Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
File: nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft (raw, json)
Hash identifier: YCr4+vZ8ypJBCBrewRd3RjgmqhCKKN+ldd5HfQKBbk4=
Subject key identifier: D9:92:0F:C6:40:F5:62:E0:35:EC:F0:94:1A:3B:27:72:E6:84:7A:80
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Certificate issuer: /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial: 0195A27A40870696A1EC995644BA0292A619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
Manifest number: 08E1
Signing time: Mon 17 Mar 2025 05:01:15 +0000
Manifest this update: Mon 17 Mar 2025 05:01:15 +0000
Manifest next update: Tue 18 Mar 2025 05:01:15 +0000
Files and hashes: 1: iuVnZoHRlpka7mUI3Ga_xWu9wAI.roa (hash: C6Oc4Bk7j7y8ciioznqbwOlreRpQUzxPqgkBwJnLoJw=)
2: kxbMV2SMh7dc23vBzW031omIs7Y.roa (hash: 2RUWy0fzMJHJuSCYqz6uVOQ8Ya6aS+gLwwmJs8cWW7I=)
3: nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl (hash: at9rD9iNwwKt4W5CcB6taupvTa234PrRVoOwdbS+SWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:7a:40:87:06:96:a1:ec:99:56:44:ba:02:92:a6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
Validity
Not Before: Mar 17 05:01:15 2025 GMT
Not After : Mar 18 05:01:15 2025 GMT
Subject: CN=d9920fc640f562e035ecf0941a3b2772e6847a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:56:26:b0:7a:02:af:28:00:6f:ca:1a:84:
a4:57:66:02:44:24:aa:6b:2c:eb:2a:ba:0e:a7:bf:
4b:6b:84:6d:bd:23:1e:81:ff:fb:bc:2d:8e:46:79:
8a:65:29:d7:16:2e:1c:02:59:b3:54:84:b3:c8:da:
c0:77:3b:c5:0e:85:2d:9a:ad:80:20:5f:8a:60:a9:
fb:b3:9a:1e:54:c1:32:9c:9a:f2:ed:df:3f:d9:87:
4e:b4:93:07:8a:92:e9:43:b5:bd:c1:b0:ee:1a:ac:
e1:34:5e:22:a7:07:27:47:9f:88:16:06:8a:03:3d:
7f:53:ab:9c:a0:69:8d:50:dc:fa:9a:cf:37:21:b9:
fe:21:76:96:1f:8d:1f:07:11:28:57:f1:59:ed:75:
b7:e1:89:39:3f:f7:f5:34:4c:ae:4b:ec:7b:a8:a8:
c6:93:23:03:b7:7a:f5:6b:2e:f4:f9:f7:ef:77:18:
f6:a8:79:b5:73:47:53:d7:92:b5:3a:dd:ee:83:49:
e3:a2:74:63:bd:64:3b:f2:1a:d6:b8:0b:5b:ac:3c:
92:e0:6f:50:f4:cf:35:85:41:ca:e4:b1:5f:66:98:
22:f7:5f:c3:04:c9:3e:99:e8:14:78:59:14:be:cd:
ab:63:6c:a4:52:a1:ae:7c:ff:ee:13:d6:2c:26:a2:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:0F:C6:40:F5:62:E0:35:EC:F0:94:1A:3B:27:72:E6:84:7A:80
X509v3 Authority Key Identifier:
keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:80:19:ba:63:87:f6:93:50:49:06:74:c0:e1:54:0d:5a:08:
51:c4:3c:74:82:96:8b:11:e9:06:81:41:8b:46:56:4e:20:3f:
37:ba:a7:e1:55:33:89:2e:20:a1:fe:71:3b:0c:83:98:97:10:
c3:39:d6:5d:2f:91:31:b8:5e:fb:79:58:55:6f:cc:72:93:40:
47:56:cf:06:b0:65:c7:57:59:23:20:77:01:42:81:de:4b:d5:
9e:8f:bb:af:af:76:9b:68:a3:c3:81:1c:ec:0a:a1:6b:bf:a4:
0b:9e:dd:9d:5a:94:a4:88:ab:04:95:f0:d8:b5:8a:c4:7b:a5:
d6:5a:92:32:2a:96:68:72:16:50:20:83:30:d7:a4:a3:1d:bb:
3f:d8:d3:c6:fa:22:af:1b:9d:7c:b8:72:8c:69:c1:e1:b5:61:
6b:2d:ff:70:ee:2f:36:33:b2:aa:da:e0:10:71:58:8a:b9:93:
e9:eb:41:7f:c3:8d:c7:c4:36:3f:7c:9f:c9:75:dd:47:0f:19:
a8:6d:2f:f3:2b:58:bb:ef:30:4a:00:a0:e7:d0:72:6f:de:8c:
68:9b:18:98:11:7f:54:62:3a:f7:3e:31:a5:e5:da:cc:bc:1d:
28:85:7d:a6:f6:2b:37:5d:9d:22:0d:b3:78:21:f2:d1:3f:a2:
ee:79:63:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWiekCHBpah7JlWRLoCkqYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYWY5YTBkNzhhNjgxMWNkMTY4NmRlYjExNzc4OGFmODY2
YzgwOTEwHhcNMjUwMzE3MDUwMTE1WhcNMjUwMzE4MDUwMTE1WjAzMTEwLwYDVQQD
EyhkOTkyMGZjNjQwZjU2MmUwMzVlY2YwOTQxYTNiMjc3MmU2ODQ3YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xRWJrB6Aq8oAG/KGoSkV2YCRCSq
ayzrKroOp79La4RtvSMegf/7vC2ORnmKZSnXFi4cAlmzVISzyNrAdzvFDoUtmq2A
IF+KYKn7s5oeVMEynJry7d8/2YdOtJMHipLpQ7W9wbDuGqzhNF4ipwcnR5+IFgaK
Az1/U6ucoGmNUNz6ms83Ibn+IXaWH40fBxEoV/FZ7XW34Yk5P/f1NEyuS+x7qKjG
kyMDt3r1ay70+ffvdxj2qHm1c0dT15K1Ot3ug0njonRjvWQ78hrWuAtbrDyS4G9Q
9M81hUHK5LFfZpgi91/DBMk+megUeFkUvs2rY2ykUqGufP/uE9YsJqI5uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmSD8ZA9WLgNezwlBo7J3LmhHqAMB8GA1UdIwQY
MBaAFJyvmg14poEc0Wht6xF3iK+GbICRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OTU5YzItZWUwYi00MmJkLWI0MmQt
YmY3ZmRjMjliZTZkLzEvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82OTU5YzItZWUwYi00MmJkLWI0MmQtYmY3ZmRjMjliZTZk
LzEvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4AZumOH
9pNQSQZ0wOFUDVoIUcQ8dIKWixHpBoFBi0ZWTiA/N7qn4VUziS4gof5xOwyDmJcQ
wznWXS+RMbhe+3lYVW/McpNAR1bPBrBlx1dZIyB3AUKB3kvVno+7r692m2ijw4Ec
7Aqha7+kC57dnVqUpIirBJXw2LWKxHul1lqSMiqWaHIWUCCDMNekox27P9jTxvoi
rxudfLhyjGnB4bVhay3/cO4vNjOyqtrgEHFYirmT6etBf8ONx8Q2P3yfyXXdRw8Z
qG0v8ytYu+8wSgCg59Byb96MaJsYmBF/VGI69z4xpeXazLwdKIV9pvYrN12dIg2z
eCHy0T+i7nljyg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:26 2025 by rpki-client