Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: RRNBMtngaPoE9nG9LLzS5NNuVJSPty9euWi7GGjiauI=
Subject key identifier: F9:B2:55:C3:B8:48:87:0D:51:74:82:2A:BC:0B:DE:78:C3:61:6B:2D
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 0194BC7330A5F0AAFB1AF6B31E623190F7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: seHAPpnycRPlrHVdWSe9unmGpjxmBG3E8WdvtWIczr0=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:30:a5:f0:aa:fb:1a:f6:b3:1e:62:31:90:f7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=f9b255c3b848870d5174822abc0bde78c3616b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:c8:11:cf:c3:8e:19:c9:5c:b9:ae:1e:40:
98:9e:c3:da:e4:70:79:f5:81:45:e4:da:82:ab:65:
7c:5c:2b:72:66:9b:26:8f:ac:47:a8:9c:50:c5:df:
a1:0a:3e:df:ea:08:13:a3:7d:a4:1b:70:5c:9a:f1:
c1:dc:35:6d:1a:1a:aa:b7:bb:1e:26:68:66:ed:96:
c4:b0:9f:a2:c5:b6:09:9d:26:5d:00:85:d3:9a:a3:
5f:f8:e5:8e:ee:08:e8:cf:66:29:99:21:07:bd:d1:
cc:e6:25:93:63:dc:60:a1:40:05:48:dc:3e:50:f2:
25:20:38:2b:0e:f1:0a:4e:ac:93:e9:af:ec:1e:dd:
47:9d:80:8e:dc:aa:a1:40:29:81:33:df:47:5e:28:
fe:b1:2b:0d:a0:78:6b:7c:eb:a7:da:33:c1:23:87:
0a:96:67:62:8a:a0:a4:31:20:be:47:e3:3f:15:ad:
e1:6f:cb:05:d6:b8:e7:06:dc:6a:a7:13:a8:d6:fd:
9b:fd:99:1b:f4:eb:7c:e6:84:c3:78:5e:51:d6:d3:
00:15:b2:b0:19:b4:a9:8a:e8:d7:01:77:45:e8:56:
f3:85:2b:27:d8:40:3c:5f:22:49:78:0d:7c:04:89:
d0:69:a5:03:b4:39:5a:0c:ca:79:f0:73:8b:33:6a:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:55:C3:B8:48:87:0D:51:74:82:2A:BC:0B:DE:78:C3:61:6B:2D
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f4:d5:88:fd:fe:b7:d8:93:fb:f8:98:e6:03:c6:68:6d:45:
f3:01:cb:5f:19:c6:25:76:a1:dd:66:22:8f:ba:2d:78:7d:f8:
dd:9e:d2:3f:52:59:50:d5:37:20:af:ad:11:84:8f:e0:2a:d1:
75:b6:cb:6f:38:3c:b1:5f:40:26:fd:12:5a:f5:bf:67:f5:b1:
3a:3b:4d:17:9e:8d:97:ea:08:5c:07:69:04:42:a2:2a:6a:7e:
13:81:35:9b:a9:54:0b:1d:4c:05:f5:23:5b:2d:a7:19:df:d4:
15:00:d1:77:b6:45:01:c3:0e:46:c7:6a:b0:cf:b0:4e:19:b2:
09:b8:7a:40:af:5c:65:05:44:e6:a3:63:72:fb:d4:e5:cb:17:
ef:4a:67:4f:e4:84:06:e3:a0:cc:e3:0d:0f:03:0c:fb:53:1f:
17:ca:af:e0:6a:9a:08:5a:34:98:6e:6e:00:90:c0:b4:98:69:
44:91:8f:3d:4f:02:26:b6:e8:8c:52:1c:82:39:a5:7f:3c:af:
ef:48:56:69:8f:55:67:92:7d:2e:b3:28:bd:85:d8:4d:b0:51:
80:6c:04:9a:4f:a1:d2:89:6a:a6:84:40:e5:6e:8e:4e:1c:ac:
50:11:d6:e9:c9:da:c6:7e:2c:2f:07:fb:6f:2d:b7:af:9a:09:
a6:cd:3d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8czCl8Kr7GvazHmIxkPfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3N2MyNjRkMzg4MzMzZDM0MjM3MjkzMWFhMGQxOTJiMGZi
YTYyYzEwHhcNMjUwMTMxMTMwMDUzWhcNMjUwMjAxMTMwMDUzWjAzMTEwLwYDVQQD
EyhmOWIyNTVjM2I4NDg4NzBkNTE3NDgyMmFiYzBiZGU3OGMzNjE2YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ7IEc/DjhnJXLmuHkCYnsPa5HB5
9YFF5NqCq2V8XCtyZpsmj6xHqJxQxd+hCj7f6ggTo32kG3BcmvHB3DVtGhqqt7se
Jmhm7ZbEsJ+ixbYJnSZdAIXTmqNf+OWO7gjoz2YpmSEHvdHM5iWTY9xgoUAFSNw+
UPIlIDgrDvEKTqyT6a/sHt1HnYCO3KqhQCmBM99HXij+sSsNoHhrfOun2jPBI4cK
lmdiiqCkMSC+R+M/Fa3hb8sF1rjnBtxqpxOo1v2b/Zkb9Ot85oTDeF5R1tMAFbKw
GbSpiujXAXdF6FbzhSsn2EA8XyJJeA18BInQaaUDtDlaDMp58HOLM2ocYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmyVcO4SIcNUXSCKrwL3njDYWstMB8GA1UdIwQY
MBaAFDd8Jk04gzPTQjcpMaoNGSsPumLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjUyYTktMmU0Mi00MjI4LWI1NDAt
ZTYwNjRlZmNlMmFjLzEvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjUyYTktMmU0Mi00MjI4LWI1NDAtZTYwNjRlZmNlMmFj
LzEvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPTViP3+
t9iT+/iY5gPGaG1F8wHLXxnGJXah3WYij7oteH343Z7SP1JZUNU3IK+tEYSP4CrR
dbbLbzg8sV9AJv0SWvW/Z/WxOjtNF56Nl+oIXAdpBEKiKmp+E4E1m6lUCx1MBfUj
Wy2nGd/UFQDRd7ZFAcMORsdqsM+wThmyCbh6QK9cZQVE5qNjcvvU5csX70pnT+SE
BuOgzOMNDwMM+1MfF8qv4GqaCFo0mG5uAJDAtJhpRJGPPU8CJrbojFIcgjmlfzyv
70hWaY9VZ5J9LrMovYXYTbBRgGwEmk+h0olqpoRA5W6OThysUBHW6cnaxn4sLwf7
by23r5oJps09zw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:23 2025 by rpki-client