Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: WwNmdTG+kXodhRW4hUYAXIDvVDKRNd8eUHhgmMOwxuc=
Subject key identifier: 08:D1:03:69:2C:27:AC:AF:D5:C5:26:38:61:6E:AC:24:9F:54:FB:57
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 0194BC3C40480EE56E511B4099972FE80C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: DXC9NWRFYmPiaqQc0S4FAzQ+CmFZM3CvxWCv+8VFm6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:48:0e:e5:6e:51:1b:40:99:97:2f:e8:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=08d103692c27acafd5c52638616eac249f54fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:83:1d:54:41:90:7b:3f:27:67:90:5f:2c:
99:a2:9a:09:1d:f0:6e:70:91:3b:16:49:13:58:a6:
d4:26:d6:06:66:c0:1b:0c:41:d8:00:94:cd:a0:c4:
a0:43:43:5e:a3:87:71:c6:98:93:8c:f8:3c:cf:e0:
6d:4f:4a:85:8b:85:4c:62:28:9f:94:82:b9:6a:cb:
e8:c2:5b:2d:a8:a9:68:6f:56:0c:ae:95:cb:0c:68:
b1:0f:f5:17:5a:af:e7:c4:af:5c:87:8b:f1:5f:af:
17:14:47:d0:40:f8:5f:3d:3d:a0:8a:00:9c:93:39:
93:c2:f2:e7:aa:58:0a:c6:a3:5d:e9:23:89:ea:11:
3f:18:e0:15:77:8f:df:f2:cc:30:40:73:b7:6a:9c:
e8:2a:05:c9:1b:52:36:60:bd:7b:06:8c:fa:eb:f5:
9d:33:ed:c9:85:1b:3c:cf:90:07:cd:d6:78:7e:04:
63:d4:2d:7b:7d:49:08:fa:a4:7a:14:a5:f8:21:23:
3e:ad:f2:67:e5:ef:c7:b4:01:04:bc:0b:7e:3f:61:
a4:fe:2e:bd:15:0f:b2:64:e5:11:58:d5:36:77:bb:
4b:fc:09:e5:94:9c:8d:f1:ae:f4:ec:b6:e7:86:27:
d2:aa:f2:30:45:a5:72:47:2f:d9:18:3b:9d:82:38:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:03:69:2C:27:AC:AF:D5:C5:26:38:61:6E:AC:24:9F:54:FB:57
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:a8:2f:3a:4d:b7:ca:a6:0a:ae:af:66:ca:9b:3f:2f:3f:
c1:6a:07:41:08:8d:3c:c8:1e:15:9b:6a:8b:9f:ec:d7:03:c9:
0d:83:36:90:eb:af:36:e8:f1:1d:4e:0b:a5:8f:2f:ef:93:ec:
01:4e:aa:fd:36:36:47:b3:99:3c:ff:a6:0b:d4:3b:2c:52:03:
47:14:07:f6:ae:a7:7e:7b:2a:42:e2:8a:5c:47:58:44:6e:5e:
b6:8c:fa:4b:df:36:98:ff:db:47:28:03:03:7f:94:70:9c:22:
e6:99:48:d2:ec:e4:33:93:7a:f9:ab:ff:cb:5b:c4:ef:46:4e:
9d:6e:c0:01:7a:ce:93:e5:e6:ea:d2:76:72:d7:b9:e2:66:96:
75:85:c9:30:f0:d3:57:31:41:32:43:08:df:4f:1b:32:77:e9:
42:51:cc:00:d3:ca:57:37:f9:82:b0:b2:2b:fe:8b:95:c0:59:
06:6c:f4:64:d3:92:70:7e:37:f9:6f:9a:aa:b1:21:fd:5e:89:
d6:08:c0:c2:2d:af:de:bf:85:28:23:45:8a:0e:1d:64:a8:89:
c0:30:85:33:14:12:1d:16:8c:66:3f:4f:21:5d:be:48:08:2c:
df:2a:1a:c5:39:2f:81:c3:67:35:41:48:22:a5:92:f8:15:da:
af:88:e1:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEBIDuVuURtAmZcv6AxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDJiYWFmYjZmYmFhYmZlOGZhODRkZDI2OWY1YmEyOTIw
ZjE1ODMwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
EygwOGQxMDM2OTJjMjdhY2FmZDVjNTI2Mzg2MTZlYWMyNDlmNTRmYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7yDHVRBkHs/J2eQXyyZopoJHfBu
cJE7FkkTWKbUJtYGZsAbDEHYAJTNoMSgQ0Neo4dxxpiTjPg8z+BtT0qFi4VMYiif
lIK5asvowlstqKlob1YMrpXLDGixD/UXWq/nxK9ch4vxX68XFEfQQPhfPT2gigCc
kzmTwvLnqlgKxqNd6SOJ6hE/GOAVd4/f8swwQHO3apzoKgXJG1I2YL17Boz66/Wd
M+3JhRs8z5AHzdZ4fgRj1C17fUkI+qR6FKX4ISM+rfJn5e/HtAEEvAt+P2Gk/i69
FQ+yZOURWNU2d7tL/AnllJyN8a707LbnhifSqvIwRaVyRy/ZGDudgjgZ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjRA2ksJ6yv1cUmOGFurCSfVPtXMB8GA1UdIwQY
MBaAFJwCuq+2+6q/6PqE3SafW6KSDxWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iOTQ3ZGEtZTJmMi00Y2RkLWFiMzAt
NjI0Y2QxOWUxYWFkLzEvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iOTQ3ZGEtZTJmMi00Y2RkLWFiMzAtNjI0Y2QxOWUxYWFk
LzEvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUGoLzpN
t8qmCq6vZsqbPy8/wWoHQQiNPMgeFZtqi5/s1wPJDYM2kOuvNujxHU4LpY8v75Ps
AU6q/TY2R7OZPP+mC9Q7LFIDRxQH9q6nfnsqQuKKXEdYRG5etoz6S982mP/bRygD
A3+UcJwi5plI0uzkM5N6+av/y1vE70ZOnW7AAXrOk+Xm6tJ2cte54maWdYXJMPDT
VzFBMkMI308bMnfpQlHMANPKVzf5grCyK/6LlcBZBmz0ZNOScH43+W+aqrEh/V6J
1gjAwi2v3r+FKCNFig4dZKiJwDCFMxQSHRaMZj9PIV2+SAgs3yoaxTkvgcNnNUFI
IqWS+BXar4jhLw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:53 2025 by rpki-client