Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: dLzwRRUrWZMaKlcMb6jaZt7qQywAX7TAKRL4HyFJ71Q=
Subject key identifier: 2C:4C:65:AA:3C:7C:A2:AD:40:0B:75:56:2A:B5:90:77:A5:D0:37:92
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 0194BD4EA6A43A4620A5AD3E30D9BE3D06FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 131B
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: 30Hpoy2TC/L5Kceir1w/VKJkwHpsPHJlvdldHIby3/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:a4:3a:46:20:a5:ad:3e:30:d9:be:3d:06:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=2c4c65aa3c7ca2ad400b75562ab59077a5d03792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:0d:e2:1c:eb:70:3a:e6:7e:3c:1c:2c:7b:
36:d4:39:52:78:ec:f3:ec:a8:93:2c:8d:fe:8b:50:
bc:99:80:1d:3e:4f:3c:3b:bf:68:65:ba:a8:24:7e:
1b:b6:a2:af:d9:34:d1:58:a5:5f:89:57:7b:96:eb:
7b:b9:47:19:d2:a0:82:8e:60:a3:40:0c:c0:f2:ec:
8e:d0:0a:c2:22:fd:c9:cd:3e:ba:94:0c:2c:88:f6:
ed:bd:5f:f1:c2:09:0b:d6:06:85:f9:b9:3b:0f:d4:
d3:8c:53:67:f8:4d:70:35:86:c1:17:65:9c:6d:69:
67:d0:df:98:af:6a:4b:0e:32:e1:be:af:51:73:97:
3e:30:bf:28:3e:ed:7c:f7:0b:fe:b3:a6:4a:05:49:
d8:45:e7:b6:1c:b7:a1:4c:31:ee:2d:f4:1b:4e:76:
6d:cf:b2:93:b0:cf:a9:e0:58:f6:b3:b5:bc:07:2e:
30:79:1e:61:a6:a2:08:b7:5e:5f:b9:3f:91:9c:08:
76:8f:8a:f5:1e:67:19:fb:1e:2c:7f:0e:26:da:ff:
d1:0d:c0:b7:58:66:f4:8c:85:9b:77:b2:e2:08:c2:
f8:98:8e:62:8a:ff:73:ad:94:f0:9e:60:db:1e:a9:
a2:5d:f0:de:52:2f:85:b5:d4:77:41:ed:f4:22:0f:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:65:AA:3C:7C:A2:AD:40:0B:75:56:2A:B5:90:77:A5:D0:37:92
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d4:89:51:b8:6d:8d:da:cd:f7:d0:d1:a9:c0:1c:aa:76:51:
c3:80:6a:76:51:c0:7d:20:2b:c6:d4:c5:17:6a:08:10:93:87:
6d:d4:81:c7:e9:d9:d2:3d:e8:36:cf:04:c3:fe:b1:40:06:79:
db:b1:e9:48:15:e5:6d:aa:81:40:c9:83:de:1d:3c:ee:06:09:
dd:af:43:85:04:ab:73:a8:d3:66:79:bb:b4:f0:fb:67:53:15:
d8:d2:e0:7a:11:8c:08:d1:63:6e:b9:c0:3b:3c:3c:d3:e2:10:
04:45:4c:7c:7c:ad:ce:ea:91:53:47:50:87:4c:06:4d:35:44:
66:48:e5:4e:d6:a8:65:17:29:76:e0:bd:0c:ac:59:e9:53:e8:
37:d1:b7:53:fd:dd:d8:41:b9:18:59:ec:46:1c:ca:77:c3:29:
6b:8f:c4:07:2d:67:be:80:d1:ef:6c:22:e3:e3:2e:a8:f6:3d:
3e:78:ee:eb:69:58:d0:9d:d0:14:8a:2f:95:72:cc:04:37:f8:
6e:2d:45:2f:98:5d:f1:b5:0d:4e:4d:b6:c5:77:08:14:55:79:
37:d1:3f:49:6c:27:89:6b:83:d4:5c:65:68:df:72:e2:b6:b5:
a9:f5:76:30:7c:29:83:fd:fc:b6:63:be:40:a9:26:38:cf:a5:
20:c5:4d:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqakOkYgpa0+MNm+PQb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGFkYTM1Mjk4MmEzMTliNTRkNWU0ODNkMzQ0MjYzNDY3
MzNlYTQwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
EygyYzRjNjVhYTNjN2NhMmFkNDAwYjc1NTYyYWI1OTA3N2E1ZDAzNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK4N4hzrcDrmfjwcLHs21DlSeOzz
7KiTLI3+i1C8mYAdPk88O79oZbqoJH4btqKv2TTRWKVfiVd7lut7uUcZ0qCCjmCj
QAzA8uyO0ArCIv3JzT66lAwsiPbtvV/xwgkL1gaF+bk7D9TTjFNn+E1wNYbBF2Wc
bWln0N+Yr2pLDjLhvq9Rc5c+ML8oPu189wv+s6ZKBUnYRee2HLehTDHuLfQbTnZt
z7KTsM+p4Fj2s7W8By4weR5hpqIIt15fuT+RnAh2j4r1HmcZ+x4sfw4m2v/RDcC3
WGb0jIWbd7LiCML4mI5iiv9zrZTwnmDbHqmiXfDeUi+FtdR3Qe30Ig9zGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxMZao8fKKtQAt1Viq1kHel0DeSMB8GA1UdIwQY
MBaAFJ2K2jUpgqMZtU1eSD00QmNGcz6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQt
ZWQ0YTEzOGM0MTEzLzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQtZWQ0YTEzOGM0MTEz
LzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtSJUbht
jdrN99DRqcAcqnZRw4BqdlHAfSArxtTFF2oIEJOHbdSBx+nZ0j3oNs8Ew/6xQAZ5
27HpSBXlbaqBQMmD3h087gYJ3a9DhQSrc6jTZnm7tPD7Z1MV2NLgehGMCNFjbrnA
Ozw80+IQBEVMfHytzuqRU0dQh0wGTTVEZkjlTtaoZRcpduC9DKxZ6VPoN9G3U/3d
2EG5GFnsRhzKd8Mpa4/EBy1nvoDR72wi4+MuqPY9Pnju62lY0J3QFIovlXLMBDf4
bi1FL5hd8bUNTk22xXcIFFV5N9E/SWwniWuD1FxlaN9y4ra1qfV2MHwpg/38tmO+
QKkmOM+lIMVNlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:29 2025 by rpki-client