Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: 5LVczjck9HfEhCx7efcVXjFZ+bFxlxdlCd6mlTz43EA=
Subject key identifier: C7:3C:A4:0C:7E:6F:FB:77:5A:C8:57:1C:56:B6:DD:AE:06:00:20:8F
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 0194BD17646BEB4A4C82B417BA3AF20F69D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 07D7
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: k0B0U+rscsd1YgmkLZkGPthXY8WF28Jz6rlx6BRODmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:6b:eb:4a:4c:82:b4:17:ba:3a:f2:0f:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=c73ca40c7e6ffb775ac8571c56b6ddae0600208f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:5d:f5:ee:6a:13:76:f5:55:b3:07:98:63:
67:7f:ce:75:d7:44:02:0e:e0:5f:02:27:ae:2b:fd:
b8:82:3e:8e:96:15:7c:41:ef:ed:8e:c9:0e:26:25:
8c:38:0a:21:1d:bc:69:1c:0d:2d:fe:dc:18:62:e2:
39:47:82:40:78:b0:80:5f:49:f0:53:ef:c9:6a:65:
9a:99:6f:40:f2:a1:8e:1f:52:70:be:22:74:31:d1:
ff:18:23:c2:5a:28:ef:f1:70:25:e7:e3:65:91:bb:
5c:98:8d:e8:14:ff:6c:72:b5:4b:d9:c9:5a:07:d3:
1a:41:80:40:25:8a:be:ad:49:f4:7d:31:9f:bc:b7:
b7:1f:d9:03:db:d4:18:f1:32:a7:65:f8:21:7f:7d:
00:e4:3b:fa:d2:4d:2d:3e:53:9c:b1:70:e7:22:d4:
0a:db:f1:b1:06:eb:a1:35:e9:d2:f0:69:f7:c2:a4:
ed:31:89:de:83:f9:43:b7:27:f6:f8:b9:ff:a1:6d:
54:08:38:50:40:df:06:e5:42:a8:e8:23:69:2a:db:
f9:f1:e5:95:be:06:10:68:6a:89:bb:a5:fb:f4:2d:
f6:a0:b2:c7:53:54:4f:00:47:b5:fb:35:fc:1c:f4:
5a:b4:f1:64:79:0c:85:98:24:dd:fe:b9:c0:c6:2e:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:A4:0C:7E:6F:FB:77:5A:C8:57:1C:56:B6:DD:AE:06:00:20:8F
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:89:37:79:03:5c:5d:b6:c1:fb:4c:f7:c4:cf:53:a3:ce:fd:
d5:d7:03:18:e4:9e:47:dc:e3:15:48:2a:0d:5e:23:f1:2e:3f:
11:25:6c:01:e9:9f:6d:ed:3b:f4:23:34:75:fa:85:6f:1f:e4:
4b:dc:56:c1:aa:ca:bc:5b:f7:3b:c1:de:8a:e5:8a:fb:bb:65:
5b:82:56:17:5b:de:11:f6:27:8e:9e:3d:23:d4:a3:95:eb:a0:
32:ba:60:2a:4c:e2:b6:67:cd:35:40:8e:b2:26:fc:b3:57:ec:
5b:2d:c1:16:e8:d8:2f:13:98:00:e0:13:00:cf:eb:8f:d5:2a:
3f:6b:6e:84:83:88:0f:60:b7:84:dd:5c:58:2d:92:2c:d7:8e:
a2:f0:0a:9a:dc:37:ed:ff:79:fc:cd:25:cb:d8:71:49:e9:46:
f2:1c:40:46:43:d5:92:42:05:d9:38:b1:3d:e4:47:b3:39:95:
b9:2a:55:1f:64:21:0f:e1:74:94:3e:96:d3:5d:65:3a:58:0e:
d3:01:80:ba:fa:8d:62:47:b6:5c:5a:d0:d1:db:34:b6:8e:88:
d9:a0:5d:7c:c2:2c:ed:ec:8c:a0:0f:04:6b:7c:0f:a7:46:10:
f3:b0:f6:62:38:cc:79:9e:4f:8d:34:a4:1e:9d:49:dc:3a:0a:
27:73:dc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2Rr60pMgrQXujryD2nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTU1NWUxNDZiZTRhZTVmN2NjZmU1YTNjMTJkM2YyYTI1
NDNiMDUwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
EyhjNzNjYTQwYzdlNmZmYjc3NWFjODU3MWM1NmI2ZGRhZTA2MDAyMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5xd9e5qE3b1VbMHmGNnf85110QC
DuBfAieuK/24gj6OlhV8Qe/tjskOJiWMOAohHbxpHA0t/twYYuI5R4JAeLCAX0nw
U+/JamWamW9A8qGOH1JwviJ0MdH/GCPCWijv8XAl5+NlkbtcmI3oFP9scrVL2cla
B9MaQYBAJYq+rUn0fTGfvLe3H9kD29QY8TKnZfghf30A5Dv60k0tPlOcsXDnItQK
2/GxBuuhNenS8Gn3wqTtMYneg/lDtyf2+Ln/oW1UCDhQQN8G5UKo6CNpKtv58eWV
vgYQaGqJu6X79C32oLLHU1RPAEe1+zX8HPRatPFkeQyFmCTd/rnAxi6E6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc8pAx+b/t3WshXHFa23a4GACCPMB8GA1UdIwQY
MBaAFDWlVeFGvkrl98z+WjwS0/KiVDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgt
MDUxY2QzMGNiY2YxLzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgtMDUxY2QzMGNiY2Yx
LzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYk3eQNc
XbbB+0z3xM9To8791dcDGOSeR9zjFUgqDV4j8S4/ESVsAemfbe079CM0dfqFbx/k
S9xWwarKvFv3O8HeiuWK+7tlW4JWF1veEfYnjp49I9SjleugMrpgKkzitmfNNUCO
sib8s1fsWy3BFujYLxOYAOATAM/rj9UqP2tuhIOID2C3hN1cWC2SLNeOovAKmtw3
7f95/M0ly9hxSelG8hxARkPVkkIF2TixPeRHszmVuSpVH2QhD+F0lD6W011lOlgO
0wGAuvqNYke2XFrQ0ds0to6I2aBdfMIs7eyMoA8Ea3wPp0YQ87D2YjjMeZ5PjTSk
Hp1J3DoKJ3PcNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:32 2025 by rpki-client