Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
File: NaG0hYfEMM89i_11mMWVvaHGaHQ.mft (raw, json)
Hash identifier: rvi43qRcF/idVmZVofTMHSCKjAC+UAeDC96DUD6s+bQ=
Subject key identifier: 7B:11:D4:E9:3E:58:C5:6B:EE:E9:F8:65:6F:A7:57:38:60:0B:23:63
Authority key identifier: 35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
Certificate issuer: /CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Certificate serial: 0193F1E375D895DC5FB3FACB02A4F1279525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
Manifest number: 0D4E
Signing time: Mon 23 Dec 2024 05:00:36 +0000
Manifest this update: Mon 23 Dec 2024 05:00:36 +0000
Manifest next update: Tue 24 Dec 2024 05:00:36 +0000
Files and hashes: 1: NaG0hYfEMM89i_11mMWVvaHGaHQ.crl (hash: qqFI5PKznJkyrK4Ou6fHtvP6MjJxblp8Gr4IiD6hh0c=)
2: oSYYTFE_ciuAXRx05_kpE1LbINA.roa (hash: MQx4MLs/kGB9CF6WYARhftVFgERCXyuxQEkZQuYbc24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:e3:75:d8:95:dc:5f:b3:fa:cb:02:a4:f1:27:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Validity
Not Before: Dec 23 05:00:36 2024 GMT
Not After : Dec 24 05:00:36 2024 GMT
Subject: CN=7b11d4e93e58c56beee9f8656fa75738600b2363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:c5:ab:26:65:47:1f:67:f3:5f:8a:68:f2:
c4:a9:bf:09:96:95:21:15:72:5d:74:e0:9c:19:60:
86:10:f8:8c:56:70:08:38:d5:ae:7f:4f:fc:81:ae:
72:8d:3c:8e:63:0d:ea:79:19:44:21:bb:e1:53:91:
de:e2:31:92:77:cf:47:d4:fb:2b:ee:36:5f:08:3b:
3f:10:11:9b:e5:9d:ce:15:fe:0b:1b:a4:a4:5c:b1:
41:ad:70:7a:6e:71:70:58:1d:81:cd:a0:92:45:c0:
c2:34:f4:28:c9:3b:4d:a3:db:61:35:fe:e8:6b:1d:
c2:6f:fe:34:44:25:bc:2c:84:c1:d9:7e:2b:72:a5:
d3:36:1c:dd:79:17:20:e1:30:e5:e4:26:ef:18:92:
f5:f0:2f:92:77:fc:d0:2b:6a:c3:26:bf:16:e4:a7:
c1:45:8d:b3:43:8e:aa:0e:83:13:30:90:2e:46:92:
ca:5f:b1:ca:d4:5d:9b:51:23:01:b1:31:91:bb:f6:
cb:72:04:ec:1c:32:5a:c0:a0:11:b5:6e:e6:2b:ac:
12:6a:2b:51:b7:0d:f1:57:b8:0c:2b:cd:28:6a:d5:
91:ac:6f:d6:3b:90:ac:3e:02:90:f4:96:38:c8:eb:
ea:c1:92:b0:76:ee:c9:dc:9e:1a:db:59:07:4f:47:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:D4:E9:3E:58:C5:6B:EE:E9:F8:65:6F:A7:57:38:60:0B:23:63
X509v3 Authority Key Identifier:
keyid:35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:5d:69:94:8a:a0:b1:41:9b:32:c8:38:54:2a:31:3a:25:
1c:41:8f:e0:81:d1:76:74:45:c4:0d:2f:3a:f8:19:dd:66:81:
fa:59:f8:5d:d3:1b:ae:cb:31:af:17:5d:32:74:e6:73:1d:f0:
ab:a3:0f:bb:f1:72:20:ba:5c:51:38:40:98:a1:14:e6:22:d2:
87:1b:a6:59:7d:35:bc:a2:cf:68:61:f3:81:d7:14:f0:e7:03:
17:f5:ad:a3:d1:93:61:b3:75:c8:8c:6d:65:e5:72:c3:a2:f4:
02:6a:6e:21:64:c9:30:d0:5e:5d:54:26:7a:50:45:36:30:e9:
41:0d:45:fd:8a:e9:f1:44:0d:3b:9f:c7:20:8b:a9:03:ff:d2:
e6:2b:e1:26:d8:6e:71:41:8a:e1:93:2a:d4:f2:a4:fb:da:e1:
36:cb:42:24:ee:e4:d1:49:89:2d:07:06:be:80:c1:af:40:ee:
7f:26:f4:dc:c8:41:bd:86:3a:b8:c6:48:39:cd:60:d2:46:ea:
d7:1e:fa:4b:bf:ac:d2:73:38:8d:8b:19:e2:e1:01:0c:b8:73:
ab:94:2f:40:35:82:6a:a8:59:67:10:1b:14:b4:aa:cc:2e:cb:
33:19:56:33:dc:62:1a:82:97:3d:38:db:6d:f8:a7:f7:0b:ae:
62:6b:89:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPx43XYldxfs/rLAqTxJ5UlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTFiNDg1ODdjNDMwY2YzZDhiZmQ3NTk4YzU5NWJkYTFj
NjY4NzQwHhcNMjQxMjIzMDUwMDM2WhcNMjQxMjI0MDUwMDM2WjAzMTEwLwYDVQQD
Eyg3YjExZDRlOTNlNThjNTZiZWVlOWY4NjU2ZmE3NTczODYwMGIyMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+PFqyZlRx9n81+KaPLEqb8JlpUh
FXJddOCcGWCGEPiMVnAIONWuf0/8ga5yjTyOYw3qeRlEIbvhU5He4jGSd89H1Psr
7jZfCDs/EBGb5Z3OFf4LG6SkXLFBrXB6bnFwWB2BzaCSRcDCNPQoyTtNo9thNf7o
ax3Cb/40RCW8LITB2X4rcqXTNhzdeRcg4TDl5CbvGJL18C+Sd/zQK2rDJr8W5KfB
RY2zQ46qDoMTMJAuRpLKX7HK1F2bUSMBsTGRu/bLcgTsHDJawKARtW7mK6wSaitR
tw3xV7gMK80oatWRrG/WO5CsPgKQ9JY4yOvqwZKwdu7J3J4a21kHT0e0PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsR1Ok+WMVr7un4ZW+nVzhgCyNjMB8GA1UdIwQY
MBaAFDWhtIWHxDDPPYv9dZjFlb2hxmh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFHMGhZZkVNTTg5aV8xMW1NV1Z2YUhHYUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZjQ2YzEtMjBiNC00MjQ5LTg4MWUt
ZmZiYzBhOTc5YjIwLzEvTmFHMGhZZkVNTTg5aV8xMW1NV1Z2YUhHYUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80ZjQ2YzEtMjBiNC00MjQ5LTg4MWUtZmZiYzBhOTc5YjIw
LzEvTmFHMGhZZkVNTTg5aV8xMW1NV1Z2YUhHYUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYVdaZSK
oLFBmzLIOFQqMTolHEGP4IHRdnRFxA0vOvgZ3WaB+ln4XdMbrssxrxddMnTmcx3w
q6MPu/FyILpcUThAmKEU5iLShxumWX01vKLPaGHzgdcU8OcDF/Wto9GTYbN1yIxt
ZeVyw6L0AmpuIWTJMNBeXVQmelBFNjDpQQ1F/Yrp8UQNO5/HIIupA//S5ivhJthu
cUGK4ZMq1PKk+9rhNstCJO7k0UmJLQcGvoDBr0Dufyb03MhBvYY6uMZIOc1g0kbq
1x76S7+s0nM4jYsZ4uEBDLhzq5QvQDWCaqhZZxAbFLSqzC7LMxlWM9xiGoKXPTjb
bfin9wuuYmuJdw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:59 2025 by rpki-client