Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
File: NgHDzOanHKshpLut8KuE3ePyurI.mft (raw, json)
Hash identifier: uLvTekz1cMy05p7cIebLuhWcc32o2soO0pkn4taoIwc=
Subject key identifier: AB:90:D7:68:ED:CB:29:CA:61:56:C2:8C:60:46:23:BC:4D:D6:F4:CE
Authority key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Certificate issuer: /CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Certificate serial: 0194BBCE62D0BB1BC07B68764B6E220749EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: Mk7YYF4o9LB74wKwKgBbcKzvyH8.roa (hash: OCqXIpcMD6jOp7DHnSx2liWfa4cjdFDkG92oQWOUUNo=)
2: NgHDzOanHKshpLut8KuE3ePyurI.crl (hash: ZSsc4ESu11IN8lfh7Fmjk0VtejwCtpiFbmTMclCYUwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:62:d0:bb:1b:c0:7b:68:76:4b:6e:22:07:49:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=ab90d768edcb29ca6156c28c604623bc4dd6f4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:a7:2d:11:a3:62:38:2a:12:41:96:2e:d9:
a5:a3:c1:46:b8:fa:dd:24:d8:dd:c5:d2:6a:bb:50:
6f:c4:90:f1:f5:9e:fc:64:28:b0:0d:7c:b2:a8:41:
bd:c7:0c:de:ff:98:fa:fb:c8:da:22:6f:9c:d4:b6:
92:6c:8a:ba:85:21:8a:af:8e:7c:32:03:3e:02:3a:
da:82:96:c4:52:ad:17:c0:0d:a9:df:f8:7e:1e:03:
b6:9b:2f:ed:ea:34:dc:cf:c6:05:b3:b6:ca:fa:ff:
59:8a:a8:7b:db:c0:a6:23:8c:07:ba:47:2d:71:0e:
d7:1a:2b:f3:26:79:bf:b3:88:c4:60:65:ff:21:d6:
df:98:c0:c1:00:c3:27:82:52:b9:51:9d:f1:98:7b:
07:c7:91:11:d9:b1:95:18:89:cb:b8:88:10:e3:66:
58:1e:d4:9b:2a:8f:3d:66:68:68:b1:fc:58:ed:2a:
04:e5:37:c7:a1:97:c8:ce:e0:4a:aa:d8:36:e7:0f:
c6:ef:6a:3a:06:98:4b:3d:88:52:58:c7:d0:b1:65:
b2:e8:96:65:9a:a3:47:b3:12:54:d7:99:0c:91:69:
a9:b9:ac:c7:df:cb:56:6d:78:21:bf:08:9a:13:82:
f8:89:0f:f6:74:f5:96:a6:9f:52:6f:53:35:f5:cd:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:D7:68:ED:CB:29:CA:61:56:C2:8C:60:46:23:BC:4D:D6:F4:CE
X509v3 Authority Key Identifier:
keyid:36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:77:9b:24:bf:61:8a:b1:91:ce:a5:b1:88:aa:05:d6:7b:
86:bc:eb:d0:1f:a9:9e:b3:87:68:fc:a9:3a:f5:1c:00:cb:61:
4f:9f:a4:d0:e0:55:74:1c:ec:94:f4:36:c3:a1:e8:5f:57:03:
65:28:b5:ed:f7:f7:b3:c7:90:81:06:96:7f:fa:c1:78:20:9a:
61:c1:44:92:30:4a:09:7c:03:cb:d4:92:63:68:7a:5b:93:ca:
43:4e:d5:f0:95:11:db:77:e1:8b:ac:bf:18:db:99:a4:5e:89:
99:88:3b:d8:39:79:e8:e2:53:1e:23:23:ca:3c:9f:a6:38:dc:
6b:6c:41:5e:10:d5:bc:0b:1d:88:3c:94:30:7e:72:78:43:2d:
2f:76:fb:09:71:2f:b4:8d:d0:d3:96:31:cb:76:73:89:ce:c0:
2f:f8:09:c7:c2:f8:cd:fd:51:31:30:03:9d:26:76:a0:81:cc:
43:81:00:94:ab:8b:6a:56:ca:5e:b6:70:4f:eb:35:bc:b7:4c:
96:67:f9:37:b8:08:b5:de:f1:4c:cd:28:0f:41:58:86:07:79:
67:bc:43:d0:2e:b4:15:6d:31:07:83:be:d6:c7:21:46:9b:fe:
02:9e:c5:3a:4b:d1:b2:22:ea:71:7f:b2:93:75:59:47:27:27:
40:da:7a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmLQuxvAe2h2S24iB0nuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MDFjM2NjZTZhNzFjYWIyMWE0YmJhZGYwYWI4NGRkZTNm
MmJhYjIwHhcNMjUwMTMxMTAwMDUyWhcNMjUwMjAxMTAwMDUyWjAzMTEwLwYDVQQD
EyhhYjkwZDc2OGVkY2IyOWNhNjE1NmMyOGM2MDQ2MjNiYzRkZDZmNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ2nLRGjYjgqEkGWLtmlo8FGuPrd
JNjdxdJqu1BvxJDx9Z78ZCiwDXyyqEG9xwze/5j6+8jaIm+c1LaSbIq6hSGKr458
MgM+AjragpbEUq0XwA2p3/h+HgO2my/t6jTcz8YFs7bK+v9Ziqh728CmI4wHukct
cQ7XGivzJnm/s4jEYGX/IdbfmMDBAMMnglK5UZ3xmHsHx5ER2bGVGInLuIgQ42ZY
HtSbKo89ZmhosfxY7SoE5TfHoZfIzuBKqtg25w/G72o6BphLPYhSWMfQsWWy6JZl
mqNHsxJU15kMkWmpuazH38tWbXghvwiaE4L4iQ/2dPWWpp9Sb1M19c3qUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuQ12jtyynKYVbCjGBGI7xN1vTOMB8GA1UdIwQY
MBaAFDYBw8zmpxyrIaS7rfCrhN3j8rqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdIRHpPYW5IS3NocEx1dDhLdUUzZVB5dXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZjBhMDEtMGNjNC00ZWZjLTlkZDUt
ODAxZWYzOGRlYTljLzEvTmdIRHpPYW5IS3NocEx1dDhLdUUzZVB5dXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wZjBhMDEtMGNjNC00ZWZjLTlkZDUtODAxZWYzOGRlYTlj
LzEvTmdIRHpPYW5IS3NocEx1dDhLdUUzZVB5dXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsx3myS/
YYqxkc6lsYiqBdZ7hrzr0B+pnrOHaPypOvUcAMthT5+k0OBVdBzslPQ2w6HoX1cD
ZSi17ff3s8eQgQaWf/rBeCCaYcFEkjBKCXwDy9SSY2h6W5PKQ07V8JUR23fhi6y/
GNuZpF6JmYg72Dl56OJTHiMjyjyfpjjca2xBXhDVvAsdiDyUMH5yeEMtL3b7CXEv
tI3Q05Yxy3Zzic7AL/gJx8L4zf1RMTADnSZ2oIHMQ4EAlKuLalbKXrZwT+s1vLdM
lmf5N7gItd7xTM0oD0FYhgd5Z7xD0C60FW0xB4O+1schRpv+Ap7FOkvRsiLqcX+y
k3VZRycnQNp6jw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:37 2025 by rpki-client