Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: ozjMn6VY6c9m1gTvaGUIBv+hnmDpq1yIjL3dGcbSsfY=
Subject key identifier: A6:3F:D7:54:FF:87:AB:7E:6F:63:47:F6:FC:97:09:BB:02:ED:6E:00
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 0194BC72CE27EC251AE994EB1E7E16041100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0A31
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: 20OY6PPMC3+deExLaPO6vB28qq4xWI3J2U4Q3LoF+AY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ce:27:ec:25:1a:e9:94:eb:1e:7e:16:04:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=a63fd754ff87ab7e6f6347f6fc9709bb02ed6e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:6c:c1:cb:54:6d:cc:cb:05:bb:62:10:03:
7e:98:f7:10:e8:b1:b9:b1:b8:35:5f:eb:18:a0:8d:
d4:50:da:5a:63:25:3e:7f:58:f1:7c:3b:9b:ad:70:
9d:73:b4:81:76:03:cf:38:e6:fd:51:cd:b7:b1:16:
d2:fa:cb:2c:44:1c:46:12:8b:ab:25:e7:b4:2a:41:
d8:7c:03:66:a2:a0:b7:4f:a4:96:73:64:7d:94:9f:
42:db:3a:37:64:ee:27:0b:54:67:09:f9:3f:ff:87:
a4:e5:4b:5d:14:82:17:f1:4c:bb:96:8a:b4:fe:e8:
20:d5:45:c5:95:1a:d9:2d:ef:f8:8b:99:1c:66:1c:
85:20:31:e8:a7:a9:f3:aa:ab:d3:b8:07:26:9a:ae:
e4:4d:33:8c:7b:fc:ac:f3:92:fb:ad:f1:4c:58:46:
f3:e3:12:fb:09:c5:0b:67:a2:78:40:fc:3a:f6:a3:
94:84:fc:08:4c:18:86:23:ef:06:24:0f:e9:97:91:
34:f8:7f:9b:34:7d:ff:67:5f:73:d9:8d:d5:69:ba:
7b:9f:75:2a:40:87:16:1f:ab:fe:fa:b6:07:e1:3d:
d3:8f:46:5a:a7:a5:28:58:7c:4a:c9:5a:10:23:00:
04:26:68:53:28:37:b1:ee:f9:71:f6:7f:1d:e6:06:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:D7:54:FF:87:AB:7E:6F:63:47:F6:FC:97:09:BB:02:ED:6E:00
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6f:69:af:21:2e:f4:81:a0:d3:da:c0:27:9b:35:ec:d6:e3:
56:92:c8:16:39:0e:71:f6:90:86:56:3b:8f:79:97:c7:02:b4:
82:15:c3:d0:be:ba:51:c1:64:b1:76:72:7b:78:05:6a:37:4a:
6f:9a:d5:fb:e8:08:a2:63:c3:04:18:1d:f6:20:51:25:a5:8d:
5a:06:23:11:75:38:38:9c:63:de:68:75:00:27:42:92:a4:1a:
3a:7d:f6:04:9f:6e:4d:17:03:4a:76:9a:74:15:7f:c9:bc:dd:
69:7e:43:cb:71:5f:7d:b7:b8:91:50:92:e0:f6:e9:b8:aa:46:
4c:d3:37:8d:ff:20:52:0e:ab:ba:01:e4:39:be:dc:67:4f:0f:
60:1a:61:25:f9:76:8c:39:12:b4:e9:8e:f9:b5:d3:af:41:b6:
2c:e5:22:3b:9e:86:cc:a9:c5:7c:cd:42:06:b6:8c:7d:81:e9:
27:92:dc:fd:a8:09:ab:d8:8f:d5:ba:7e:f7:ae:a0:71:54:b3:
9e:da:85:60:c6:1c:a7:64:06:23:42:cf:74:56:5e:bf:4a:00:
ac:c3:8c:54:9b:fa:dc:56:15:5f:0c:84:85:29:5f:95:d3:3e:
89:30:43:db:d1:bc:f8:7f:f4:80:3c:0d:d9:c5:89:e8:6b:97:
7a:33:c8:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cs4n7CUa6ZTrHn4WBBEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3
ZGEyY2EwHhcNMjUwMTMxMTMwMDI3WhcNMjUwMjAxMTMwMDI3WjAzMTEwLwYDVQQD
EyhhNjNmZDc1NGZmODdhYjdlNmY2MzQ3ZjZmYzk3MDliYjAyZWQ2ZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNpswctUbczLBbtiEAN+mPcQ6LG5
sbg1X+sYoI3UUNpaYyU+f1jxfDubrXCdc7SBdgPPOOb9Uc23sRbS+sssRBxGEour
Jee0KkHYfANmoqC3T6SWc2R9lJ9C2zo3ZO4nC1RnCfk//4ek5UtdFIIX8Uy7loq0
/ugg1UXFlRrZLe/4i5kcZhyFIDHop6nzqqvTuAcmmq7kTTOMe/ys85L7rfFMWEbz
4xL7CcULZ6J4QPw69qOUhPwITBiGI+8GJA/pl5E0+H+bNH3/Z19z2Y3Vabp7n3Uq
QIcWH6v++rYH4T3Tj0Zap6UoWHxKyVoQIwAEJmhTKDex7vlx9n8d5gbbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY/11T/h6t+b2NH9vyXCbsC7W4AMB8GA1UdIwQY
MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt
NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3
LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnG9pryEu
9IGg09rAJ5s17NbjVpLIFjkOcfaQhlY7j3mXxwK0ghXD0L66UcFksXZye3gFajdK
b5rV++gIomPDBBgd9iBRJaWNWgYjEXU4OJxj3mh1ACdCkqQaOn32BJ9uTRcDSnaa
dBV/ybzdaX5Dy3Fffbe4kVCS4PbpuKpGTNM3jf8gUg6rugHkOb7cZ08PYBphJfl2
jDkStOmO+bXTr0G2LOUiO56GzKnFfM1CBraMfYHpJ5Lc/agJq9iP1bp+966gcVSz
ntqFYMYcp2QGI0LPdFZev0oArMOMVJv63FYVXwyEhSlfldM+iTBD29G8+H/0gDwN
2cWJ6GuXejPIkw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:27 2025 by rpki-client