Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: 91lNdIv81Loa+COhakJ37le4MCCQBWkvvHadT4cgbcA=
Subject key identifier: 4D:E1:E1:F7:2C:18:8A:9F:D4:76:1F:0E:3C:64:34:F8:69:F6:7B:AC
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 0194BBCDC83E5C8946A0F5DBCF1D074AECC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 0D2D
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: Jp2dZ093vN+5JwHBQ105fXx9qCNhcH/obO9bmtynVnk=)
2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:3e:5c:89:46:a0:f5:db:cf:1d:07:4a:ec:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=4de1e1f72c188a9fd4761f0e3c6434f869f67bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:9d:2c:c7:e3:c9:b4:aa:f6:98:44:54:e9:
36:be:b4:67:27:21:bb:5b:81:b0:87:84:44:d1:01:
c9:dc:83:24:cf:b3:c0:3c:d3:6e:2d:a6:0e:70:a7:
de:8d:16:55:4f:94:8e:63:90:d0:cf:8a:65:d8:cf:
ac:61:6f:af:a4:39:16:51:ba:36:15:ce:bf:15:54:
92:0b:80:69:14:59:33:5a:ee:ee:ab:0a:a0:6c:e6:
a0:79:04:65:85:36:e7:d2:8d:47:28:1c:5f:1a:14:
b9:d6:31:1e:b6:56:96:63:0f:af:e2:7e:00:ea:14:
69:f5:47:20:41:7a:67:05:dd:f0:3a:ed:17:86:2e:
b1:00:5d:f9:6c:08:35:74:e4:89:7e:21:be:72:b3:
02:ca:17:9d:32:c0:59:bd:35:1e:49:7b:eb:f4:6d:
f7:f7:2e:50:8b:22:4b:2a:a0:12:6a:aa:98:35:74:
b7:45:a7:65:5d:12:d7:39:d6:02:0f:60:e4:e9:a8:
4b:4f:ad:a1:3a:eb:e8:e4:ed:22:d2:04:ea:ac:3e:
e9:89:ef:fe:bd:f5:08:a0:9e:63:1a:9a:b2:f1:0a:
01:e5:8a:7a:6f:e5:be:b9:a3:c9:68:bb:0a:25:58:
cf:a2:8e:b5:6f:46:0b:cc:4d:d3:2b:96:86:e2:c2:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:E1:F7:2C:18:8A:9F:D4:76:1F:0E:3C:64:34:F8:69:F6:7B:AC
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:71:45:64:99:11:e2:9d:a2:a8:db:47:0d:49:14:e4:9a:
81:01:aa:29:a7:50:57:e8:84:39:3d:99:11:a7:52:8d:81:a2:
09:02:80:99:e2:30:e0:0b:78:ee:e5:3c:b8:ff:6c:b7:77:38:
43:93:62:95:28:45:b3:92:1c:7b:f0:9a:df:fc:39:d7:54:14:
0d:61:ca:56:cc:a4:36:b6:91:53:12:70:4b:fd:e0:3f:ea:cd:
7e:45:b6:87:ff:ef:4f:66:4a:b7:da:b6:65:ab:98:ba:88:a7:
1c:bf:eb:37:7d:2a:43:08:6d:ef:db:65:03:2c:69:ab:7a:6e:
3b:5e:c5:fa:e0:2d:52:03:79:0c:67:9a:27:b0:e7:1d:6e:f0:
21:49:01:4a:58:c2:6f:f8:0c:32:d8:b7:19:d0:53:0a:14:f4:
f7:9c:4e:de:90:af:32:57:14:f5:ed:a5:52:fd:26:7e:c0:a4:
1d:e5:61:b0:2c:99:3c:83:77:6e:40:c7:94:c7:8d:2b:85:ad:
26:72:a5:eb:f1:f2:e0:2e:e5:76:8f:ab:71:dc:49:3f:21:a4:
26:f5:bb:bb:1f:8f:10:8e:f7:4f:38:96:8b:73:53:61:a4:c2:
cd:79:33:79:da:41:97:a7:fd:ef:05:0a:c0:3d:00:04:3c:f6:
06:9b:e8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcg+XIlGoPXbzx0HSuzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx
NTBlM2MwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
Eyg0ZGUxZTFmNzJjMTg4YTlmZDQ3NjFmMGUzYzY0MzRmODY5ZjY3YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2mdLMfjybSq9phEVOk2vrRnJyG7
W4Gwh4RE0QHJ3IMkz7PAPNNuLaYOcKfejRZVT5SOY5DQz4pl2M+sYW+vpDkWUbo2
Fc6/FVSSC4BpFFkzWu7uqwqgbOageQRlhTbn0o1HKBxfGhS51jEetlaWYw+v4n4A
6hRp9UcgQXpnBd3wOu0Xhi6xAF35bAg1dOSJfiG+crMCyhedMsBZvTUeSXvr9G33
9y5QiyJLKqASaqqYNXS3RadlXRLXOdYCD2Dk6ahLT62hOuvo5O0i0gTqrD7pie/+
vfUIoJ5jGpqy8QoB5Yp6b+W+uaPJaLsKJVjPoo61b0YLzE3TK5aG4sL9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3h4fcsGIqf1HYfDjxkNPhp9nusMB8GA1UdIwQY
MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt
MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk
LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0VxRWSZ
EeKdoqjbRw1JFOSagQGqKadQV+iEOT2ZEadSjYGiCQKAmeIw4At47uU8uP9st3c4
Q5NilShFs5Ice/Ca3/w511QUDWHKVsykNraRUxJwS/3gP+rNfkW2h//vT2ZKt9q2
ZauYuoinHL/rN30qQwht79tlAyxpq3puO17F+uAtUgN5DGeaJ7DnHW7wIUkBSljC
b/gMMti3GdBTChT095xO3pCvMlcU9e2lUv0mfsCkHeVhsCyZPIN3bkDHlMeNK4Wt
JnKl6/Hy4C7ldo+rcdxJPyGkJvW7ux+PEI73TziWi3NTYaTCzXkzedpBl6f97wUK
wD0ABDz2BpvoUg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:57 2025 by rpki-client