Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: tsKXfYhpd5jKfn9LtaBmHS5JVgKm4YUgk4EadJVu/L8=
Subject key identifier: AB:CA:6A:70:3B:64:09:C0:AD:4C:57:07:3D:17:58:7F:6B:21:29:45
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 0194BC3C3EF158673EB0B8B80087047F9C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: VPSlXnDnbSt8H/6FIpNsl3UrpSk394tP/Lk1az4QV30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:f1:58:67:3e:b0:b8:b8:00:87:04:7f:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=abca6a703b6409c0ad4c57073d17587f6b212945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:19:84:18:22:6b:39:2d:33:3e:a3:df:84:
8f:ca:1d:af:9f:b0:11:45:a8:43:22:1a:8c:ae:a2:
c9:ec:d1:1f:8c:ab:a3:6d:ab:42:8e:15:61:15:2d:
7e:af:c8:c4:65:d4:27:a4:ec:e1:17:5b:70:fa:16:
a1:74:cf:2d:43:87:27:7c:6a:1f:a5:b1:29:cc:c2:
14:e5:37:0f:c4:d2:8a:ee:ae:a2:7c:cd:aa:5e:d7:
5e:77:57:ec:6d:ff:07:b2:29:bd:65:36:b9:4c:6b:
33:17:c4:2e:45:11:ed:18:c6:66:93:b1:58:32:8e:
4d:d2:2a:ae:ab:fc:96:f1:72:c3:1a:6e:3f:6b:81:
b6:90:88:e0:8e:54:bb:b6:bf:8e:2f:b4:63:38:f7:
0a:3a:8f:73:e5:67:66:7f:aa:eb:14:1b:53:1b:01:
1d:df:d1:70:4b:1c:fc:16:e8:82:1e:96:23:3e:25:
1c:76:68:e6:5a:c3:8d:24:9e:2f:34:75:d4:60:ab:
d3:e1:6d:35:cb:85:3e:a3:25:2f:b1:68:bc:bb:7a:
1e:53:b9:df:09:0e:55:f0:04:1d:a2:c6:8e:65:b3:
7d:ce:d9:5b:ea:50:3c:1d:46:91:62:77:33:0b:67:
ec:7f:56:12:19:ca:ab:b6:65:c1:c5:44:49:35:27:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:6A:70:3B:64:09:C0:AD:4C:57:07:3D:17:58:7F:6B:21:29:45
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1f:b9:de:a8:ad:74:16:bb:63:db:8e:55:96:a9:4e:c6:21:
03:1f:fb:dc:a0:33:33:1d:6a:6e:f1:52:da:73:05:14:81:2c:
18:a1:d8:c5:c8:23:1b:89:b6:4e:5e:95:74:24:b2:1a:8a:08:
c8:ba:f6:54:c9:c2:1f:d0:4a:68:88:a1:a7:b5:51:4b:5a:e7:
a0:93:9d:4b:5b:8d:4f:97:71:59:e6:33:e3:8a:e9:d9:bf:9d:
ec:69:78:17:aa:bd:c7:af:c5:fb:64:53:2d:ac:04:39:e3:f5:
ec:9f:99:20:5d:af:10:f2:d9:3f:e9:29:fe:e4:80:57:89:3b:
ef:70:60:e3:a9:77:46:55:1e:2c:c2:20:bc:f3:ac:56:11:db:
43:4e:fc:5d:e9:bb:45:b1:68:1e:ec:3a:c4:c4:dd:26:28:0d:
a4:d1:9f:b7:fe:cd:d5:7d:c2:47:26:c1:75:e9:8b:2b:a8:94:
af:e3:59:3c:30:55:6c:3e:27:37:81:33:0b:f7:1f:2a:1c:5a:
57:c4:ad:30:1f:ec:c4:b5:f4:28:15:37:c9:9c:92:ec:68:dc:
76:dc:f4:36:41:69:12:df:89:80:3b:41:9c:09:53:5a:5d:68:
bc:39:c5:54:53:d6:87:1f:7f:60:04:4d:55:26:79:84:c9:6f:
75:d3:08:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD7xWGc+sLi4AIcEf5x/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGE3NDlhZTI1YzFjYmI2NTg3MWQ0MTZhNzlhYjRhODg0
YWM0NjgwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
EyhhYmNhNmE3MDNiNjQwOWMwYWQ0YzU3MDczZDE3NTg3ZjZiMjEyOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3wZhBgiazktMz6j34SPyh2vn7AR
RahDIhqMrqLJ7NEfjKujbatCjhVhFS1+r8jEZdQnpOzhF1tw+hahdM8tQ4cnfGof
pbEpzMIU5TcPxNKK7q6ifM2qXtded1fsbf8Hsim9ZTa5TGszF8QuRRHtGMZmk7FY
Mo5N0iquq/yW8XLDGm4/a4G2kIjgjlS7tr+OL7RjOPcKOo9z5Wdmf6rrFBtTGwEd
39FwSxz8FuiCHpYjPiUcdmjmWsONJJ4vNHXUYKvT4W01y4U+oyUvsWi8u3oeU7nf
CQ5V8AQdosaOZbN9ztlb6lA8HUaRYnczC2fsf1YSGcqrtmXBxURJNSdR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvKanA7ZAnArUxXBz0XWH9rISlFMB8GA1UdIwQY
MBaAFJ0KdJriXBy7ZYcdQWp5q0qISsRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYt
MWE2ZDNjOTlkYzQ4LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYtMWE2ZDNjOTlkYzQ4
LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR+53qit
dBa7Y9uOVZapTsYhAx/73KAzMx1qbvFS2nMFFIEsGKHYxcgjG4m2Tl6VdCSyGooI
yLr2VMnCH9BKaIihp7VRS1rnoJOdS1uNT5dxWeYz44rp2b+d7Gl4F6q9x6/F+2RT
LawEOeP17J+ZIF2vEPLZP+kp/uSAV4k773Bg46l3RlUeLMIgvPOsVhHbQ078Xem7
RbFoHuw6xMTdJigNpNGft/7N1X3CRybBdemLK6iUr+NZPDBVbD4nN4EzC/cfKhxa
V8StMB/sxLX0KBU3yZyS7Gjcdtz0NkFpEt+JgDtBnAlTWl1ovDnFVFPWhx9/YARN
VSZ5hMlvddMIfw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client