Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: Io23kMv5bSHjp5a7Gej7bVZKk36+Z0Zqmb7wkwEus4o=
Subject key identifier: 54:EF:29:36:21:1A:2A:59:F1:8D:4C:26:36:48:DB:F0:1C:38:3F:E5
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 0194BC3C60BC565409133E5AE11EC42751FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: q+gPcZAHHgzoynBMtbvJcpwpwtNjxJ3exiks/XZrkEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:bc:56:54:09:13:3e:5a:e1:1e:c4:27:51:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=54ef2936211a2a59f18d4c263648dbf01c383fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:0c:3c:03:93:48:a4:70:8c:30:7c:e7:2a:
9f:9f:45:29:d5:5a:c7:d7:8b:3d:4c:c1:5e:8b:f6:
8f:4d:86:e2:e4:c3:93:1f:ce:00:2a:19:3d:fd:01:
a1:59:95:16:1f:79:a2:44:c6:4b:a6:c9:d3:3d:3d:
57:b5:dd:3e:84:ab:0b:ac:c5:1d:3f:20:fb:0e:fa:
2a:06:3a:b9:fa:47:08:e8:4a:6f:b4:31:a0:3f:59:
18:86:c9:b7:ab:f3:99:f7:f9:c3:06:89:c5:ef:0f:
6f:5c:30:a4:23:47:00:28:ea:92:a6:bd:a9:90:97:
47:b8:69:12:f8:66:5f:ae:20:7a:28:48:fd:5e:f9:
d0:41:fe:34:33:6d:e4:61:c4:fe:93:92:31:d3:10:
ca:a0:66:22:44:04:ac:33:56:8f:08:97:9a:1a:bc:
aa:00:85:08:54:18:15:77:aa:5a:46:8f:b5:31:f6:
13:d9:6c:97:16:54:69:13:9c:74:e4:60:79:58:a5:
b6:92:47:f6:23:9c:a2:ee:19:6a:cf:fc:32:68:39:
59:65:ca:64:b9:e9:e7:e1:31:76:72:8a:c1:ef:a7:
d9:05:ba:55:b8:b7:aa:52:b5:80:c7:29:d0:8f:93:
5f:fc:3a:ec:16:b0:4a:69:6a:83:dc:1d:cf:6c:76:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:29:36:21:1A:2A:59:F1:8D:4C:26:36:48:DB:F0:1C:38:3F:E5
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:08:04:13:c7:2b:a6:54:a3:d1:df:0a:5e:5b:d4:dd:26:61:
1f:23:24:44:4a:19:44:1c:c7:1a:d8:ab:8c:4d:8b:5d:2e:e4:
c8:00:50:f9:18:d7:c2:c7:0e:ea:9d:27:ad:d7:50:84:7c:17:
e0:9c:fb:c5:cc:e4:33:01:fe:18:22:a2:f6:62:a1:be:71:aa:
2a:63:fc:f4:90:66:b8:29:d5:ab:74:d9:06:e7:e9:37:8b:3f:
86:86:4b:f8:52:c7:af:48:cb:9a:19:5b:a8:fd:7b:cc:a9:b4:
e2:fe:a7:78:8e:12:ff:e4:25:1e:16:8a:cd:44:fe:30:28:a3:
8a:41:9d:5e:ba:5e:13:f2:8a:7b:34:26:ae:ca:59:aa:d6:92:
f9:e7:57:cc:df:20:44:12:b2:4b:f2:de:cc:6a:e0:f6:55:07:
6c:bc:8e:0b:0e:81:d9:aa:37:d5:0d:d0:b9:f6:03:83:2b:0d:
23:ee:2b:c5:45:a9:32:d9:e3:eb:b7:eb:08:19:ab:af:f6:e2:
a8:e3:4f:a4:06:1d:9d:69:5a:1c:67:ed:67:e7:cf:97:90:c7:
74:45:e7:06:3b:00:80:89:f5:07:a5:06:af:49:a5:fc:97:a2:
f8:08:20:cd:db:6f:43:58:f5:37:44:1e:65:82:be:9b:31:a1:
57:87:cd:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGC8VlQJEz5a4R7EJ1H8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGZhZTZkMmMyNWRkNWYyZmIxNmI0ZmJlYTI4NGU2NjU4
YzEyYmEwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
Eyg1NGVmMjkzNjIxMWEyYTU5ZjE4ZDRjMjYzNjQ4ZGJmMDFjMzgzZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UAMPAOTSKRwjDB85yqfn0Up1VrH
14s9TMFei/aPTYbi5MOTH84AKhk9/QGhWZUWH3miRMZLpsnTPT1Xtd0+hKsLrMUd
PyD7DvoqBjq5+kcI6EpvtDGgP1kYhsm3q/OZ9/nDBonF7w9vXDCkI0cAKOqSpr2p
kJdHuGkS+GZfriB6KEj9XvnQQf40M23kYcT+k5Ix0xDKoGYiRASsM1aPCJeaGryq
AIUIVBgVd6paRo+1MfYT2WyXFlRpE5x05GB5WKW2kkf2I5yi7hlqz/wyaDlZZcpk
uenn4TF2corB76fZBbpVuLeqUrWAxynQj5Nf/DrsFrBKaWqD3B3PbHZKZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTvKTYhGipZ8Y1MJjZI2/AcOD/lMB8GA1UdIwQY
MBaAFJ5Prm0sJd1fL7FrT76ihOZljBK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTkt
Mzk0ZmY5MjhmNTcwLzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTktMzk0ZmY5MjhmNTcw
LzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwgEE8cr
plSj0d8KXlvU3SZhHyMkREoZRBzHGtirjE2LXS7kyABQ+RjXwscO6p0nrddQhHwX
4Jz7xczkMwH+GCKi9mKhvnGqKmP89JBmuCnVq3TZBufpN4s/hoZL+FLHr0jLmhlb
qP17zKm04v6neI4S/+QlHhaKzUT+MCijikGdXrpeE/KKezQmrspZqtaS+edXzN8g
RBKyS/LezGrg9lUHbLyOCw6B2ao31Q3QufYDgysNI+4rxUWpMtnj67frCBmrr/bi
qONPpAYdnWlaHGftZ+fPl5DHdEXnBjsAgIn1B6UGr0ml/Jei+AggzdtvQ1j1N0Qe
ZYK+mzGhV4fN2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:17 2025 by rpki-client