Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: l3oXCs0hb6qp7wmnTsbzQpOWJuT88XY5SddzGv0vl2E=
Subject key identifier: F1:A1:1F:D2:8B:71:CF:EE:AF:53:B5:2C:93:C4:6E:6D:9A:08:34:31
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 0194BC7325338DB6437F5F048ACEB711D3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 0353
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: PoV0mlNHqs9FaewpoVLJJkUyg/VpU9w8EneVoaCpCik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:33:8d:b6:43:7f:5f:04:8a:ce:b7:11:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=f1a11fd28b71cfeeaf53b52c93c46e6d9a083431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:7d:e2:ce:c4:1e:cf:1c:ae:c2:95:ee:c8:
2f:80:c7:00:5f:e0:cf:5c:4b:9b:4b:06:1f:63:46:
1a:07:6f:88:9e:f3:29:a8:45:24:22:b4:e4:b9:b0:
70:ef:b2:f8:de:3e:ed:90:40:2e:05:fe:f0:62:38:
25:2a:dd:03:64:cc:4b:48:5d:4a:4b:eb:5e:91:f2:
67:95:e1:bc:f6:0a:3c:5b:e0:b1:11:56:5d:d4:aa:
6e:9f:7b:27:4f:b2:3e:25:d9:0b:d6:73:0c:9d:34:
6e:c9:38:35:dc:45:68:3e:e7:ac:9f:af:44:4d:e4:
43:7f:cc:7b:63:a2:24:4c:85:31:f9:67:1b:95:e5:
a3:49:2c:13:b5:cd:91:41:08:75:10:fc:dc:23:ef:
98:63:8f:1e:1b:ad:6e:cf:6d:74:a2:b8:28:54:60:
61:e3:28:e8:f0:10:0d:50:c6:c3:55:f3:d0:6f:d4:
cb:ec:d6:18:0d:db:29:43:cc:3f:7d:fe:cf:b2:48:
1c:82:63:ae:1f:73:16:2c:c0:01:83:1a:d2:2a:b6:
1c:cf:00:e3:c3:f2:9e:15:a3:ed:12:ee:c2:e0:bf:
db:29:a5:77:f7:d7:ef:01:ac:f0:25:04:d3:64:28:
77:d8:29:c0:5a:ff:ae:04:43:62:80:bb:7f:10:d1:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:1F:D2:8B:71:CF:EE:AF:53:B5:2C:93:C4:6E:6D:9A:08:34:31
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:92:36:5b:47:71:3f:31:95:8b:12:1a:5d:a9:b3:ab:c8:
20:5e:60:8f:e2:6c:8c:2d:73:64:9a:95:e7:56:74:c7:68:3d:
c0:48:b2:45:1f:29:81:90:48:ad:fd:d3:97:30:f5:f7:ec:9b:
62:be:f1:4d:a7:b7:47:b0:ad:d4:ba:11:5e:ea:e1:6e:83:5e:
a4:f5:60:c5:dc:ce:32:6c:c8:2b:e4:7c:27:82:2d:90:01:2a:
2a:cb:13:d1:a0:03:81:34:85:72:4b:9a:cc:2d:bf:9d:ec:93:
0e:7a:b7:9d:a8:8a:9f:23:2a:99:64:be:b9:1f:04:ab:7d:e2:
88:7f:35:3c:5e:95:89:ef:38:2c:3e:a2:de:c6:f7:02:9f:d2:
a9:4c:7a:3e:92:95:be:7f:c2:18:65:0a:e3:00:65:2d:88:e4:
c6:b7:56:5f:1b:66:2d:b1:5e:30:8d:dd:99:eb:26:c0:ef:ba:
96:70:95:c3:f6:02:9d:20:db:9f:e7:0d:c9:96:7d:d1:c4:14:
75:83:d0:d6:a4:f1:f2:d4:b4:c2:1a:cf:a6:9a:0f:30:74:05:
ef:df:92:76:0a:d4:42:17:a5:5a:55:4c:b5:20:92:12:08:69:
f6:37:32:d7:d0:5a:10:a3:e1:d9:63:15:c6:d1:39:94:0c:dc:
98:8e:bd:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyUzjbZDf18Eis63EdPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzcwOTVlMDQ1OTg2MDUzYjliM2U4Nzg5MDM2NzI2ODM3
ZGQxZjUwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhmMWExMWZkMjhiNzFjZmVlYWY1M2I1MmM5M2M0NmU2ZDlhMDgzNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuF94s7EHs8crsKV7sgvgMcAX+DP
XEubSwYfY0YaB2+InvMpqEUkIrTkubBw77L43j7tkEAuBf7wYjglKt0DZMxLSF1K
S+tekfJnleG89go8W+CxEVZd1Kpun3snT7I+JdkL1nMMnTRuyTg13EVoPuesn69E
TeRDf8x7Y6IkTIUx+WcbleWjSSwTtc2RQQh1EPzcI++YY48eG61uz210orgoVGBh
4yjo8BANUMbDVfPQb9TL7NYYDdspQ8w/ff7PskgcgmOuH3MWLMABgxrSKrYczwDj
w/KeFaPtEu7C4L/bKaV399fvAazwJQTTZCh32CnAWv+uBENigLt/ENFIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGhH9KLcc/ur1O1LJPEbm2aCDQxMB8GA1UdIwQY
MBaAFDbHCV4EWYYFO5s+h4kDZyaDfdH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3Yjgt
NmQ4YTY5YTBhZDQzLzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3YjgtNmQ4YTY5YTBhZDQz
LzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP6SNltH
cT8xlYsSGl2ps6vIIF5gj+JsjC1zZJqV51Z0x2g9wEiyRR8pgZBIrf3TlzD19+yb
Yr7xTae3R7Ct1LoRXurhboNepPVgxdzOMmzIK+R8J4ItkAEqKssT0aADgTSFckua
zC2/neyTDnq3naiKnyMqmWS+uR8Eq33iiH81PF6Vie84LD6i3sb3Ap/SqUx6PpKV
vn/CGGUK4wBlLYjkxrdWXxtmLbFeMI3dmesmwO+6lnCVw/YCnSDbn+cNyZZ90cQU
dYPQ1qTx8tS0whrPppoPMHQF79+SdgrUQhelWlVMtSCSEghp9jcy19BaEKPh2WMV
xtE5lAzcmI69EQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:55 2025 by rpki-client