Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: k+7VP/i7VIpWRj27uAGD5XL26XczgPsVEOsVZ9i0djo=
Subject key identifier: C3:C2:D3:FD:C9:B3:5B:CD:7E:6D:D6:AB:84:62:63:08:9D:5E:83:2A
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 0194BC04FFBE6CD5338A207DBCDF21582074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0807
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: s25obiISkuVw8pV5eWirRQAHTt9t/m8P4mUj+0uNkrw=)
2: T5kWJ0zgWJZajIuh22W4Yozr5Js.roa (hash: nOTln1QfZH/4DaY3ZoWPaEWuEELecZ3pWov8YJOX40U=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:be:6c:d5:33:8a:20:7d:bc:df:21:58:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=c3c2d3fdc9b35bcd7e6dd6ab846263089d5e832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cc:c3:21:d5:55:e8:fe:ff:19:a7:24:46:9b:
19:e7:58:b9:92:75:3e:a3:be:5e:d0:85:c8:03:f2:
ae:17:89:b8:de:a9:ac:31:1a:42:d7:bd:e9:5f:53:
30:4d:eb:7a:82:de:49:eb:eb:02:7b:f8:71:04:51:
9d:24:35:14:52:ce:53:8f:93:84:c9:d7:43:d8:84:
9a:7f:bb:cf:65:64:0d:cc:ce:64:b2:f5:10:7d:f6:
86:14:c7:f1:36:01:6f:81:25:a3:97:a8:79:0a:cd:
3e:e2:f2:b2:5b:6a:1e:d5:68:07:e8:94:26:16:8d:
2a:b2:d8:72:eb:96:d1:c5:03:ae:5c:20:5b:b2:69:
cc:cb:b2:e6:b7:d2:40:44:b2:c8:c9:f4:ce:75:63:
ee:6a:d6:32:09:9b:64:b8:91:fb:eb:e1:83:41:27:
2b:79:3f:d0:82:ba:8d:77:28:36:73:22:d6:8b:e7:
12:c3:43:b5:a9:2f:25:9a:93:b3:32:c0:18:1f:ef:
47:91:7b:93:ce:9b:c5:42:87:51:11:21:3d:5f:a7:
e5:08:4d:3d:f1:38:63:10:6d:65:39:3d:47:d2:99:
de:67:21:e4:63:e9:27:47:4c:5a:ec:9d:de:a9:66:
58:84:e0:55:df:6c:6b:ef:f9:e3:38:83:c8:a7:d9:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:D3:FD:C9:B3:5B:CD:7E:6D:D6:AB:84:62:63:08:9D:5E:83:2A
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:16:87:fb:74:32:ff:07:d4:9b:03:da:f1:6d:32:98:79:
bc:6f:49:2f:2a:ae:6c:97:fd:bf:fd:9f:3f:f1:0c:55:99:3d:
b6:91:8c:da:86:13:da:0b:ab:04:77:be:b1:b3:4e:f5:04:f1:
05:0a:3c:70:f5:75:cf:44:a3:b5:c2:1b:2c:22:36:11:ed:fb:
47:ae:24:11:0f:92:5e:b4:07:9f:78:68:8a:b0:13:14:e9:a8:
f6:40:72:00:94:20:0b:3a:d8:29:94:53:60:2c:cd:95:d1:01:
f3:06:d9:93:6e:01:87:43:16:ed:81:0e:ba:a3:b5:15:42:8d:
1e:f4:61:fa:ce:06:61:db:00:0b:11:73:a8:91:34:fd:14:00:
52:e4:6b:74:95:19:b9:aa:ad:c1:98:d0:dc:9d:cd:53:2e:2d:
7a:6a:83:1a:0c:c7:df:d9:88:57:93:b5:3a:d2:71:8e:2e:b5:
c5:bd:ea:af:84:38:50:94:6d:0e:93:e2:b4:26:a7:c0:78:37:
d5:1e:c0:a2:87:8b:8a:e4:44:03:49:54:15:bc:e3:eb:4f:00:
36:ac:df:38:05:60:42:59:61:52:4a:8b:41:3c:86:18:e8:2d:
68:93:b3:6d:01:3d:2a:bb:6a:a0:90:60:26:c7:3e:b4:cc:db:
9b:2e:69:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BP++bNUziiB9vN8hWCB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDYxNDJjZTMyOTBhYjY3ODZkM2QzMGYyNmI1ZTQxZmQ2
ODRkZGUwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
EyhjM2MyZDNmZGM5YjM1YmNkN2U2ZGQ2YWI4NDYyNjMwODlkNWU4MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MzDIdVV6P7/GackRpsZ51i5knU+
o75e0IXIA/KuF4m43qmsMRpC173pX1MwTet6gt5J6+sCe/hxBFGdJDUUUs5Tj5OE
yddD2ISaf7vPZWQNzM5ksvUQffaGFMfxNgFvgSWjl6h5Cs0+4vKyW2oe1WgH6JQm
Fo0qsthy65bRxQOuXCBbsmnMy7Lmt9JARLLIyfTOdWPuatYyCZtkuJH76+GDQScr
eT/QgrqNdyg2cyLWi+cSw0O1qS8lmpOzMsAYH+9HkXuTzpvFQodRESE9X6flCE09
8ThjEG1lOT1H0pneZyHkY+knR0xa7J3eqWZYhOBV32xr7/njOIPIp9m12QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPC0/3Js1vNfm3Wq4RiYwidXoMqMB8GA1UdIwQY
MBaAFDZGFCzjKQq2eG09MPJrXkH9aE3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTct
ZDMwODU0MmExZDg2LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTctZDMwODU0MmExZDg2
LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5AWh/t0
Mv8H1JsD2vFtMph5vG9JLyqubJf9v/2fP/EMVZk9tpGM2oYT2gurBHe+sbNO9QTx
BQo8cPV1z0SjtcIbLCI2Ee37R64kEQ+SXrQHn3hoirATFOmo9kByAJQgCzrYKZRT
YCzNldEB8wbZk24Bh0MW7YEOuqO1FUKNHvRh+s4GYdsACxFzqJE0/RQAUuRrdJUZ
uaqtwZjQ3J3NUy4temqDGgzH39mIV5O1OtJxji61xb3qr4Q4UJRtDpPitCanwHg3
1R7AooeLiuREA0lUFbzj608ANqzfOAVgQllhUkqLQTyGGOgtaJOzbQE9KrtqoJBg
Jsc+tMzbmy5pkQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:46:00 2025 by rpki-client