Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: qHXalKNeQYoM8YiTGj6lXSsLAIq7Dmq0d3CnXCyEqi0=
Subject key identifier: 32:34:D3:3C:77:3F:98:FD:CA:89:EC:3F:0B:6D:34:47:B0:AB:EF:D2
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0194BBCEB38C2D365F4699929C1480BDBF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 143D
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: gFDYu-uhEM1jBAo3hw85Wh4IxBw.roa (hash: 7u75Gy2BAJ4DBJsB/vM91L7VubiXctkI6OGQbCkbAws=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: Tbbyg3qMTG3c2CkFC+lw+sXNAO2KDkKAqRQox8Or0bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b3:8c:2d:36:5f:46:99:92:9c:14:80:bd:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=3234d33c773f98fdca89ec3f0b6d3447b0abefd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:a6:91:98:3e:90:e9:64:61:54:5c:b5:1d:
65:a6:2c:6c:88:59:75:dd:25:17:b6:1d:95:17:cb:
d4:30:15:56:38:b6:61:f3:78:d6:77:e9:ed:75:3b:
31:b5:1c:a1:c3:3a:31:fb:64:d3:6f:c2:00:af:b9:
e2:90:22:4e:c6:52:61:99:23:75:b2:fe:44:83:70:
64:aa:e3:ff:c6:19:6b:06:b5:b7:8e:88:cc:5c:ee:
d6:ad:c8:dc:09:b0:cb:8b:55:98:0b:6f:43:21:05:
47:96:cd:ae:bd:b8:ba:93:ad:99:45:92:09:73:23:
60:f7:06:b0:3c:f6:41:44:d6:c4:47:5e:87:51:1f:
3e:e1:cb:5c:2e:c4:c8:76:c4:d6:37:bc:49:4c:62:
27:37:d3:66:92:e6:20:af:5b:5f:a7:06:c2:3d:45:
0d:68:02:f5:e6:70:30:04:7f:c4:2a:4a:47:f1:13:
43:2c:58:b0:cf:69:90:05:96:e5:d9:a4:89:c5:5f:
5e:a7:e4:c0:10:37:ba:17:0a:ae:01:a0:58:0e:61:
1b:aa:f6:58:69:05:c4:9a:c9:44:e3:20:71:bf:25:
19:23:44:5a:aa:39:86:5e:63:88:26:5e:a0:6f:11:
a2:56:09:34:fd:d3:90:32:db:39:ab:f0:41:48:bc:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:D3:3C:77:3F:98:FD:CA:89:EC:3F:0B:6D:34:47:B0:AB:EF:D2
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:12:12:02:5f:19:34:89:52:70:cc:02:8f:8c:5a:fa:c8:e4:
05:0a:2f:5c:e2:39:4b:c1:b0:8e:d5:13:0b:af:d4:fd:36:4c:
65:f8:34:3c:72:75:41:90:8f:04:f2:3a:63:0b:d3:32:09:84:
2c:f5:e8:8a:52:45:ae:46:aa:0c:8c:29:58:6e:c9:53:1d:1a:
29:04:57:e0:7e:70:5e:4e:f3:55:23:75:78:0f:b8:97:73:fd:
ac:11:cc:27:12:41:6f:ef:f3:f4:42:63:02:c0:2c:df:da:17:
8c:18:be:af:e3:eb:fb:ab:18:dc:bc:6d:78:4d:47:2e:82:85:
54:60:37:a5:b1:96:9f:b8:37:88:6b:e5:4c:be:d9:e9:5f:36:
8e:7e:9b:ae:32:36:e7:3e:c4:6c:d7:c0:d2:a8:a5:8c:43:e2:
88:cb:41:ce:5f:74:1b:a4:5d:e2:7b:2f:76:99:04:63:f0:ac:
6c:b2:f6:bf:e7:4d:61:ac:21:1e:0d:7b:4b:ba:3c:2b:5b:a3:
76:0b:26:e1:ad:3e:9a:fb:ba:97:0a:d3:b4:3e:7c:77:1f:18:
0c:f6:00:8a:fd:3e:d5:1a:37:16:7c:94:28:23:fb:40:26:6c:
aa:64:28:77:a2:ae:0b:da:8f:a3:8f:53:8e:8b:7b:a9:59:ae:
e0:ae:2a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrOMLTZfRpmSnBSAvb+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjUwMTMxMTAwMTEzWhcNMjUwMjAxMTAwMTEzWjAzMTEwLwYDVQQD
EygzMjM0ZDMzYzc3M2Y5OGZkY2E4OWVjM2YwYjZkMzQ0N2IwYWJlZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmqmkZg+kOlkYVRctR1lpixsiFl1
3SUXth2VF8vUMBVWOLZh83jWd+ntdTsxtRyhwzox+2TTb8IAr7nikCJOxlJhmSN1
sv5Eg3BkquP/xhlrBrW3jojMXO7WrcjcCbDLi1WYC29DIQVHls2uvbi6k62ZRZIJ
cyNg9wawPPZBRNbER16HUR8+4ctcLsTIdsTWN7xJTGInN9NmkuYgr1tfpwbCPUUN
aAL15nAwBH/EKkpH8RNDLFiwz2mQBZbl2aSJxV9ep+TAEDe6FwquAaBYDmEbqvZY
aQXEmslE4yBxvyUZI0RaqjmGXmOIJl6gbxGiVgk0/dOQMts5q/BBSLzQuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI00zx3P5j9yonsPwttNEewq+/SMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5RISAl8Z
NIlScMwCj4xa+sjkBQovXOI5S8GwjtUTC6/U/TZMZfg0PHJ1QZCPBPI6YwvTMgmE
LPXoilJFrkaqDIwpWG7JUx0aKQRX4H5wXk7zVSN1eA+4l3P9rBHMJxJBb+/z9EJj
AsAs39oXjBi+r+Pr+6sY3LxteE1HLoKFVGA3pbGWn7g3iGvlTL7Z6V82jn6brjI2
5z7EbNfA0qiljEPiiMtBzl90G6Rd4nsvdpkEY/CsbLL2v+dNYawhHg17S7o8K1uj
dgsm4a0+mvu6lwrTtD58dx8YDPYAiv0+1Ro3FnyUKCP7QCZsqmQod6KuC9qPo49T
jot7qVmu4K4qSA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:50 2025 by rpki-client