:95:fe:51:a4:57:80:1b:a9:b8:1e:b2:79:6b:9a:0e:
89:94:26:8c:6b:57:69:87:c0:f8:7e:02:04:0c:7b:3b:b6:95:
bf:17:65:1b:40:a6:31:ac:7d:28:d4:08:15:28:9a:0d:e1:68:
4f:0b:fc:99:2d:3e:64:11:51:04:a2:86:bf:00:24:df:d0:18:
62:a8:14:cc:47:17:a5:37:b0:a2:6e:3b:01:75:56:2c:68:d0:
d4:87:39:44:93:ec:37:f4:ff:24:f3:72:4a:57:ed:6a:3c:76:
9d:01:36:29:e8:d0:ed:b3:98:44:67:b0:8d:db:35:a6:fd:ae:
58:bb:0e:c0:77:a3:c9:2a:23:a5:7c:cd:9b:4e:10:d6:a2:aa:
da:76:0c:d6:90:97:e1:81:b9:b9:8c:c3:41:53:bc:2f:fb:0b:
5e:f7:42:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8z9xn7mhtyTCB6ogudaN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjM5YzA4ZWFkOTRiYjA0ZmMzZTZiNGE2NWU2ZTFjN2Rj
ZjM4ZjQwHhcNMjUwMTMxMTQ0MjA2WhcNMjUwMjAxMTQ0MjA2WjAzMTEwLwYDVQQD
Eyg1ZmRkNjkyYWYyMmFmNzAzYTQyODMxNDY2MjkyNmI1ZmVjMTE3Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcnj+3ss6JmuSIinAHFfMQyTR5W2
jPDhKcfynNgmE2/uqcpEMTr6SSl3NwK7/7xfMRdnmjLPsV9VILlwPxa1KIC/S4aV
je7iwQSl5j2BYAB13ngREx8ihP5DcCwcxoQlwVSTnXx8KX7Ryj/U84F4nDYq4/6T
oXhENltD+9R9k7qfWP/frI6NAaReOs3EbcZV4bQNk8BMc6hh9Z2cIgKODcAGoIW5
01eFYNaNlS14Vi09bpuMJVicBYNUp9OWMgQzOQ4xydPWaM3PCKWKsbOZX3FKgN/u
fVBA2dWN5tBxL1G7Im+mO2GOGbU2YSNjq6MRe/oC0utoTtvlWueFGwa+4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/daSryKvcDpCgxRmKSa1/sEXd1MB8GA1UdIwQY
MBaAFJ0jnAjq2UuwT8PmtKZebhx9zzj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAt
ZGJiMjkzMWEwZjY0LzEvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAtZGJiMjkzMWEwZjY0
LzEvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMjjxzxO
SkrAPiiejPe69HE1RL5kfoBjPfD4/6Iyw4UDFeoY1OmI3rQKrx8llu5TrhN8fXsZ
T6frpTKI9PmU2yzdXuiD/bvdbtSj049cHsiaPO1odIgTnFu2tNbulf5RpFeAG6m4
HrJ5a5oOiZQmjGtXaYfA+H4CBAx7O7aVvxdlG0CmMax9KNQIFSiaDeFoTwv8mS0+
ZBFRBKKGvwAk39AYYqgUzEcXpTewom47AXVWLGjQ1Ic5RJPsN/T/JPNySlftajx2
nQE2KejQ7bOYRGewjds1pv2uWLsOwHejySojpXzNm04Q1qKq2nYM1pCX4YG5uYzD
QVO8L/sLXvdCVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:49 2025 by rpki-client