Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: Uxt5pb5UBRC2pDyXmGY4kLTwEUqy2pRg8krm0v+0e1I=
Subject key identifier: 64:A2:D4:12:7E:7E:1D:9D:D7:FF:A8:BD:C9:67:CF:64:1A:71:85:61
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 0194BC7287759838F6FA50848B787BC584F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: Ayoc6nB3L+ceIjoyW5neHKTvZWeD+hpmkvcD67sEfZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:87:75:98:38:f6:fa:50:84:8b:78:7b:c5:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=64a2d4127e7e1d9dd7ffa8bdc967cf641a718561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:32:48:fd:07:20:43:61:10:76:66:9c:b8:
f7:a3:ba:11:84:59:66:f2:39:87:68:c5:a2:84:2b:
a4:e5:74:1d:0a:26:77:76:85:0e:a3:b3:c6:2d:cf:
6b:e0:e2:29:a3:a1:3a:ea:c8:95:a5:36:e9:60:9f:
86:e8:f2:c3:f9:43:d5:5e:a2:62:01:04:dd:57:2f:
de:07:86:f9:51:a0:9a:dc:9f:d3:07:45:e5:db:18:
20:85:69:3a:7c:b0:bf:40:5b:42:16:09:b1:aa:35:
52:0f:9b:55:80:2d:fd:0c:b0:0a:2a:5e:02:b0:ee:
1d:c9:64:83:14:98:cf:48:67:89:cc:68:01:ed:15:
d3:6b:02:3a:d0:13:b5:65:bf:a4:10:47:51:d9:c7:
2e:0b:f4:c4:2e:df:19:9d:9b:c4:6d:7e:36:9b:2f:
b7:94:46:1c:62:96:c4:0c:b5:58:bc:e9:65:9f:53:
70:d7:37:cd:9d:f2:4e:73:20:f0:f5:08:ce:66:9a:
20:68:1b:db:3e:6f:6f:ec:a5:b4:66:e6:c2:79:8d:
60:25:9e:07:f3:8e:45:da:1b:44:b5:29:cd:4d:15:
26:60:98:da:a2:af:0e:cc:2a:bf:e0:f9:93:ef:66:
f3:e9:6b:0d:c4:d1:e9:03:6c:49:84:81:bd:f9:2e:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:D4:12:7E:7E:1D:9D:D7:FF:A8:BD:C9:67:CF:64:1A:71:85:61
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:50:02:69:40:2f:78:ee:c1:7a:77:46:a1:b1:62:79:04:39:
3c:ca:20:0d:c8:18:32:52:4a:2d:87:b0:45:a7:1c:55:21:02:
cd:b4:4c:a8:27:e9:d0:24:bf:57:f0:b6:b6:3b:4d:c8:91:f9:
2d:d5:b6:ba:7b:e6:1e:2f:b8:1b:83:d5:00:22:1c:89:20:b1:
24:bf:d0:be:07:21:45:5a:9c:16:71:c9:60:81:e4:25:65:e8:
45:f2:a1:72:93:84:4d:53:97:5d:13:6c:e5:0c:a6:5c:96:00:
83:bd:02:60:25:a3:8d:45:29:fb:49:27:c5:88:02:f9:e4:c3:
8e:c8:36:eb:79:0f:ec:dc:2a:39:a1:af:74:ec:41:79:8a:ab:
00:3f:af:e5:73:80:84:4d:4e:7b:df:ef:84:14:3b:6c:16:4a:
63:32:c4:16:c3:ca:1b:45:1f:34:de:d4:06:f5:e2:01:c6:9a:
be:bc:8f:86:46:57:1d:46:cc:44:79:c5:7b:41:0f:b4:ff:c4:
94:4e:bc:7e:88:a2:0d:3d:85:f1:79:21:39:8d:bb:1e:ce:7e:
bf:de:93:27:f9:5d:94:b3:46:1d:48:9c:18:a4:b8:b5:9e:9e:
ee:5a:b3:4f:b9:39:7c:53:af:90:c2:20:75:8b:b1:6d:8f:40:
1d:b2:a2:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cod1mDj2+lCEi3h7xYT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw
ZDdmMzEwHhcNMjUwMTMxMTMwMDA5WhcNMjUwMjAxMTMwMDA5WjAzMTEwLwYDVQQD
Eyg2NGEyZDQxMjdlN2UxZDlkZDdmZmE4YmRjOTY3Y2Y2NDFhNzE4NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuckySP0HIENhEHZmnLj3o7oRhFlm
8jmHaMWihCuk5XQdCiZ3doUOo7PGLc9r4OIpo6E66siVpTbpYJ+G6PLD+UPVXqJi
AQTdVy/eB4b5UaCa3J/TB0Xl2xgghWk6fLC/QFtCFgmxqjVSD5tVgC39DLAKKl4C
sO4dyWSDFJjPSGeJzGgB7RXTawI60BO1Zb+kEEdR2ccuC/TELt8ZnZvEbX42my+3
lEYcYpbEDLVYvOlln1Nw1zfNnfJOcyDw9QjOZpogaBvbPm9v7KW0ZubCeY1gJZ4H
845F2htEtSnNTRUmYJjaoq8OzCq/4PmT72bz6WsNxNHpA2xJhIG9+S4qbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSi1BJ+fh2d1/+ovclnz2QacYVhMB8GA1UdIwQY
MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt
YjFlNjk4NzA4ZjU5LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5
LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFACaUAv
eO7BendGobFieQQ5PMogDcgYMlJKLYewRaccVSECzbRMqCfp0CS/V/C2tjtNyJH5
LdW2unvmHi+4G4PVACIciSCxJL/QvgchRVqcFnHJYIHkJWXoRfKhcpOETVOXXRNs
5QymXJYAg70CYCWjjUUp+0knxYgC+eTDjsg263kP7NwqOaGvdOxBeYqrAD+v5XOA
hE1Oe9/vhBQ7bBZKYzLEFsPKG0UfNN7UBvXiAcaavryPhkZXHUbMRHnFe0EPtP/E
lE68foiiDT2F8XkhOY27Hs5+v96TJ/ldlLNGHUicGKS4tZ6e7lqzT7k5fFOvkMIg
dYuxbY9AHbKiWw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:44 2025 by rpki-client