
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
File: nJ4hbtlwrbWem9SinbNcIj1ivJY.mft (raw, json)
Hash identifier: eQmzSDSqhovoYCGoIW0VOwMVNHaUOQCTaAcUHa9iDdk=
Subject key identifier: E7:43:6B:96:75:C2:F6:8A:94:BD:D2:18:40:08:8E:7A:56:D4:D3:C3
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Certificate issuer: /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial: 0194BD4EBE848B21BF77D1909DA151B0E407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa (hash: kIa9UaUqLSZ9J3sHBlTkTWhH3Zl6GZgevA7Dd1AIyEw=)
2: nJ4hbtlwrbWem9SinbNcIj1ivJY.crl (hash: Oo6FI0HxVtBeDbAl39pQEs90yLQJLEgypL1AD7fVezk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:84:8b:21:bf:77:d1:90:9d:a1:51:b0:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=e7436b9675c2f68a94bdd21840088e7a56d4d3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:c7:cc:8f:83:e7:26:85:b0:ad:50:61:3e:
09:69:01:ed:75:1b:81:51:25:c3:a7:91:58:fb:e5:
a9:13:39:fa:2f:3c:66:2e:c7:b8:21:b4:eb:ca:dc:
0d:c6:f9:18:50:9e:e3:18:c6:c4:b6:7c:d2:7e:e9:
7b:67:74:a8:f4:85:f7:97:7c:d2:37:8b:94:55:1e:
a4:b0:5a:8d:be:9c:8a:2a:29:78:3e:86:65:bb:f5:
72:a4:26:39:8b:47:64:19:db:16:46:9c:ec:e6:6d:
ea:8b:66:42:6c:a6:ca:8c:32:ae:99:b9:4f:a4:39:
3e:14:28:63:89:61:78:66:cd:50:47:96:bc:8a:5a:
59:c5:32:f4:4d:04:94:1c:68:02:14:f2:96:90:81:
0f:fd:42:ac:74:ae:b0:8a:b8:d0:82:34:99:de:7b:
c0:e4:19:1e:3b:75:16:d6:72:d1:61:b4:52:6f:f3:
76:7e:3d:fc:91:4b:b3:34:ec:a4:96:0d:33:3b:9a:
72:e8:fc:9d:e2:6b:d8:b2:0d:6e:87:64:4a:c2:ad:
54:5f:cb:2d:64:be:f8:49:bf:cc:64:1f:c0:bb:7e:
12:bc:51:4c:e6:50:f7:43:56:92:9e:60:16:f0:09:
e1:cc:9e:83:78:1c:9d:91:90:d2:44:b3:02:81:92:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:6B:96:75:C2:F6:8A:94:BD:D2:18:40:08:8E:7A:56:D4:D3:C3
X509v3 Authority Key Identifier:
keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:13:fe:da:f0:81:29:d4:ea:e2:32:32:fe:52:38:b2:27:41:
ff:8a:a7:85:eb:48:5f:18:2c:be:0e:37:66:fa:e5:7d:1e:38:
86:ae:5a:1b:21:86:7b:d9:58:df:cc:1b:a1:3e:d8:a5:55:84:
c7:59:2d:3d:e3:11:a3:df:a9:64:1c:42:61:0b:30:67:fa:b1:
f9:66:0f:92:23:c7:00:2f:c8:c3:f6:15:b1:c5:8b:e3:db:ff:
c1:05:25:80:84:1d:a9:c0:b1:02:ef:97:cf:c2:0c:15:b4:42:
88:b0:66:e7:27:f4:96:34:a4:32:d0:3e:03:62:8e:81:0c:bd:
8e:a2:96:de:8b:f4:95:81:7d:83:68:6e:da:25:15:41:2c:b4:
21:68:84:ae:d0:ff:f4:52:56:2f:cd:21:aa:a1:5c:b8:09:93:
ab:06:72:59:5f:f8:14:40:35:ec:8b:61:b1:e3:a6:dd:a8:a2:
f4:8f:98:c6:d0:fd:3d:69:db:39:9d:2b:19:2e:9b:52:75:c5:
97:8e:b3:a2:68:50:c6:04:9e:bf:ee:1a:0c:39:68:fd:4b:3f:
90:a4:17:37:b1:e0:f1:61:2a:18:27:4a:43:79:0d:e4:45:3d:
46:0a:8f:b5:c5:36:12:5d:0f:16:73:8a:e7:5e:b9:d8:3f:90:
b0:19:d2:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr6EiyG/d9GQnaFRsOQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOWUyMTZlZDk3MGFkYjU5ZTliZDRhMjlkYjM1YzIyM2Q2
MmJjOTYwHhcNMjUwMTMxMTcwMDQxWhcNMjUwMjAxMTcwMDQxWjAzMTEwLwYDVQQD
EyhlNzQzNmI5Njc1YzJmNjhhOTRiZGQyMTg0MDA4OGU3YTU2ZDRkM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0vHzI+D5yaFsK1QYT4JaQHtdRuB
USXDp5FY++WpEzn6LzxmLse4IbTrytwNxvkYUJ7jGMbEtnzSful7Z3So9IX3l3zS
N4uUVR6ksFqNvpyKKil4PoZlu/VypCY5i0dkGdsWRpzs5m3qi2ZCbKbKjDKumblP
pDk+FChjiWF4Zs1QR5a8ilpZxTL0TQSUHGgCFPKWkIEP/UKsdK6wirjQgjSZ3nvA
5BkeO3UW1nLRYbRSb/N2fj38kUuzNOyklg0zO5py6Pyd4mvYsg1uh2RKwq1UX8st
ZL74Sb/MZB/Au34SvFFM5lD3Q1aSnmAW8AnhzJ6DeBydkZDSRLMCgZKpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdDa5Z1wvaKlL3SGEAIjnpW1NPDMB8GA1UdIwQY
MBaAFJyeIW7ZcK21npvUop2zXCI9YryWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbko0aGJ0bHdyYldlbTlTaW5iTmNJajFpdkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNjNmMjgtZTAyOS00NmM4LTgxNWIt
ZWEyNmM1NjQ0NjQwLzEvbko0aGJ0bHdyYldlbTlTaW5iTmNJajFpdkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNjNmMjgtZTAyOS00NmM4LTgxNWItZWEyNmM1NjQ0NjQw
LzEvbko0aGJ0bHdyYldlbTlTaW5iTmNJajFpdkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBP+2vCB
KdTq4jIy/lI4sidB/4qnhetIXxgsvg43ZvrlfR44hq5aGyGGe9lY38wboT7YpVWE
x1ktPeMRo9+pZBxCYQswZ/qx+WYPkiPHAC/Iw/YVscWL49v/wQUlgIQdqcCxAu+X
z8IMFbRCiLBm5yf0ljSkMtA+A2KOgQy9jqKW3ov0lYF9g2hu2iUVQSy0IWiErtD/
9FJWL80hqqFcuAmTqwZyWV/4FEA17IthseOm3aii9I+YxtD9PWnbOZ0rGS6bUnXF
l46zomhQxgSev+4aDDlo/Us/kKQXN7Hg8WEqGCdKQ3kN5EU9RgqPtcU2El0PFnOK
51652D+QsBnSvg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client