Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: C1Lg5ijBoQb4vfBV9/7KkRiFSvF766JT/5HPFzBcXvc=
Subject key identifier: 92:3F:BA:0E:69:7A:C2:78:B5:F9:1B:CD:00:E8:91:48:E8:1D:1D:80
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 0194BD4E5B89E40C0F799082A6A7612BE8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: 5EIPyXOow03V9zuDeYfmbQCIyNTHfx4G+A3ufeiy8mw=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:89:e4:0c:0f:79:90:82:a6:a7:61:2b:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=923fba0e697ac278b5f91bcd00e89148e81d1d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:5f:b6:29:d2:a3:9c:4d:c8:a9:72:75:a3:
6d:06:3a:87:88:ae:2e:60:39:26:a8:1b:54:c1:61:
cd:13:79:3e:36:4d:43:80:96:16:75:ed:4e:43:94:
60:c5:33:cd:78:ce:3c:8c:3a:c9:75:9f:b7:c8:61:
e3:8d:b5:a6:11:ef:70:3b:6a:e3:d2:fd:d9:23:34:
cf:6a:bf:11:f5:24:24:fd:24:3d:4a:75:fb:0a:3a:
4e:08:e3:2d:82:84:fe:14:e9:0d:3d:25:18:9e:0e:
08:fe:b0:86:de:37:0f:8e:d1:25:1b:53:ab:cd:97:
42:a5:49:d3:0c:7f:28:10:53:0d:b5:d1:d1:b6:74:
78:50:94:49:6f:98:44:15:d5:67:c4:86:59:a9:dc:
c5:11:4f:79:e8:12:f1:d6:8f:9a:10:51:41:a7:0a:
b4:02:aa:04:cd:65:23:88:79:5c:f1:8b:bb:20:cd:
72:f5:95:ad:e2:dd:83:ba:98:8c:93:a0:58:3e:37:
7a:67:00:1d:79:8a:74:83:62:54:1f:7c:19:c8:25:
fc:c9:8f:da:e1:92:25:ec:96:61:15:68:7f:3f:d0:
08:ce:37:4d:85:53:86:e6:4d:f6:60:ba:41:37:77:
f6:0b:5c:58:13:a3:a2:cd:f8:ab:13:cc:84:2e:db:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3F:BA:0E:69:7A:C2:78:B5:F9:1B:CD:00:E8:91:48:E8:1D:1D:80
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:4d:bb:fb:66:65:ee:ed:d3:d2:2d:5b:aa:1e:42:be:ad:00:
df:8e:8a:17:23:ce:df:3c:74:7c:d0:fa:ce:17:27:bc:05:bd:
62:bc:7a:ea:e9:c5:a3:8b:fb:9f:32:9b:48:26:03:84:fa:19:
06:1e:c2:bb:ba:96:75:a6:0a:5c:3e:5d:bf:a7:94:2a:56:8e:
e3:b9:0d:c3:6d:d6:bd:41:87:16:ea:1d:df:3a:29:66:0a:cc:
18:f2:ad:85:9c:cb:52:e9:d1:a4:bb:f5:41:43:1c:30:c3:e3:
e5:b3:b2:79:75:be:12:e8:14:e1:d9:12:40:ae:41:c5:1b:90:
5e:44:84:5d:68:51:26:97:cb:ee:bb:91:42:88:6e:07:f2:ac:
9d:ae:27:ad:29:f3:2c:6e:0b:00:c2:46:e2:05:d7:fd:e4:ce:
2f:bc:f1:65:59:e3:9c:c7:1b:fd:cd:2d:6a:51:09:0f:de:af:
cb:3b:a5:b7:94:73:77:c4:fb:37:47:98:ac:9c:ca:9c:24:d4:
ef:a6:6a:ed:2b:51:e0:43:75:3f:7f:54:23:e8:24:a9:b3:71:
c4:62:57:9c:a0:13:bd:b4:07:be:63:a7:4b:42:8c:59:89:2b:
99:95:a7:7f:b6:91:94:56:e9:58:c1:ff:3f:55:04:08:14:43:
0e:a7:3c:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TluJ5AwPeZCCpqdhK+jdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjFjY2U0ZDViYWQ4ZDljMmVkY2E0MDBlMmJmYzU0YTI0
MTg1YmYwHhcNMjUwMTMxMTcwMDE2WhcNMjUwMjAxMTcwMDE2WjAzMTEwLwYDVQQD
Eyg5MjNmYmEwZTY5N2FjMjc4YjVmOTFiY2QwMGU4OTE0OGU4MWQxZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIpftinSo5xNyKlydaNtBjqHiK4u
YDkmqBtUwWHNE3k+Nk1DgJYWde1OQ5RgxTPNeM48jDrJdZ+3yGHjjbWmEe9wO2rj
0v3ZIzTPar8R9SQk/SQ9SnX7CjpOCOMtgoT+FOkNPSUYng4I/rCG3jcPjtElG1Or
zZdCpUnTDH8oEFMNtdHRtnR4UJRJb5hEFdVnxIZZqdzFEU956BLx1o+aEFFBpwq0
AqoEzWUjiHlc8Yu7IM1y9ZWt4t2DupiMk6BYPjd6ZwAdeYp0g2JUH3wZyCX8yY/a
4ZIl7JZhFWh/P9AIzjdNhVOG5k32YLpBN3f2C1xYE6OizfirE8yELtttawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI/ug5pesJ4tfkbzQDokUjoHR2AMB8GA1UdIwQY
MBaAFDWxzOTVutjZwu3KQA4r/FSiQYW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEt
Y2ZkM2I1M2RjNDU2LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEtY2ZkM2I1M2RjNDU2
LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2027+2Zl
7u3T0i1bqh5Cvq0A346KFyPO3zx0fND6zhcnvAW9Yrx66unFo4v7nzKbSCYDhPoZ
Bh7Cu7qWdaYKXD5dv6eUKlaO47kNw23WvUGHFuod3zopZgrMGPKthZzLUunRpLv1
QUMcMMPj5bOyeXW+EugU4dkSQK5BxRuQXkSEXWhRJpfL7ruRQohuB/Ksna4nrSnz
LG4LAMJG4gXX/eTOL7zxZVnjnMcb/c0talEJD96vyzult5Rzd8T7N0eYrJzKnCTU
76Zq7StR4EN1P39UI+gkqbNxxGJXnKATvbQHvmOnS0KMWYkrmZWnf7aRlFbpWMH/
P1UECBRDDqc8rA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:27 2025 by rpki-client