Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: 6EWqCNG+WSez+U2ryk30f5q+MFiMhNdeu7TSilasbEw=
Subject key identifier: DB:FF:1B:19:66:99:F1:AF:8B:35:C9:B9:7E:BD:6A:1B:93:47:4C:CF
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 0195E122622085A25075455ADC7FB9F88D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 0F31
Signing time: Sat 29 Mar 2025 09:01:21 +0000
Manifest this update: Sat 29 Mar 2025 09:01:21 +0000
Manifest next update: Sun 30 Mar 2025 09:01:21 +0000
Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: Id/kw85q9dqMA79lYY+HQ+x+Q8uB/c8166xqUPALmcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:62:20:85:a2:50:75:45:5a:dc:7f:b9:f8:8d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Mar 29 09:01:21 2025 GMT
Not After : Mar 30 09:01:21 2025 GMT
Subject: CN=dbff1b196699f1af8b35c9b97ebd6a1b93474ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:b2:d3:77:73:e0:f6:a3:72:4e:e4:b5:55:
c5:c0:b8:39:68:71:35:87:7a:a7:1f:d0:7d:f6:e6:
df:12:ae:b5:3f:68:49:07:7f:a9:b6:9d:93:bf:f7:
fd:64:ef:4c:2e:92:21:85:1d:70:ca:df:0c:df:a2:
e1:b9:34:da:b2:12:76:2b:e4:e3:5c:86:28:ee:a6:
14:3e:40:2a:73:f5:b2:73:97:2b:6a:97:90:ab:54:
43:a2:99:f1:85:21:e3:ac:bf:59:fd:d5:71:eb:25:
57:f7:40:0f:9e:6c:b0:97:91:6b:35:d8:0f:24:ba:
30:e8:b0:a0:a7:3e:49:78:4a:b4:cd:46:42:34:ac:
b4:17:46:98:cd:62:94:2a:c6:91:1c:08:07:66:cc:
1e:d8:d3:b1:e9:0f:3f:5d:60:15:86:3b:ec:f8:98:
c9:33:25:b8:82:2a:94:9c:f7:29:b7:48:9b:f6:11:
27:20:be:27:90:4e:dd:d0:ab:36:23:85:17:8e:04:
a2:a2:00:36:4b:39:b5:66:81:f2:d3:4b:4c:3c:60:
af:60:8c:4e:bf:bb:21:d6:2f:bd:60:60:7b:50:3c:
9e:9a:fb:26:40:53:3e:87:7d:53:1e:5c:3b:be:f6:
ee:bb:20:1c:fa:81:08:cd:e2:46:b9:53:ba:a7:54:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:1B:19:66:99:F1:AF:8B:35:C9:B9:7E:BD:6A:1B:93:47:4C:CF
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f4:e9:7c:3d:d3:9d:46:4d:15:c0:ad:85:aa:8e:09:89:85:
36:33:75:cb:87:88:a2:a5:9e:9a:5b:f8:ba:ba:db:da:92:e5:
0e:6c:6c:28:35:74:eb:38:94:af:59:ca:68:32:42:c8:68:62:
c3:9d:b9:6e:dd:73:53:38:c5:44:44:0e:b2:86:75:7c:7f:38:
c6:9e:8f:ef:d8:81:7c:8a:ca:4b:ed:93:38:a3:ee:8d:0e:65:
c4:39:ec:8a:61:c5:11:04:19:dc:d0:67:a2:9a:dc:22:81:90:
46:cf:54:fc:86:8d:25:97:5f:0b:55:a5:3c:43:8e:4c:96:f4:
3d:73:a1:ed:3e:19:bf:27:2b:59:95:bb:89:25:0a:35:4f:fd:
c3:2b:69:2e:3f:1d:16:0b:56:ba:c4:46:52:42:03:dd:fc:e0:
0e:2b:b2:70:3c:b9:af:f2:03:6e:34:0f:0c:06:23:7a:97:58:
a9:a1:3d:22:8e:f1:d0:98:9c:57:c5:ef:e5:2f:46:66:69:4a:
ad:b5:b9:3d:d6:c3:d2:8d:d2:11:a8:38:5c:96:45:67:ab:54:
bd:62:30:e0:45:85:92:0e:f9:36:d2:78:a7:a3:d0:7d:2c:9f:
72:7a:f2:ee:d9:8b:27:8d:bc:b6:49:78:d3:b3:29:dc:eb:57:
a7:ba:d2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhImIghaJQdUVa3H+5+I0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjUwMzI5MDkwMTIxWhcNMjUwMzMwMDkwMTIxWjAzMTEwLwYDVQQD
EyhkYmZmMWIxOTY2OTlmMWFmOGIzNWM5Yjk3ZWJkNmExYjkzNDc0Y2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptKy03dz4Pajck7ktVXFwLg5aHE1
h3qnH9B99ubfEq61P2hJB3+ptp2Tv/f9ZO9MLpIhhR1wyt8M36LhuTTashJ2K+Tj
XIYo7qYUPkAqc/Wyc5crapeQq1RDopnxhSHjrL9Z/dVx6yVX90APnmywl5FrNdgP
JLow6LCgpz5JeEq0zUZCNKy0F0aYzWKUKsaRHAgHZswe2NOx6Q8/XWAVhjvs+JjJ
MyW4giqUnPcpt0ib9hEnIL4nkE7d0Ks2I4UXjgSiogA2Szm1ZoHy00tMPGCvYIxO
v7sh1i+9YGB7UDyemvsmQFM+h31THlw7vvbuuyAc+oEIzeJGuVO6p1SwFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNv/GxlmmfGvizXJuX69ahuTR0zPMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfTpfD3T
nUZNFcCthaqOCYmFNjN1y4eIoqWemlv4urrb2pLlDmxsKDV06ziUr1nKaDJCyGhi
w525bt1zUzjFREQOsoZ1fH84xp6P79iBfIrKS+2TOKPujQ5lxDnsimHFEQQZ3NBn
oprcIoGQRs9U/IaNJZdfC1WlPEOOTJb0PXOh7T4ZvycrWZW7iSUKNU/9wytpLj8d
FgtWusRGUkID3fzgDiuycDy5r/IDbjQPDAYjepdYqaE9Io7x0JicV8Xv5S9GZmlK
rbW5PdbD0o3SEag4XJZFZ6tUvWIw4EWFkg75NtJ4p6PQfSyfcnry7tmLJ428tkl4
07Mp3OtXp7rSaA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:20 2025 by rpki-client