Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: GpDpE1B/h4LOQ9IUsMwcIGF0Xqbh9Bi6d1LPqAFizQQ=
Subject key identifier: 3B:81:8C:3B:11:35:E9:6F:98:32:8E:8F:83:3C:28:A3:83:07:69:4A
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0194BC7283300392316064B17C76568D7AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0B56
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: eRym9XOa9XVRTOAcrBbe1MaAHnCExfkYhfNFIxSu8NY=)
2: WQDK9xlCqpMVg3-ZBWFZfqNRgDU.roa (hash: 5EEZG5yrAU7W8n0dqk+GpepBnaLmDeUxI+tSTrknSrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:83:30:03:92:31:60:64:b1:7c:76:56:8d:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=3b818c3b1135e96f98328e8f833c28a38307694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:e4:e4:af:ab:5d:db:f5:11:a4:54:25:34:
38:1c:e2:c0:06:16:bc:5d:81:f5:33:b8:2e:1b:e7:
51:09:d7:90:9b:d0:87:cf:4e:a1:de:53:7c:11:df:
74:f2:f9:3c:0b:1e:8b:98:8d:08:5d:0c:b1:a3:af:
02:a5:9d:42:f5:e4:ea:73:aa:fd:19:3e:a2:31:ff:
af:3f:a6:1a:cc:4c:e8:a9:5b:d6:24:14:ba:20:24:
8d:85:95:2c:20:d3:43:e5:9e:88:d9:01:ba:8e:04:
39:c4:54:fd:96:1b:1e:6e:65:ae:6d:90:3c:ba:52:
28:19:e7:d7:32:5d:2d:08:e9:58:4e:99:25:4c:d8:
8b:09:68:eb:07:ad:2c:22:3d:e8:7c:b9:b3:fb:02:
f4:1f:40:08:3a:37:23:c7:6d:79:a7:ef:63:5f:e9:
be:2e:2a:89:2f:14:bf:ff:e4:0a:4a:ed:16:5b:76:
2c:f7:66:44:c2:c9:38:51:09:84:9c:17:8b:00:3b:
6e:a6:ae:2c:a2:ed:35:ed:0e:bb:87:8c:c9:cf:d7:
d9:01:88:e1:ec:c1:c9:94:ef:a8:fc:34:41:12:14:
7c:a2:e6:24:d3:07:14:c8:40:b5:f1:2a:eb:c1:9f:
50:7a:a8:9e:4a:24:86:d1:2f:84:86:33:96:85:d0:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:8C:3B:11:35:E9:6F:98:32:8E:8F:83:3C:28:A3:83:07:69:4A
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:a7:4c:9a:01:30:6d:16:33:80:9a:ef:ec:ed:8c:8d:2d:
41:d0:76:97:55:cd:ee:7b:d6:76:6f:73:fb:54:99:40:c3:69:
09:ef:89:fe:31:04:85:99:40:dd:a7:b1:83:44:49:df:8f:7d:
cb:b3:fe:f8:9e:13:b8:af:44:58:e8:ca:9b:0f:4b:50:d9:37:
3e:46:ff:57:09:1b:bf:74:36:96:73:b2:db:86:92:aa:b2:fe:
43:5c:c4:c5:94:81:8e:4c:e6:d4:76:31:62:76:c5:f3:08:fc:
c6:53:8b:88:2f:34:97:e2:aa:ac:f5:a1:a4:82:b8:61:67:8d:
06:4a:ed:a9:5f:8c:e2:3e:a1:8e:50:af:78:e2:61:11:33:3e:
7c:d2:81:91:3d:d4:1c:1c:18:96:6e:ac:33:f0:5f:77:26:2d:
c4:fe:e6:00:80:c8:8b:6b:50:b5:c5:f3:6c:97:81:65:47:7f:
f3:3c:ee:d8:37:9a:e5:d8:c1:7d:36:1f:2c:f1:5d:c8:d7:3b:
62:85:92:25:16:ac:be:41:ef:30:81:63:71:1b:47:92:ac:fb:
65:c0:4e:ec:c1:41:24:4e:95:2d:38:48:07:bd:2e:c1:ba:5f:
56:a1:1f:76:ed:04:4d:d3:83:f2:73:1f:08:10:21:78:a8:08:
9b:ba:5c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coMwA5IxYGSxfHZWjXrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
EygzYjgxOGMzYjExMzVlOTZmOTgzMjhlOGY4MzNjMjhhMzgzMDc2OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHbk5K+rXdv1EaRUJTQ4HOLABha8
XYH1M7guG+dRCdeQm9CHz06h3lN8Ed908vk8Cx6LmI0IXQyxo68CpZ1C9eTqc6r9
GT6iMf+vP6YazEzoqVvWJBS6ICSNhZUsINND5Z6I2QG6jgQ5xFT9lhsebmWubZA8
ulIoGefXMl0tCOlYTpklTNiLCWjrB60sIj3ofLmz+wL0H0AIOjcjx215p+9jX+m+
LiqJLxS//+QKSu0WW3Ys92ZEwsk4UQmEnBeLADtupq4sou017Q67h4zJz9fZAYjh
7MHJlO+o/DRBEhR8ouYk0wcUyEC18SrrwZ9QeqieSiSG0S+EhjOWhdAM5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuBjDsRNelvmDKOj4M8KKODB2lKMB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO52nTJoB
MG0WM4Ca7+ztjI0tQdB2l1XN7nvWdm9z+1SZQMNpCe+J/jEEhZlA3aexg0RJ3499
y7P++J4TuK9EWOjKmw9LUNk3Pkb/Vwkbv3Q2lnOy24aSqrL+Q1zExZSBjkzm1HYx
YnbF8wj8xlOLiC80l+KqrPWhpIK4YWeNBkrtqV+M4j6hjlCveOJhETM+fNKBkT3U
HBwYlm6sM/BfdyYtxP7mAIDIi2tQtcXzbJeBZUd/8zzu2Dea5djBfTYfLPFdyNc7
YoWSJRasvkHvMIFjcRtHkqz7ZcBO7MFBJE6VLThIB70uwbpfVqEfdu0ETdOD8nMf
CBAheKgIm7pcGQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:27 2025 by rpki-client