Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
File: 3o29_ntfwsHflmKJSlS-nmvKXcs.mft (raw, json)
Hash identifier: cx22J/p+umNOwXpoD4H/3PP+iuZNPWPODcpTNaAQ/Gs=
Subject key identifier: B7:79:AF:D2:35:86:B4:7A:F8:66:FC:F7:D2:09:D5:4B:CF:1D:93:F3
Authority key identifier: DE:8D:BD:FE:7B:5F:C2:C1:DF:96:62:89:4A:54:BE:9E:6B:CA:5D:CB
Certificate issuer: /CN=de8dbdfe7b5fc2c1df9662894a54be9e6bca5dcb
Certificate serial: 019564ADB5630E89B486BF16606EC3011A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
Manifest number: 0487
Signing time: Wed 05 Mar 2025 05:01:00 +0000
Manifest this update: Wed 05 Mar 2025 05:01:00 +0000
Manifest next update: Thu 06 Mar 2025 05:01:00 +0000
Files and hashes: 1: 3o29_ntfwsHflmKJSlS-nmvKXcs.crl (hash: PNkWRfTo3ukxzRDDkUyNMOy0o+jJtFC4pmwz4zRwz2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:ad:b5:63:0e:89:b4:86:bf:16:60:6e:c3:01:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8dbdfe7b5fc2c1df9662894a54be9e6bca5dcb
Validity
Not Before: Mar 5 05:01:00 2025 GMT
Not After : Mar 6 05:01:00 2025 GMT
Subject: CN=b779afd23586b47af866fcf7d209d54bcf1d93f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:89:f9:e5:87:74:86:c0:bd:5d:21:20:41:
16:30:0c:fe:0a:43:af:2e:50:80:e3:fa:02:a2:3c:
b2:4d:c7:2c:23:3e:e6:93:08:64:d2:2c:81:f0:f8:
fd:bb:59:3f:9a:fb:be:38:c1:ac:4a:dd:93:8c:64:
5c:80:85:1c:53:ca:92:85:1a:67:99:84:32:66:08:
a2:d8:f8:5c:e5:b2:fb:ff:ba:de:01:b1:da:d5:9d:
2e:61:72:3e:3b:3c:c2:41:22:0d:e1:98:fd:e8:73:
61:5c:d9:db:5e:3f:0f:83:bc:18:94:02:2a:ba:ad:
ff:55:b3:51:df:8e:93:46:bc:12:f5:79:8c:c0:e0:
bb:83:2f:1f:fa:de:de:9e:05:49:eb:41:61:3a:d0:
94:84:bf:a1:21:fa:c5:28:f8:f6:9d:3e:71:7c:ae:
bf:9b:84:56:88:db:1b:18:3a:ad:1d:c5:7a:ba:da:
63:91:3f:33:a8:18:04:ed:70:9d:a3:2f:b9:d6:24:
92:ba:c1:4c:20:8e:f1:2c:07:e9:de:29:5b:20:d6:
a5:1c:a3:91:7d:8a:74:9e:35:8d:5b:e4:da:8d:f7:
01:11:6d:6a:7f:d2:56:ef:fa:dd:12:ab:8b:14:9b:
3d:d0:0d:47:15:78:c3:b1:f9:68:0e:88:d2:6a:6f:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:79:AF:D2:35:86:B4:7A:F8:66:FC:F7:D2:09:D5:4B:CF:1D:93:F3
X509v3 Authority Key Identifier:
keyid:DE:8D:BD:FE:7B:5F:C2:C1:DF:96:62:89:4A:54:BE:9E:6B:CA:5D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:ad:ea:26:7f:6d:e1:d0:ba:32:e1:1b:41:41:6b:98:3c:
ee:4c:71:09:1a:ff:6c:16:b0:50:00:3c:37:1d:0a:a9:1a:bf:
1d:6a:1e:06:db:82:46:f7:50:81:9f:9d:36:ae:98:69:3e:8b:
b5:0c:ea:8f:1b:4c:ee:52:e0:13:41:df:a0:21:21:bb:19:28:
56:d7:23:70:a4:30:e9:e1:5e:a1:77:5e:2c:a6:2a:1d:1f:30:
cd:d6:2a:4c:09:ea:8c:59:71:b8:10:6f:83:6d:5c:17:36:2c:
c7:f9:74:8a:cc:6d:e4:12:b9:43:94:c4:a8:02:3e:be:bd:88:
eb:b5:89:a4:48:3c:dd:aa:5e:52:f7:dd:fd:ff:51:75:e5:a3:
e4:90:58:d7:5d:73:38:69:4c:d1:fd:ed:21:eb:7b:e6:53:4c:
bb:14:23:92:f1:40:e3:9a:f1:9e:8d:4c:90:89:01:66:2e:54:
9a:12:2d:2c:7b:10:e9:8a:d0:51:6d:9b:e6:4e:e6:d9:8a:40:
ad:a5:c2:3b:ef:72:64:51:15:b4:9a:c9:cf:fc:67:35:08:a0:
b5:d0:b5:21:e4:64:63:d5:fc:3b:e8:ad:de:a6:74:56:8e:2e:
1b:7e:c9:8a:bd:86:16:30:f1:3b:d7:87:c9:61:53:58:ac:3c:
33:66:72:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVkrbVjDom0hr8WYG7DARoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGRiZGZlN2I1ZmMyYzFkZjk2NjI4OTRhNTRiZTllNmJj
YTVkY2IwHhcNMjUwMzA1MDUwMTAwWhcNMjUwMzA2MDUwMTAwWjAzMTEwLwYDVQQD
EyhiNzc5YWZkMjM1ODZiNDdhZjg2NmZjZjdkMjA5ZDU0YmNmMWQ5M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDaJ+eWHdIbAvV0hIEEWMAz+CkOv
LlCA4/oCojyyTccsIz7mkwhk0iyB8Pj9u1k/mvu+OMGsSt2TjGRcgIUcU8qShRpn
mYQyZgii2Phc5bL7/7reAbHa1Z0uYXI+OzzCQSIN4Zj96HNhXNnbXj8Pg7wYlAIq
uq3/VbNR346TRrwS9XmMwOC7gy8f+t7engVJ60FhOtCUhL+hIfrFKPj2nT5xfK6/
m4RWiNsbGDqtHcV6utpjkT8zqBgE7XCdoy+51iSSusFMII7xLAfp3ilbINalHKOR
fYp0njWNW+TajfcBEW1qf9JW7/rdEquLFJs90A1HFXjDsfloDojSam+tcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd5r9I1hrR6+Gb899IJ1UvPHZPzMB8GA1UdIwQY
MBaAFN6Nvf57X8LB35ZiiUpUvp5ryl3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM28yOV9udGZ3c0hmbG1LSlNsUy1ubXZLWGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yZmNhYTQtOWYyOS00NGI4LWIxZTgt
OTIxZjViYzlmMmU2LzEvM28yOV9udGZ3c0hmbG1LSlNsUy1ubXZLWGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yZmNhYTQtOWYyOS00NGI4LWIxZTgtOTIxZjViYzlmMmU2
LzEvM28yOV9udGZ3c0hmbG1LSlNsUy1ubXZLWGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesit6iZ/
beHQujLhG0FBa5g87kxxCRr/bBawUAA8Nx0KqRq/HWoeBtuCRvdQgZ+dNq6YaT6L
tQzqjxtM7lLgE0HfoCEhuxkoVtcjcKQw6eFeoXdeLKYqHR8wzdYqTAnqjFlxuBBv
g21cFzYsx/l0isxt5BK5Q5TEqAI+vr2I67WJpEg83apeUvfd/f9RdeWj5JBY111z
OGlM0f3tIet75lNMuxQjkvFA45rxno1MkIkBZi5UmhItLHsQ6YrQUW2b5k7m2YpA
raXCO+9yZFEVtJrJz/xnNQigtdC1IeRkY9X8O+it3qZ0Vo4uG37Jir2GFjDxO9eH
yWFTWKw8M2ZyBw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:01 2025 by rpki-client