Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: AJIlsVhqAg71DE3B6sLzN5kB2A9AFVFPECl8tBqukJs=
Subject key identifier: E0:15:03:92:EC:4B:05:0D:94:93:67:AF:99:09:C2:42:01:31:3B:16
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0194BBCE95489922137C02BEA70CBEA571FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0A6B
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: Z/wiavA/GTQ2oexkL8YnqEuMTnam6SwXfoFw2JQE+RQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:48:99:22:13:7c:02:be:a7:0c:be:a5:71:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=e0150392ec4b050d949367af9909c24201313b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:cf:6f:d5:17:80:26:ae:34:11:bf:55:3d:
d5:18:73:f6:31:6f:77:17:72:48:a0:26:98:6e:34:
db:0d:90:ab:b2:7f:fb:b5:d6:86:c8:55:21:d7:36:
e4:5e:c6:db:49:13:0f:d8:8d:ba:fe:93:3f:51:f8:
9d:18:32:e3:30:1b:93:dd:9c:a0:fc:46:99:0c:72:
86:d5:75:9c:01:5c:ce:e0:30:d0:a3:86:b3:33:ba:
00:0f:c8:f7:89:78:74:13:87:8f:6d:72:31:97:69:
09:60:19:b7:43:2b:65:da:ad:cb:31:25:16:0f:b5:
32:7c:76:2f:a3:54:52:3f:5a:69:83:15:01:85:05:
45:b8:9e:fa:3c:c2:40:95:a4:d1:ae:eb:58:b7:48:
6c:e2:16:0f:a8:31:1d:36:9f:8b:ef:2b:dc:99:c4:
7f:bb:b9:c1:db:06:60:2d:70:87:5e:b5:90:cd:68:
da:94:bd:c2:9c:15:5f:61:7b:1d:ca:61:45:ef:33:
28:76:f7:86:cc:9a:a8:df:a2:ed:71:d8:68:c8:b5:
b8:ba:e9:71:26:cc:c7:3a:0a:c8:f7:cd:6e:f1:51:
d7:c9:fe:91:e1:6a:98:af:ec:44:86:3d:cd:65:59:
da:1a:29:b9:be:17:b9:49:f5:99:27:a1:bb:a8:b9:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:03:92:EC:4B:05:0D:94:93:67:AF:99:09:C2:42:01:31:3B:16
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:ef:b3:6c:8b:04:49:84:c9:0c:a0:9f:7c:2d:c8:95:4b:
93:a3:7c:c4:75:75:d1:f7:de:9a:f6:08:d5:a7:77:02:0f:1b:
6c:29:53:05:6a:ec:b4:f9:5c:f1:c2:1d:7a:91:d1:e7:41:4e:
5e:99:8d:2e:64:44:11:ce:34:72:36:eb:bd:f3:e7:ec:6c:9e:
24:77:aa:3f:e9:70:91:29:ab:43:ce:42:6f:c6:f4:22:da:41:
df:58:65:34:29:e8:04:84:0d:2d:eb:d1:e1:f7:df:5b:c7:b5:
ee:33:55:0d:48:03:57:3c:76:69:41:48:8d:ee:f2:06:d7:d8:
f8:9e:7a:bc:86:07:90:f8:17:21:3b:69:63:dc:02:42:7c:87:
cd:22:8a:3f:a3:df:af:fd:b8:c1:95:26:27:7b:0a:b4:6a:16:
e4:d4:41:ef:75:dd:27:16:1f:ab:29:10:02:74:a1:a5:6e:12:
72:9f:6c:3f:07:29:a3:20:0a:07:31:11:8f:25:d2:62:ec:d4:
5f:03:5a:4c:5a:07:09:50:88:cd:5c:92:1b:e4:41:c9:7b:43:
d3:01:0e:6f:36:1b:62:b3:23:66:d0:f2:26:1a:3b:69:6f:ee:
9c:42:7d:bb:dd:91:49:a7:bc:b1:89:20:95:2e:1d:dd:3d:b7:
8d:78:1f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpVImSITfAK+pwy+pXH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1
NDdiMmYwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
EyhlMDE1MDM5MmVjNGIwNTBkOTQ5MzY3YWY5OTA5YzI0MjAxMzEzYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrrPb9UXgCauNBG/VT3VGHP2MW93
F3JIoCaYbjTbDZCrsn/7tdaGyFUh1zbkXsbbSRMP2I26/pM/UfidGDLjMBuT3Zyg
/EaZDHKG1XWcAVzO4DDQo4azM7oAD8j3iXh0E4ePbXIxl2kJYBm3Qytl2q3LMSUW
D7UyfHYvo1RSP1ppgxUBhQVFuJ76PMJAlaTRrutYt0hs4hYPqDEdNp+L7yvcmcR/
u7nB2wZgLXCHXrWQzWjalL3CnBVfYXsdymFF7zModveGzJqo36LtcdhoyLW4uulx
JszHOgrI981u8VHXyf6R4WqYr+xEhj3NZVnaGim5vhe5SfWZJ6G7qLlUOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAVA5LsSwUNlJNnr5kJwkIBMTsWMB8GA1UdIwQY
MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt
OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4
LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfTvs2yL
BEmEyQygn3wtyJVLk6N8xHV10ffemvYI1ad3Ag8bbClTBWrstPlc8cIdepHR50FO
XpmNLmREEc40cjbrvfPn7GyeJHeqP+lwkSmrQ85Cb8b0ItpB31hlNCnoBIQNLevR
4fffW8e17jNVDUgDVzx2aUFIje7yBtfY+J56vIYHkPgXITtpY9wCQnyHzSKKP6Pf
r/24wZUmJ3sKtGoW5NRB73XdJxYfqykQAnShpW4Scp9sPwcpoyAKBzERjyXSYuzU
XwNaTFoHCVCIzVySG+RByXtD0wEObzYbYrMjZtDyJho7aW/unEJ9u92RSae8sYkg
lS4d3T23jXgfvA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client