Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: 8F5o70OQyq5VZZBr4hjlAnqUKOrBs4gpuc3CzFI0xrc=
Subject key identifier: 38:5C:0C:F9:A8:8A:16:C5:7B:7D:02:AA:C3:82:C1:74:42:E1:AB:9D
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 0194BC3C675B07ABA923035D7F2B834B0E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: hF5XedR5vlZar+mpW+daoSC5uzMgGqK1WbufXdBF3Ko=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:5b:07:ab:a9:23:03:5d:7f:2b:83:4b:0e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=385c0cf9a88a16c57b7d02aac382c17442e1ab9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:2a:4a:53:fb:d9:7b:ee:99:63:4b:7f:51:
ba:5f:28:3b:6f:01:a2:f8:1c:03:85:1b:8a:fb:4c:
19:ad:81:00:6b:e5:1e:d7:ef:8d:fa:93:3c:65:c3:
d8:08:80:6e:f9:26:68:29:b1:b0:a7:a1:05:39:fe:
bf:ce:3e:4b:10:66:50:40:64:18:4b:9b:f4:8a:c2:
97:ad:df:1d:c0:2c:68:56:24:c9:0a:a0:b8:c2:4b:
0f:74:34:8c:19:73:f4:6a:5a:35:0d:a4:d6:6b:d7:
17:15:a2:10:18:e8:73:d0:95:15:39:1b:e6:64:35:
c4:4d:b4:c0:c5:19:9b:1f:c2:a0:ff:b2:f8:22:b8:
df:7b:99:47:fd:48:8f:6d:4f:9d:2f:4e:89:eb:64:
e0:cf:37:b6:f8:c0:a0:8b:31:c5:4f:83:12:c6:30:
93:e5:56:bc:e2:5d:93:6e:2d:df:c6:ec:6d:bd:cf:
70:66:e4:3c:4a:9e:9f:dc:4d:e0:17:b2:e3:74:73:
81:a1:6c:8a:1c:1e:bf:f4:cc:bc:8a:cb:81:aa:3b:
c2:cf:a8:9c:34:ae:3e:ea:37:6e:c8:b0:26:0b:3a:
f4:c7:bf:ca:9e:bd:f7:8c:57:ea:3c:f9:de:d7:aa:
62:2a:ad:94:e9:93:8e:39:0d:79:f0:6e:34:ed:eb:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:0C:F9:A8:8A:16:C5:7B:7D:02:AA:C3:82:C1:74:42:E1:AB:9D
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5e:2a:31:ee:12:9e:59:39:b5:6d:54:af:7a:09:4b:84:04:
65:03:4b:4a:64:e9:97:eb:e4:87:94:30:52:fd:69:eb:20:6b:
3b:a5:df:15:50:72:e9:42:d5:0f:08:24:ff:f7:70:a4:f6:49:
58:5a:d5:f0:1b:74:c0:62:8d:04:87:14:2f:78:a2:7b:1d:30:
d7:8e:de:07:fe:e5:b2:85:0c:de:13:a7:c5:09:4b:28:6e:3f:
7f:d0:81:4a:bc:b9:10:9a:48:49:bb:e5:73:0b:4d:5d:47:80:
52:49:8e:5f:5d:7f:c5:d5:f5:01:a5:19:9e:c0:6b:c8:b4:f4:
19:ba:fa:37:6c:2a:e5:6f:99:e7:50:9b:d0:27:b4:9a:b4:d9:
5f:e6:31:57:24:38:48:62:19:fe:04:18:81:fe:5e:9a:a5:c1:
31:c7:50:7c:38:e6:28:b7:2d:92:76:c7:f9:9c:ef:4c:90:ed:
40:fc:fa:f6:e0:74:39:ec:d9:b7:0f:ab:4c:57:78:10:22:e7:
77:c2:9f:70:1e:6f:83:06:16:ef:c5:c9:1f:60:8c:1a:d1:ee:
36:c1:f5:b9:f0:d9:ef:54:03:05:05:ad:9f:0b:ad:27:aa:a2:
e5:e0:66:e6:5b:f5:02:1a:ba:dd:66:cf:98:11:a8:a5:e6:ab:
3a:d3:73:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGdbB6upIwNdfyuDSw41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
EygzODVjMGNmOWE4OGExNmM1N2I3ZDAyYWFjMzgyYzE3NDQyZTFhYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYqSlP72XvumWNLf1G6Xyg7bwGi
+BwDhRuK+0wZrYEAa+Ue1++N+pM8ZcPYCIBu+SZoKbGwp6EFOf6/zj5LEGZQQGQY
S5v0isKXrd8dwCxoViTJCqC4wksPdDSMGXP0alo1DaTWa9cXFaIQGOhz0JUVORvm
ZDXETbTAxRmbH8Kg/7L4Irjfe5lH/UiPbU+dL06J62Tgzze2+MCgizHFT4MSxjCT
5Va84l2Tbi3fxuxtvc9wZuQ8Sp6f3E3gF7LjdHOBoWyKHB6/9My8isuBqjvCz6ic
NK4+6jduyLAmCzr0x7/Knr33jFfqPPne16piKq2U6ZOOOQ158G407euH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhcDPmoihbFe30CqsOCwXRC4audMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV4qMe4S
nlk5tW1Ur3oJS4QEZQNLSmTpl+vkh5QwUv1p6yBrO6XfFVBy6ULVDwgk//dwpPZJ
WFrV8Bt0wGKNBIcUL3iiex0w147eB/7lsoUM3hOnxQlLKG4/f9CBSry5EJpISbvl
cwtNXUeAUkmOX11/xdX1AaUZnsBryLT0Gbr6N2wq5W+Z51Cb0Ce0mrTZX+YxVyQ4
SGIZ/gQYgf5emqXBMcdQfDjmKLctknbH+ZzvTJDtQPz69uB0OezZtw+rTFd4ECLn
d8KfcB5vgwYW78XJH2CMGtHuNsH1ufDZ71QDBQWtnwutJ6qi5eBm5lv1Ahq63WbP
mBGopearOtNzDQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:27:28 2025 by rpki-client