Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: x943+6rAglGP9iU3MYP7XPkaAUBTinawnedn+DKxd8w=
Subject key identifier: 39:86:08:DA:06:8D:64:3E:1F:56:26:29:75:04:6B:A4:89:2A:65:D5
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 0194BC3CC2CCC175E22669CDA5D692F4CF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 0F98
Signing time: Fri 31 Jan 2025 12:01:26 +0000
Manifest this update: Fri 31 Jan 2025 12:01:26 +0000
Manifest next update: Sat 01 Feb 2025 12:01:26 +0000
Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: 2kRd3eJb3m7/Q1rojPOInfsyCnv3UXz5RTFeox9KFgw=)
2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c2:cc:c1:75:e2:26:69:cd:a5:d6:92:f4:cf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Jan 31 12:01:26 2025 GMT
Not After : Feb 1 12:01:26 2025 GMT
Subject: CN=398608da068d643e1f56262975046ba4892a65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:72:80:f5:5a:9b:92:4a:04:3d:b9:8c:b9:
56:e6:c5:e5:47:50:d4:e7:76:a1:0b:f8:b1:eb:d4:
9c:c0:57:cb:69:f2:b4:fc:59:5c:b1:36:f1:b7:d2:
89:cd:3a:db:1b:db:d8:60:17:29:b7:ef:5e:2a:bb:
81:c0:99:a3:93:89:2b:b3:ef:9f:6e:05:7c:9a:86:
16:88:17:fd:bb:5b:14:7f:54:34:c8:b9:0d:40:ef:
6a:6e:13:d7:62:e1:58:56:31:64:d8:93:c6:a7:d3:
60:bb:0a:0c:fd:9b:92:5b:f6:4d:ef:2c:13:9d:26:
b1:44:9c:12:b4:1b:62:1d:45:2e:5f:7b:11:35:d0:
79:a8:a6:d9:59:34:95:f7:bd:f5:eb:ae:d2:8a:5c:
55:fe:fb:4e:32:86:51:db:49:0d:be:78:79:3c:19:
1c:51:c7:a6:97:97:03:df:ee:af:30:34:2c:59:86:
eb:53:b4:cc:51:e4:f6:b7:96:e6:8d:f4:3f:1f:a2:
c8:38:a1:88:94:39:1f:3c:89:a0:e3:29:12:38:13:
0b:01:e1:8e:32:7c:ca:77:32:d8:ee:9b:38:83:31:
71:ee:31:39:75:e3:0a:8e:b7:7c:7a:06:4d:74:8e:
dd:02:cb:5a:cb:86:22:6f:00:e5:d6:17:7f:d4:39:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:08:DA:06:8D:64:3E:1F:56:26:29:75:04:6B:A4:89:2A:65:D5
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:53:ce:8b:f1:e6:0f:5f:f0:06:38:6c:a8:69:67:e2:36:
9f:40:81:8e:24:a8:96:b3:6e:b5:2f:a6:5e:b5:e5:8d:a8:de:
2f:81:c4:18:89:b8:df:3b:e1:12:65:4f:c1:ab:35:11:75:a2:
e5:63:aa:af:85:c8:3a:ea:05:e3:a6:15:e2:75:22:23:91:1b:
4b:55:d8:b4:b9:ca:19:9b:91:55:66:c3:e6:82:64:54:a4:78:
6f:b8:3c:44:29:6f:83:ad:a0:0a:91:a1:99:40:de:4d:d3:62:
b3:3a:ab:7f:02:63:28:f0:b4:44:18:4b:cb:65:69:d4:21:0d:
9c:f1:f6:8d:ce:f7:1b:dc:9a:07:37:35:8a:4c:c6:70:79:46:
62:9b:4d:f1:81:31:1b:4a:20:3f:15:03:4c:f8:5e:47:b8:23:
5b:47:c1:b4:2a:61:43:a7:cd:0a:48:93:78:ab:be:1c:87:bc:
3d:e3:fb:5d:38:35:e3:9d:b7:dc:ff:d7:3e:c0:96:9b:a1:cc:
bc:79:42:d3:a0:51:9e:10:ec:8b:8f:be:70:1d:7c:83:dd:ff:
39:1a:4c:51:33:c2:f6:1b:c5:a0:79:14:8a:a9:90:5e:25:2e:
6a:16:5c:f4:b5:5b:c2:78:43:e0:43:46:3a:fd:6f:d0:8a:69:
3e:07:cd:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PMLMwXXiJmnNpdaS9M+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MDAwZWJlZWQyNDJiOTU2NGFkYzk1NDg1MzIzYjk2YmQ2
ZjVjMDIwHhcNMjUwMTMxMTIwMTI2WhcNMjUwMjAxMTIwMTI2WjAzMTEwLwYDVQQD
EygzOTg2MDhkYTA2OGQ2NDNlMWY1NjI2Mjk3NTA0NmJhNDg5MmE2NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqNygPVam5JKBD25jLlW5sXlR1DU
53ahC/ix69ScwFfLafK0/FlcsTbxt9KJzTrbG9vYYBcpt+9eKruBwJmjk4krs++f
bgV8moYWiBf9u1sUf1Q0yLkNQO9qbhPXYuFYVjFk2JPGp9NguwoM/ZuSW/ZN7ywT
nSaxRJwStBtiHUUuX3sRNdB5qKbZWTSV9731667SilxV/vtOMoZR20kNvnh5PBkc
Uceml5cD3+6vMDQsWYbrU7TMUeT2t5bmjfQ/H6LIOKGIlDkfPImg4ykSOBMLAeGO
MnzKdzLY7ps4gzFx7jE5deMKjrd8egZNdI7dAstay4YibwDl1hd/1DnV7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmGCNoGjWQ+H1YmKXUEa6SJKmXVMB8GA1UdIwQY
MBaAFDYADr7tJCuVZK3JVIUyO5a9b1wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEt
MzcwMTUwYjY2OWU0LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEtMzcwMTUwYjY2OWU0
LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8JTzovx
5g9f8AY4bKhpZ+I2n0CBjiSolrNutS+mXrXljajeL4HEGIm43zvhEmVPwas1EXWi
5WOqr4XIOuoF46YV4nUiI5EbS1XYtLnKGZuRVWbD5oJkVKR4b7g8RClvg62gCpGh
mUDeTdNiszqrfwJjKPC0RBhLy2Vp1CENnPH2jc73G9yaBzc1ikzGcHlGYptN8YEx
G0ogPxUDTPheR7gjW0fBtCphQ6fNCkiTeKu+HIe8PeP7XTg145233P/XPsCWm6HM
vHlC06BRnhDsi4++cB18g93/ORpMUTPC9hvFoHkUiqmQXiUuahZc9LVbwnhD4ENG
Ov1v0IppPgfNeA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:30 2025 by rpki-client