Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: kBBD1asnfKIWuFRorZJhMnuK1ItyMmp3KHng94VHdlM=
Subject key identifier: 11:10:34:94:BC:EC:17:5F:1B:98:DD:BD:47:A0:DE:13:3A:50:F2:E6
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 0194BD17C865A321399FBF97F13F0F12489C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: SV7Qhb6zwDyvxr9FCn9NNj27/y0eC/Vq2rZEW3Z9fMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c8:65:a3:21:39:9f:bf:97:f1:3f:0f:12:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=11103494bcec175f1b98ddbd47a0de133a50f2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:27:94:4f:f9:0c:fe:2b:05:0f:f5:ca:df:
e2:d1:7b:47:b4:e6:4d:e7:a9:bd:1d:47:fb:08:a7:
25:f0:92:50:1f:a2:b3:55:69:86:08:9d:4f:44:b2:
12:1e:95:3b:bd:7a:69:9a:b2:14:d4:3c:a6:e6:fe:
64:11:d1:a2:0c:e6:2f:d9:8f:89:8f:17:5f:44:bf:
7d:30:68:cd:30:31:d7:8a:d9:23:eb:50:89:fb:6f:
6f:38:9c:a6:b6:70:b1:26:a6:95:32:f1:22:42:9f:
60:2c:c5:38:fe:e5:c9:c1:31:5b:85:7f:23:2d:4a:
e3:3c:a0:56:ec:83:4b:84:d5:c9:c0:a2:66:86:c3:
d2:63:43:cf:70:10:a0:58:28:cd:4f:72:8b:7d:f5:
25:21:0c:c6:53:bf:c8:86:62:5d:46:63:85:f1:c4:
49:10:23:19:bd:92:41:80:20:2b:f0:a2:54:48:a3:
12:6c:db:89:61:7c:76:43:17:33:61:05:19:f6:94:
5d:40:fd:06:3e:a6:5b:50:41:71:83:5b:9b:90:90:
be:70:ba:9d:1d:c8:92:04:a4:25:e3:ad:b3:60:fa:
28:39:c7:b0:3f:60:da:5b:0a:bd:4b:d8:f0:96:18:
11:da:9f:a2:a2:0f:c1:e5:a4:47:5d:4e:42:5f:fd:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:34:94:BC:EC:17:5F:1B:98:DD:BD:47:A0:DE:13:3A:50:F2:E6
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:24:06:38:39:56:e4:86:3a:c4:28:18:4e:7d:3b:0f:af:
2d:f6:3a:0d:2d:d2:9f:6d:9c:88:38:a6:ce:e3:bc:b7:e2:5a:
4d:69:53:4c:6a:1b:33:d6:0c:0e:06:6a:1b:8e:68:e2:84:40:
1f:b7:5b:9a:c1:12:92:21:2f:4a:1f:2e:6d:0d:94:a4:10:bb:
79:b2:4e:54:fe:9b:46:c8:8f:0c:8c:d4:e4:09:9b:08:7a:ff:
3f:87:92:ea:fa:64:08:6c:12:21:48:b3:d8:8b:42:7b:e0:56:
64:fc:8b:4d:b9:f7:48:0e:f0:ef:72:9d:7d:79:ed:09:63:f1:
d2:3c:74:aa:12:22:5a:cb:d6:c0:7d:46:9a:4d:79:8a:2c:b5:
44:76:07:78:18:ef:3c:0b:c9:f2:a9:53:7e:60:ef:15:7d:b2:
7c:04:93:09:13:95:18:ea:06:d0:16:ec:9c:d2:3e:e9:97:b9:
29:d4:56:81:2b:60:0f:57:7d:08:3e:71:45:d6:a8:dd:3c:af:
ee:80:43:43:2d:44:e9:ac:bf:7e:89:69:f7:92:02:d1:76:c2:
3d:bf:85:10:ad:47:d6:4e:6c:9d:34:c7:c6:e2:af:3d:dd:21:
3d:d1:ab:42:5a:26:82:0a:ae:a6:f5:2a:d8:8f:18:6b:d5:84:
1e:29:04:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8hloyE5n7+X8T8PEkicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
EygxMTEwMzQ5NGJjZWMxNzVmMWI5OGRkYmQ0N2EwZGUxMzNhNTBmMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIcnlE/5DP4rBQ/1yt/i0XtHtOZN
56m9HUf7CKcl8JJQH6KzVWmGCJ1PRLISHpU7vXppmrIU1Dym5v5kEdGiDOYv2Y+J
jxdfRL99MGjNMDHXitkj61CJ+29vOJymtnCxJqaVMvEiQp9gLMU4/uXJwTFbhX8j
LUrjPKBW7INLhNXJwKJmhsPSY0PPcBCgWCjNT3KLffUlIQzGU7/IhmJdRmOF8cRJ
ECMZvZJBgCAr8KJUSKMSbNuJYXx2QxczYQUZ9pRdQP0GPqZbUEFxg1ubkJC+cLqd
HciSBKQl462zYPooOcewP2DaWwq9S9jwlhgR2p+iog/B5aRHXU5CX/2CLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEQNJS87BdfG5jdvUeg3hM6UPLmMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaskBjg5
VuSGOsQoGE59Ow+vLfY6DS3Sn22ciDimzuO8t+JaTWlTTGobM9YMDgZqG45o4oRA
H7dbmsESkiEvSh8ubQ2UpBC7ebJOVP6bRsiPDIzU5AmbCHr/P4eS6vpkCGwSIUiz
2ItCe+BWZPyLTbn3SA7w73KdfXntCWPx0jx0qhIiWsvWwH1Gmk15iiy1RHYHeBjv
PAvJ8qlTfmDvFX2yfASTCROVGOoG0BbsnNI+6Ze5KdRWgStgD1d9CD5xRdao3Tyv
7oBDQy1E6ay/folp95IC0XbCPb+FEK1H1k5snTTHxuKvPd0hPdGrQlomggqupvUq
2I8Ya9WEHikE+w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client