Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: mDipkD2jQYGbSYIxrjwaXsXodOwd+ZsGmWEPB22L0EM=
Subject key identifier: 3F:84:92:36:C2:A7:2E:47:32:3B:74:88:B9:48:3B:7E:E2:DF:60:68
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 0194BC3BECCB55CE3EC1BF97B7F733D3870A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0DC1
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: MqR4nwPnDU2c3GigSk2o3xr543NB+BFusxKsvbN5lSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:cb:55:ce:3e:c1:bf:97:b7:f7:33:d3:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=3f849236c2a72e47323b7488b9483b7ee2df6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:df:77:59:43:d2:97:d8:78:46:71:4e:c7:
59:14:49:9b:20:55:11:85:1f:64:d1:61:02:82:1f:
f4:14:cf:15:c3:1d:aa:ec:c7:1a:1c:6a:d7:36:59:
7b:3f:2d:ac:88:30:31:2c:65:f3:da:fb:26:c1:19:
c7:e9:b3:b2:c7:19:cb:06:18:17:59:c5:25:c6:ee:
83:e6:25:13:48:62:20:36:ef:3d:8f:39:5f:8a:41:
b7:b2:bf:df:f3:66:0a:e0:02:ca:5e:fc:1c:78:1a:
b9:e6:f5:4e:42:3f:48:da:bc:be:e4:c5:f1:35:4a:
a7:99:6f:cf:2a:1e:53:1d:1b:4e:87:f6:e8:34:12:
bb:54:df:05:07:bf:72:8f:06:8f:6b:00:57:6b:32:
03:b7:36:80:ec:26:b3:54:e8:8b:94:14:ed:76:c3:
6b:a5:a8:78:0c:b0:b9:ff:be:cc:f9:c3:82:1f:ca:
d4:14:04:b8:f4:08:1c:51:e4:05:0a:85:a6:83:dc:
7c:8f:2b:e3:f0:b3:6f:80:6b:19:a4:c0:e2:a2:e2:
3c:9d:9e:f3:9b:3d:bd:55:11:c9:ce:88:76:17:7c:
11:59:dc:da:82:45:16:e6:c1:3b:e7:1a:d2:e6:3e:
da:a2:a9:ed:86:2d:ad:e4:d2:ce:e3:7f:8f:18:8a:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:92:36:C2:A7:2E:47:32:3B:74:88:B9:48:3B:7E:E2:DF:60:68
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:48:32:70:8d:37:e4:f2:80:dc:18:db:6a:32:30:89:31:ee:
6a:ec:54:e1:ce:b1:0e:6a:72:82:5b:d4:7e:ec:47:39:d8:e8:
d8:2a:f0:59:f5:36:8c:c0:d3:bd:2f:68:18:98:ce:f1:aa:ee:
c4:82:5f:9b:58:f0:15:d8:7f:c4:87:70:b0:21:8f:26:0a:79:
34:5b:70:9e:9b:bc:e1:b5:c9:da:8d:af:a8:e1:a8:c6:c8:41:
ef:75:69:9f:2c:59:f5:c5:9b:a2:53:7e:0c:7b:3e:8c:7d:26:
71:21:ad:71:17:16:58:39:f1:6b:14:db:37:ca:34:63:87:55:
bc:66:20:a7:e9:19:66:ea:c6:60:1c:96:ba:c7:f0:3d:87:e7:
d9:a8:4f:82:0b:bd:4c:af:6e:be:53:b2:ec:4c:4e:7b:ed:a4:
02:71:34:0e:70:ed:8a:bf:2a:99:82:cc:b7:1b:3c:d6:29:75:
e6:69:76:e2:88:14:03:cd:65:5b:1f:ba:cf:d8:0c:43:25:0f:
2c:a6:d8:e4:a7:46:dc:c4:a9:0f:3f:d6:d0:da:4d:e4:62:81:
8f:32:c6:49:a1:3f:66:0f:cf:f0:d3:e3:c4:c4:ef:06:17:07:
84:5a:a6:d0:9e:db:21:fb:c5:8d:d3:44:d5:93:b4:ec:60:41:
ed:21:d0:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+zLVc4+wb+Xt/cz04cKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl
ZGJjMDkwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
EygzZjg0OTIzNmMyYTcyZTQ3MzIzYjc0ODhiOTQ4M2I3ZWUyZGY2MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lrfd1lD0pfYeEZxTsdZFEmbIFUR
hR9k0WECgh/0FM8Vwx2q7McaHGrXNll7Py2siDAxLGXz2vsmwRnH6bOyxxnLBhgX
WcUlxu6D5iUTSGIgNu89jzlfikG3sr/f82YK4ALKXvwceBq55vVOQj9I2ry+5MXx
NUqnmW/PKh5THRtOh/boNBK7VN8FB79yjwaPawBXazIDtzaA7CazVOiLlBTtdsNr
pah4DLC5/77M+cOCH8rUFAS49AgcUeQFCoWmg9x8jyvj8LNvgGsZpMDiouI8nZ7z
mz29VRHJzoh2F3wRWdzagkUW5sE75xrS5j7aoqnthi2t5NLO43+PGIo+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+EkjbCpy5HMjt0iLlIO37i32BoMB8GA1UdIwQY
MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt
ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3
LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUgycI03
5PKA3BjbajIwiTHuauxU4c6xDmpyglvUfuxHOdjo2CrwWfU2jMDTvS9oGJjO8aru
xIJfm1jwFdh/xIdwsCGPJgp5NFtwnpu84bXJ2o2vqOGoxshB73VpnyxZ9cWbolN+
DHs+jH0mcSGtcRcWWDnxaxTbN8o0Y4dVvGYgp+kZZurGYByWusfwPYfn2ahPggu9
TK9uvlOy7ExOe+2kAnE0DnDtir8qmYLMtxs81il15ml24ogUA81lWx+6z9gMQyUP
LKbY5KdG3MSpDz/W0NpN5GKBjzLGSaE/Zg/P8NPjxMTvBhcHhFqm0J7bIfvFjdNE
1ZO07GBB7SHQfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:59 2025 by rpki-client