Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: I5fR35bI11GiGTASTIYVUvd1vbjTbby5UH7PUq+Bi6E=
Subject key identifier: B6:24:C9:45:CB:6B:BB:70:B7:7E:96:C7:9A:6D:2A:06:26:15:CA:75
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 0194BD4E3A8698B8B0A8EBCD9B22115B23DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: On/YrZzP1/acWzzIMJle5V2lN87HYjw7tKKVQU8h/vs=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3a:86:98:b8:b0:a8:eb:cd:9b:22:11:5b:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=b624c945cb6bbb70b77e96c79a6d2a062615ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:be:e6:d1:ac:9e:f5:16:93:23:fd:cc:28:
98:2c:3d:80:ba:03:8d:7e:bd:8f:33:0e:3e:78:d0:
c7:4f:99:52:95:c9:c7:8f:db:b9:10:c2:9d:f8:52:
a7:1b:f3:d8:c9:26:79:bf:04:f8:9a:ec:08:a2:28:
92:7c:22:25:a2:4d:70:81:a9:de:db:8c:7d:cd:82:
eb:fa:b3:05:02:e3:a6:a9:32:4d:f6:7a:67:4f:e4:
59:33:16:d0:04:67:01:16:f4:6b:79:28:6c:7c:ad:
cd:24:b6:fe:c5:50:2f:f3:be:ce:ae:12:ba:68:2b:
73:d0:67:aa:b4:42:d0:4c:d6:07:67:d2:36:b8:de:
3e:94:ae:3a:a0:ef:d5:91:4d:45:2f:14:ba:c5:ea:
8b:26:f9:fe:1a:0e:f3:38:43:48:3e:85:ee:e6:63:
1b:ff:a5:de:e8:60:40:71:f0:9e:4f:ae:48:52:39:
5c:c5:ef:da:c5:fd:38:55:ea:9c:51:b2:92:e1:4e:
dd:f8:26:1a:fc:9c:79:9c:19:66:0d:94:06:75:ec:
a6:b0:35:b4:5c:35:b4:fd:16:4f:aa:1e:b9:bf:9d:
5f:b4:69:fa:8d:d3:98:9b:0b:c2:ec:25:6c:a0:1f:
9b:33:b1:33:43:78:70:4c:5b:ae:77:44:3a:bd:e3:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:C9:45:CB:6B:BB:70:B7:7E:96:C7:9A:6D:2A:06:26:15:CA:75
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:79:6d:76:00:9c:69:e3:a8:16:d6:66:c1:b2:4f:f3:8d:
12:04:2a:8e:dd:af:c7:ce:80:50:c1:95:43:fc:44:49:da:2a:
16:a7:b3:3a:54:f5:7c:2b:84:a0:9f:bf:07:ee:3d:2d:2f:fc:
14:51:b8:ce:0f:f3:0b:1e:b5:08:f5:66:2d:61:25:1a:6f:da:
be:70:ff:81:b5:fb:fa:85:b1:ce:ff:34:4e:31:de:71:c4:01:
01:1b:80:2d:fa:20:b2:6c:8e:99:2d:1e:6c:9c:70:65:2a:a5:
51:c9:d3:4e:ac:5f:e3:b3:f6:d6:9d:2b:fb:df:4d:03:45:78:
6c:18:67:cf:91:95:77:ed:5b:0e:c6:50:83:79:e6:47:55:1c:
36:66:96:a6:d5:fa:90:ba:20:7d:e4:39:a6:fa:36:10:be:86:
56:c1:7c:95:e3:3c:10:24:b3:90:1c:98:a0:24:a7:d5:5d:a5:
5b:ab:3f:01:56:70:eb:30:6e:2b:6a:43:a2:23:07:ef:c7:50:
dd:88:b3:6d:77:41:0b:02:ed:33:c6:94:2e:de:eb:64:0c:93:
c1:6f:cb:03:73:8b:d8:e9:04:bc:6b:b5:f1:f1:18:8c:8a:d9:
78:94:35:91:de:38:f3:a5:40:44:80:f0:96:f7:15:fb:0e:c8:
f8:e8:a5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TjqGmLiwqOvNmyIRWyPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy
ODlmOWUwHhcNMjUwMTMxMTcwMDA4WhcNMjUwMjAxMTcwMDA4WjAzMTEwLwYDVQQD
EyhiNjI0Yzk0NWNiNmJiYjcwYjc3ZTk2Yzc5YTZkMmEwNjI2MTVjYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrO+5tGsnvUWkyP9zCiYLD2AugON
fr2PMw4+eNDHT5lSlcnHj9u5EMKd+FKnG/PYySZ5vwT4muwIoiiSfCIlok1wgane
24x9zYLr+rMFAuOmqTJN9npnT+RZMxbQBGcBFvRreShsfK3NJLb+xVAv877OrhK6
aCtz0GeqtELQTNYHZ9I2uN4+lK46oO/VkU1FLxS6xeqLJvn+Gg7zOENIPoXu5mMb
/6Xe6GBAcfCeT65IUjlcxe/axf04VeqcUbKS4U7d+CYa/Jx5nBlmDZQGdeymsDW0
XDW0/RZPqh65v51ftGn6jdOYmwvC7CVsoB+bM7EzQ3hwTFuud0Q6veN6EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYkyUXLa7twt36Wx5ptKgYmFcp1MB8GA1UdIwQY
MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt
NDhiMTY2NGQ0MGQ1LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1
LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm55bXYA
nGnjqBbWZsGyT/ONEgQqjt2vx86AUMGVQ/xESdoqFqezOlT1fCuEoJ+/B+49LS/8
FFG4zg/zCx61CPVmLWElGm/avnD/gbX7+oWxzv80TjHeccQBARuALfogsmyOmS0e
bJxwZSqlUcnTTqxf47P21p0r+99NA0V4bBhnz5GVd+1bDsZQg3nmR1UcNmaWptX6
kLogfeQ5pvo2EL6GVsF8leM8ECSzkByYoCSn1V2lW6s/AVZw6zBuK2pDoiMH78dQ
3YizbXdBCwLtM8aULt7rZAyTwW/LA3OL2OkEvGu18fEYjIrZeJQ1kd4486VARIDw
lvcV+w7I+OilNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client