Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: n7d2ExC6Ds1eGs4JEJ1qxGJo5LTLasVkV4IFrh9FMDA=
Subject key identifier: 5C:84:DD:BE:8D:0D:B7:EC:D9:5D:B6:21:DA:92:B9:F4:2F:1E:3F:83
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 0194BBCEA6B5D77EEF9D18E034D2FD3FEDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: kFZT0ssCKIFbrPNVd/pfaCPMxG4ubwFfx7eZ6jTIp6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a6:b5:d7:7e:ef:9d:18:e0:34:d2:fd:3f:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=5c84ddbe8d0db7ecd95db621da92b9f42f1e3f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:d0:46:b6:a6:82:07:21:bf:49:c8:fe:87:
46:22:ab:cb:c4:33:6d:6a:cf:53:1b:38:cf:e8:de:
1f:6d:c2:51:0f:d0:7b:45:c0:05:7d:72:80:36:a3:
3d:6a:0a:23:53:48:66:c7:a8:23:ca:d3:a5:13:7c:
ee:01:71:c6:5f:b6:44:d2:de:a9:4e:7f:5d:4a:ba:
ca:62:eb:3c:89:3d:d4:0e:82:46:38:ba:de:af:99:
1d:39:53:ae:da:92:45:91:45:bb:3a:ff:a3:77:52:
22:ae:23:76:b0:e7:ac:a9:1d:c2:b0:86:2f:10:97:
9b:ea:4a:a3:cd:16:f4:a4:db:5c:48:17:13:e2:56:
f2:93:42:88:b1:d2:cb:2a:d1:14:7b:64:37:2b:1e:
b1:9a:03:29:7e:b8:8d:dd:19:19:a4:6c:2a:72:71:
0a:1d:1b:73:bf:70:32:12:9c:4d:04:56:59:66:16:
ce:52:4b:ce:b4:a6:9b:e4:49:93:cc:07:fb:c9:cb:
68:37:0b:ef:a1:ea:5d:cf:ef:3b:c7:a7:93:2a:dd:
7f:43:e0:86:20:22:3c:ec:5b:33:91:d2:3b:93:20:
91:ad:91:d1:a3:ea:98:f4:2d:8e:44:02:ac:30:bf:
07:fd:c8:7e:25:17:4e:c4:fb:f7:df:88:6b:ca:0a:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:DD:BE:8D:0D:B7:EC:D9:5D:B6:21:DA:92:B9:F4:2F:1E:3F:83
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e6:ad:6f:aa:e1:47:fd:f8:74:23:ef:d5:9f:39:53:e1:6d:
0a:2c:45:ad:c4:32:ce:6d:93:51:e1:df:4b:42:49:31:a6:2e:
ac:c4:e1:99:c5:0e:4a:1d:05:1e:0d:42:5e:f9:60:b6:63:4f:
40:5b:e7:4f:eb:a5:65:0d:c4:63:42:5d:30:10:c4:cc:95:9d:
e4:b1:1b:08:d0:66:61:1f:21:8c:44:98:68:ab:e8:f0:c4:c0:
b4:85:5b:49:9c:4e:55:59:ba:34:3a:9a:e9:8a:31:e5:f6:a4:
32:57:66:f3:c0:74:f0:fe:65:95:52:bd:d1:0c:28:7e:ee:39:
63:bc:3a:b0:d9:90:2f:f1:50:65:74:14:d7:bd:fe:97:15:c5:
52:f6:e2:d2:a3:0b:49:a4:84:b8:c6:08:10:82:4c:64:33:5e:
74:1e:1c:32:25:79:62:24:6f:d9:26:a7:55:c4:23:ee:81:d9:
8d:3d:bf:32:46:ca:40:1e:81:63:3e:d1:46:d2:1f:5a:d8:dd:
eb:9c:e9:51:6e:84:5d:09:6a:fa:5f:99:0d:b1:8f:42:cb:59:
a5:24:85:41:7e:69:c9:2e:1f:0d:79:cd:14:a4:bf:c5:0e:de:
f9:c2:ec:6a:d7:1f:0c:2e:0f:6f:f3:0a:a8:2c:0b:34:f8:b6:
7f:33:23:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqa1137vnRjgNNL9P+3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0
MDFhOWYwHhcNMjUwMTMxMTAwMTA5WhcNMjUwMjAxMTAwMTA5WjAzMTEwLwYDVQQD
Eyg1Yzg0ZGRiZThkMGRiN2VjZDk1ZGI2MjFkYTkyYjlmNDJmMWUzZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5THQRramggchv0nI/odGIqvLxDNt
as9TGzjP6N4fbcJRD9B7RcAFfXKANqM9agojU0hmx6gjytOlE3zuAXHGX7ZE0t6p
Tn9dSrrKYus8iT3UDoJGOLrer5kdOVOu2pJFkUW7Ov+jd1IiriN2sOesqR3CsIYv
EJeb6kqjzRb0pNtcSBcT4lbyk0KIsdLLKtEUe2Q3Kx6xmgMpfriN3RkZpGwqcnEK
HRtzv3AyEpxNBFZZZhbOUkvOtKab5EmTzAf7yctoNwvvoepdz+87x6eTKt1/Q+CG
ICI87FszkdI7kyCRrZHRo+qY9C2ORAKsML8H/ch+JRdOxPv334hrygq14wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyE3b6NDbfs2V22IdqSufQvHj+DMB8GA1UdIwQY
MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt
ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh
LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOatb6rh
R/34dCPv1Z85U+FtCixFrcQyzm2TUeHfS0JJMaYurMThmcUOSh0FHg1CXvlgtmNP
QFvnT+ulZQ3EY0JdMBDEzJWd5LEbCNBmYR8hjESYaKvo8MTAtIVbSZxOVVm6NDqa
6Yox5fakMldm88B08P5llVK90Qwofu45Y7w6sNmQL/FQZXQU173+lxXFUvbi0qML
SaSEuMYIEIJMZDNedB4cMiV5YiRv2SanVcQj7oHZjT2/MkbKQB6BYz7RRtIfWtjd
65zpUW6EXQlq+l+ZDbGPQstZpSSFQX5pyS4fDXnNFKS/xQ7e+cLsatcfDC4Pb/MK
qCwLNPi2fzMjZw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:08 2025 by rpki-client