Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: 1ambo5F5P7BUhdFroB8geTkEtf4oIs4UVVBDbsZggvU=
Subject key identifier: CD:F9:42:3B:6D:CB:8C:CE:DF:FA:A2:2A:EB:3E:1E:29:B4:B4:2D:99
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 0194BBCE94933A00019EDD9AC1417511EB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: fc9uE1tffti/ibIzg8oRomNwSBdB5LwGkniZGmiLvg0=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:93:3a:00:01:9e:dd:9a:c1:41:75:11:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=cdf9423b6dcb8ccedffaa22aeb3e1e29b4b42d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:b8:cc:ff:9a:8a:28:bc:df:41:43:9f:78:
0f:12:fb:d8:1e:7a:88:66:81:b6:99:b3:48:30:2d:
b0:66:d9:bb:97:69:72:bf:8f:89:53:22:b9:31:5c:
9a:50:54:4e:9f:24:3a:ac:7b:74:8a:94:1b:d8:39:
0e:bf:c8:4a:01:97:14:5a:53:a2:55:38:6f:c4:50:
0a:6d:ad:2b:a6:c2:ce:36:7d:4e:5c:04:b6:ef:49:
98:02:0e:f1:b5:d3:6b:f4:55:34:00:27:6b:ff:97:
4e:bc:47:42:65:ec:89:6f:98:21:10:ac:2a:b9:7d:
59:e5:da:a3:7f:3a:74:ad:64:91:49:0e:d0:d9:b0:
5f:56:1b:3c:89:92:dd:bd:8a:5e:5f:bd:f4:b4:74:
7f:6d:fb:f8:19:42:21:0d:c3:ab:26:6c:20:33:1a:
ce:4a:f1:08:08:8b:03:c8:7a:a3:0f:f7:1c:30:34:
80:ad:f0:20:9b:85:09:7e:3e:75:d6:19:dd:f5:e1:
d8:8b:cd:95:31:38:dc:81:84:f7:c0:1e:12:67:94:
7c:02:af:b8:f7:ca:9a:d7:0c:2c:15:c9:70:40:79:
a5:37:b8:97:00:fd:87:77:3b:bd:ad:e4:e3:6c:21:
7f:82:eb:ab:44:8f:49:1f:c0:bb:f5:c5:a6:d3:07:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:42:3B:6D:CB:8C:CE:DF:FA:A2:2A:EB:3E:1E:29:B4:B4:2D:99
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:4b:65:c9:90:ca:ce:91:84:4c:a8:57:4d:e3:cf:d1:3b:
0d:bb:47:58:f3:b7:ad:e6:5c:4b:c1:18:a4:7f:ce:33:bb:19:
37:08:77:52:f1:fc:d1:d6:31:53:75:bd:7f:37:04:ae:09:07:
5a:de:1d:85:20:f5:1a:0e:11:23:74:f6:92:59:78:58:5d:aa:
b8:d6:ba:42:b0:1c:4b:83:54:60:71:22:04:09:ad:a3:27:83:
0c:84:34:e9:88:ef:1f:ea:10:29:a9:21:ae:c4:69:a1:2a:51:
5c:b0:e8:13:bd:76:d3:2b:f1:76:68:cb:b1:64:f4:59:88:a7:
10:1f:c6:d9:c6:15:48:5c:f2:e4:00:7b:8f:5d:5b:87:47:61:
be:e6:64:4c:63:0e:37:f7:d5:d3:2f:f8:c6:06:b1:d8:03:05:
19:e9:a1:6a:86:d0:70:0a:56:41:b3:51:4e:6d:a0:fd:fd:2a:
fe:34:bd:de:64:06:1c:43:99:19:58:52:ef:98:b8:3a:0e:b4:
96:c3:74:e3:18:f8:be:eb:2a:78:85:04:cb:1a:70:c5:6e:2f:
ea:57:6c:35:71:85:ae:09:58:c6:b3:96:a4:28:36:9c:7c:67:
ae:00:87:dc:5a:5f:f9:b7:eb:46:b5:04:da:e9:6f:a6:95:c6:
40:de:39:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpSTOgABnt2awUF1EetJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTZhYjE4ZTZiY2VkZTA4NTBiY2FhZWJkOTU5OTkzZTg0
MDg2ZWIwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
EyhjZGY5NDIzYjZkY2I4Y2NlZGZmYWEyMmFlYjNlMWUyOWI0YjQyZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkai4zP+aiii830FDn3gPEvvYHnqI
ZoG2mbNIMC2wZtm7l2lyv4+JUyK5MVyaUFROnyQ6rHt0ipQb2DkOv8hKAZcUWlOi
VThvxFAKba0rpsLONn1OXAS270mYAg7xtdNr9FU0ACdr/5dOvEdCZeyJb5ghEKwq
uX1Z5dqjfzp0rWSRSQ7Q2bBfVhs8iZLdvYpeX730tHR/bfv4GUIhDcOrJmwgMxrO
SvEICIsDyHqjD/ccMDSArfAgm4UJfj511hnd9eHYi82VMTjcgYT3wB4SZ5R8Aq+4
98qa1wwsFclwQHmlN7iXAP2Hdzu9reTjbCF/guurRI9JH8C79cWm0wdJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM35Qjtty4zO3/qiKus+Him0tC2ZMB8GA1UdIwQY
MBaAFDYWqxjmvO3ghQvKrr2VmZPoQIbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYt
YWFjMmViY2JmNWQ0LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYtYWFjMmViY2JmNWQ0
LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU21LZcmQ
ys6RhEyoV03jz9E7DbtHWPO3reZcS8EYpH/OM7sZNwh3UvH80dYxU3W9fzcErgkH
Wt4dhSD1Gg4RI3T2kll4WF2quNa6QrAcS4NUYHEiBAmtoyeDDIQ06YjvH+oQKakh
rsRpoSpRXLDoE7120yvxdmjLsWT0WYinEB/G2cYVSFzy5AB7j11bh0dhvuZkTGMO
N/fV0y/4xgax2AMFGemhaobQcApWQbNRTm2g/f0q/jS93mQGHEOZGVhS75i4Og60
lsN04xj4vusqeIUEyxpwxW4v6ldsNXGFrglYxrOWpCg2nHxnrgCH3Fpf+bfrRrUE
2ulvppXGQN45ww==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:03 2025 by rpki-client