Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: M0/RatuTwtzH+GWZSJMbynJqY8MJ0V4OeWH2APHRjT4=
Subject key identifier: 00:A4:8D:8B:0C:14:79:2D:B4:92:37:8A:5E:48:93:13:6F:00:05:C3
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 0194BCE0A6794AD9A9A11822E329C8C1DFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 1159
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: FoqAk7O9I148YmFDMaXJbKIWjVSwqI0Vfc+HKEWkWhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a6:79:4a:d9:a9:a1:18:22:e3:29:c8:c1:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=00a48d8b0c14792db492378a5e4893136f0005c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:fa:0b:9b:ea:d3:32:0b:a4:1c:ab:0d:c6:
df:c9:dd:00:1c:67:79:a9:c1:bb:aa:30:cb:d7:19:
53:31:44:89:36:87:48:36:5a:e2:6e:de:d5:4e:54:
74:1b:54:ec:3d:31:e0:da:0e:45:c4:1f:9b:e7:17:
c1:1e:24:2d:c4:92:8b:9f:e0:5f:a4:a6:4a:47:95:
6c:75:27:f8:59:f8:bc:fc:43:48:39:83:98:4e:98:
2d:48:45:d5:75:47:35:97:44:2d:e7:99:0f:e0:11:
6a:df:48:2b:b8:99:60:5b:83:ae:23:88:a1:be:71:
d5:9f:60:0b:a4:94:84:ac:26:d5:a4:94:c0:f5:b5:
d1:72:43:94:19:02:f0:97:3e:61:04:1e:d4:6c:04:
ec:6f:6d:47:14:18:9a:06:9f:09:43:bf:02:d2:f6:
83:6d:79:48:08:83:25:1c:88:02:72:b2:8b:d3:22:
48:b1:37:35:e0:3b:8c:47:2a:de:66:ad:7d:43:b4:
9e:fa:d2:70:d4:14:b5:a5:e4:6a:bb:6f:02:43:6f:
fe:50:73:4a:3b:ad:09:4e:f3:4e:8e:42:60:bb:7e:
34:d1:8a:24:ad:69:66:27:54:93:75:46:2a:7f:68:
41:df:3d:a1:ba:a7:f0:a7:9c:14:e7:88:35:78:36:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:8D:8B:0C:14:79:2D:B4:92:37:8A:5E:48:93:13:6F:00:05:C3
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:c9:68:92:7f:08:f7:89:53:37:63:ad:0a:1f:ed:9a:7d:
2d:3b:82:43:4f:42:4e:e6:7e:f0:a0:a5:a6:41:77:69:57:84:
04:a8:84:a6:f6:0d:21:2c:93:3d:19:2f:9c:5d:74:10:fe:7a:
a0:d1:1b:68:95:2b:ce:f6:7f:d2:2f:3d:7d:99:0e:3e:09:96:
ed:6a:00:c4:b4:2e:ec:1d:6c:03:15:7d:3b:6b:65:9a:5b:11:
6c:83:25:95:8b:34:89:d3:16:ff:d2:7b:09:1a:be:7f:8d:5d:
0b:7c:e0:ef:b8:f9:16:4f:ed:fd:a8:c6:97:28:21:aa:67:23:
ed:d3:82:b7:73:69:3f:7d:01:5e:06:ef:af:00:90:38:38:95:
09:de:ba:14:c4:94:b8:ec:cd:64:79:b8:d9:9d:09:bc:61:62:
6a:d9:67:2d:ae:a9:ae:72:54:9c:34:1f:1b:cc:51:a0:04:cc:
ee:69:b7:d1:08:28:b1:67:b7:f5:17:3f:93:c9:c1:b2:51:10:
df:33:fb:3a:cd:a8:7d:92:c6:70:a2:db:b0:1a:5b:31:ea:eb:
17:b2:a5:84:f7:0a:20:ef:ec:eb:28:54:7a:64:4d:d9:02:77:
32:0e:0e:f2:9a:4d:f7:01:69:4d:f5:b1:de:97:52:94:55:6b:
89:22:29:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KZ5StmpoRgi4ynIwd/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzQzZjA0YzI3ZDE1NDU1YWFhNWNkYWE0NTY5ZDM3YTg4
OTUwZDcwHhcNMjUwMTMxMTUwMDI2WhcNMjUwMjAxMTUwMDI2WjAzMTEwLwYDVQQD
EygwMGE0OGQ4YjBjMTQ3OTJkYjQ5MjM3OGE1ZTQ4OTMxMzZmMDAwNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rb6C5vq0zILpByrDcbfyd0AHGd5
qcG7qjDL1xlTMUSJNodINlribt7VTlR0G1TsPTHg2g5FxB+b5xfBHiQtxJKLn+Bf
pKZKR5VsdSf4Wfi8/ENIOYOYTpgtSEXVdUc1l0Qt55kP4BFq30gruJlgW4OuI4ih
vnHVn2ALpJSErCbVpJTA9bXRckOUGQLwlz5hBB7UbATsb21HFBiaBp8JQ78C0vaD
bXlICIMlHIgCcrKL0yJIsTc14DuMRyreZq19Q7Se+tJw1BS1peRqu28CQ2/+UHNK
O60JTvNOjkJgu3400YokrWlmJ1STdUYqf2hB3z2huqfwp5wU54g1eDZ3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACkjYsMFHkttJI3il5IkxNvAAXDMB8GA1UdIwQY
MBaAFJ40PwTCfRVFWqpc2qRWnTeoiVDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDkt
MzExOWQzMzMyMjgyLzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDktMzExOWQzMzMyMjgy
LzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpjJaJJ/
CPeJUzdjrQof7Zp9LTuCQ09CTuZ+8KClpkF3aVeEBKiEpvYNISyTPRkvnF10EP56
oNEbaJUrzvZ/0i89fZkOPgmW7WoAxLQu7B1sAxV9O2tlmlsRbIMllYs0idMW/9J7
CRq+f41dC3zg77j5Fk/t/ajGlyghqmcj7dOCt3NpP30BXgbvrwCQODiVCd66FMSU
uOzNZHm42Z0JvGFiatlnLa6prnJUnDQfG8xRoATM7mm30QgosWe39Rc/k8nBslEQ
3zP7Os2ofZLGcKLbsBpbMerrF7KlhPcKIO/s6yhUemRN2QJ3Mg4O8ppN9wFpTfWx
3pdSlFVriSIpYg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:00 2025 by rpki-client