Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: fWrjuRy1szkguj/ihA2Ekb6+u/HOTS5TN73IFNpOmdI=
Subject key identifier: 5D:3A:10:C1:32:B0:FC:E7:03:D7:39:04:4F:BC:E2:F6:00:D1:9A:34
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 0194BD17CAF2A23D7321DF0933C73B2B076F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: kXO8pPvb-hoKLSUaH08K93t7DHU.roa (hash: mEKASbKS/omjY7FFNOE+1bv+eOkizDd5ZmtCBIdcrpw=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: 27d9zwbFSRRS3tJ3bgNOmxfhGHvj0ROqlLGuuzYIrYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:f2:a2:3d:73:21:df:09:33:c7:3b:2b:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=5d3a10c132b0fce703d739044fbce2f600d19a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:68:e5:ca:38:34:6f:41:f4:d0:e6:84:8e:
77:c0:13:93:b4:82:8d:67:33:15:d3:66:9f:89:63:
e5:af:97:6a:aa:bd:28:48:4b:4c:9b:9a:92:d7:a2:
ae:65:39:52:2b:16:e2:4a:af:46:62:70:e5:49:f6:
2c:da:08:f8:91:26:d3:fb:32:35:6a:02:5d:0b:7f:
81:6f:86:d8:8f:4a:88:04:44:e5:f7:da:28:c6:57:
ae:1f:7d:f0:84:25:47:e8:f5:d3:99:df:da:d4:f2:
7b:96:07:48:1f:51:b6:4c:c8:a8:32:30:0b:02:09:
1b:b8:1c:67:ae:25:45:56:f8:f3:5d:96:d0:97:23:
0d:92:d3:cf:c7:56:76:1e:46:b7:7d:cb:32:39:60:
92:92:06:6a:70:c6:b0:46:c4:7d:6f:7e:b0:99:f9:
2a:81:34:9d:d2:e4:37:3a:76:1e:7a:38:0c:e3:26:
41:57:de:55:fc:6b:12:90:f0:56:bf:ce:43:ab:79:
17:6e:db:af:e8:f9:c0:43:3e:cb:ef:29:db:3d:71:
62:9a:82:3b:46:5e:b9:56:91:7d:e6:0a:4e:47:c4:
44:e0:74:3c:be:ae:f4:c6:53:a9:91:9a:db:00:bd:
b8:7d:d8:cd:6b:aa:83:e3:61:07:fb:d4:d1:e7:c9:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:10:C1:32:B0:FC:E7:03:D7:39:04:4F:BC:E2:F6:00:D1:9A:34
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:3b:45:cd:5a:97:9b:57:43:ce:60:ff:b7:72:5b:61:9f:
ab:38:f8:d3:67:e6:c9:1c:d0:c3:11:a4:0f:b5:e2:f1:ed:78:
5c:41:9a:9d:2a:7f:17:30:64:7f:e4:f6:f4:bd:7e:b3:bc:85:
54:4f:97:9a:37:33:88:9e:fb:01:66:9d:61:bb:4d:27:3d:5f:
2e:e6:0d:4c:23:60:92:23:ac:b6:bd:78:2d:6a:5e:b2:b5:f7:
09:39:08:5b:8b:b3:2c:89:c1:64:79:bc:2f:a4:7b:9d:26:aa:
1d:fa:08:6e:55:4f:7e:82:1c:c3:7d:09:52:45:6f:a2:fe:ef:
6a:97:68:29:ce:97:1c:47:27:7c:cf:47:74:de:f2:ca:5a:cf:
c1:ff:d0:ca:2c:ac:4a:66:d0:69:65:5b:ad:71:25:ec:24:a8:
e5:b9:ca:71:1f:6e:9b:9f:64:97:41:5f:7a:55:c8:5d:4a:13:
8a:4a:3e:80:71:9b:cb:24:1a:50:b0:ae:a2:4d:ca:54:32:2d:
46:e2:b8:11:92:77:ff:29:a4:6f:a7:8f:63:14:55:3b:d8:96:
96:8d:08:0c:5e:1c:4b:f3:30:9d:a7:fd:24:4e:b2:23:fc:4b:
ea:96:ea:48:a8:77:f3:0e:ee:26:a9:a4:f0:18:a2:c7:6e:5c:
a2:54:1c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8ryoj1zId8JM8c7KwdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
Eyg1ZDNhMTBjMTMyYjBmY2U3MDNkNzM5MDQ0ZmJjZTJmNjAwZDE5YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ9o5co4NG9B9NDmhI53wBOTtIKN
ZzMV02afiWPlr5dqqr0oSEtMm5qS16KuZTlSKxbiSq9GYnDlSfYs2gj4kSbT+zI1
agJdC3+Bb4bYj0qIBETl99ooxleuH33whCVH6PXTmd/a1PJ7lgdIH1G2TMioMjAL
AgkbuBxnriVFVvjzXZbQlyMNktPPx1Z2Hka3fcsyOWCSkgZqcMawRsR9b36wmfkq
gTSd0uQ3OnYeejgM4yZBV95V/GsSkPBWv85Dq3kXbtuv6PnAQz7L7ynbPXFimoI7
Rl65VpF95gpOR8RE4HQ8vq70xlOpkZrbAL24fdjNa6qD42EH+9TR58l6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF06EMEysPznA9c5BE+84vYA0Zo0MB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWE7Rc1a
l5tXQ85g/7dyW2Gfqzj402fmyRzQwxGkD7Xi8e14XEGanSp/FzBkf+T29L1+s7yF
VE+XmjcziJ77AWadYbtNJz1fLuYNTCNgkiOstr14LWpesrX3CTkIW4uzLInBZHm8
L6R7nSaqHfoIblVPfoIcw30JUkVvov7vapdoKc6XHEcnfM9HdN7yylrPwf/Qyiys
SmbQaWVbrXEl7CSo5bnKcR9um59kl0FfelXIXUoTiko+gHGbyyQaULCuok3KVDIt
RuK4EZJ3/ymkb6ePYxRVO9iWlo0IDF4cS/Mwnaf9JE6yI/xL6pbqSKh38w7uJqmk
8Biix25colQcWw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:55 2025 by rpki-client