Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
File: NZXHvH5fzXae1uUxEfPF5IkfnaE.mft (raw, json)
Hash identifier: dzoULVSSpI3m0+B3TPSRbzncMeZQ+1vS7pb1enmffKo=
Subject key identifier: 0E:9A:1C:DC:B9:AD:27:89:EA:B1:E8:18:6A:FC:40:C9:6E:58:45:BF
Authority key identifier: 35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
Certificate issuer: /CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Certificate serial: 0194F9D1174EA0F786D165F9B05E9341A53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
Manifest number: 0F90
Signing time: Wed 12 Feb 2025 11:00:17 +0000
Manifest this update: Wed 12 Feb 2025 11:00:17 +0000
Manifest next update: Thu 13 Feb 2025 11:00:17 +0000
Files and hashes: 1: NZXHvH5fzXae1uUxEfPF5IkfnaE.crl (hash: tXFO9L6k849yOfxWnB7xzd5ao3ohXshUwmxtODqM0TU=)
2: mNo4IYHo92XBLPNbZoddKhPLtKU.roa (hash: 7hNGDboyqFNYWdp1oY9Hbrqz5kUwFFCSr1cVWvQDGWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:d1:17:4e:a0:f7:86:d1:65:f9:b0:5e:93:41:a5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Validity
Not Before: Feb 12 11:00:17 2025 GMT
Not After : Feb 13 11:00:17 2025 GMT
Subject: CN=0e9a1cdcb9ad2789eab1e8186afc40c96e5845bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:cb:bc:96:4c:8b:2e:38:4c:e4:66:f9:95:
7f:66:9d:a8:d6:c6:69:f4:2e:b8:47:33:7b:67:ab:
3d:93:f3:41:98:e8:39:10:8b:a5:24:0a:a5:06:83:
26:fe:79:61:9b:08:ef:36:a5:5e:ec:53:9f:4c:f3:
71:5f:86:44:b4:fa:22:21:a1:6f:3b:46:1a:56:7b:
db:cf:36:29:10:89:e3:e3:a3:a4:3a:0b:a7:24:ba:
59:e4:d5:65:71:c0:b8:8e:36:55:bd:b3:97:2d:5a:
b7:86:10:f8:85:7f:44:86:cb:27:47:37:65:04:78:
7c:6b:b0:dc:3d:3d:d0:20:36:c8:dc:3e:40:5e:ba:
bb:be:1b:44:f8:ff:51:6d:f6:cd:5a:c0:74:c6:fe:
2e:30:6e:b3:17:64:93:72:3e:fa:29:c1:22:42:3f:
e9:0f:05:a4:8e:2d:6b:63:50:43:b4:c9:c0:9e:1e:
5f:98:73:21:55:7d:73:ea:42:46:be:6a:5b:73:24:
df:ac:4c:8b:4e:16:e5:c5:d5:e8:80:21:47:c7:e4:
dc:88:bf:41:e3:51:62:5e:ce:26:45:05:a6:6d:75:
14:5d:43:46:c3:ea:88:ae:1d:54:be:87:7c:76:ed:
95:d9:e2:56:32:55:c1:87:26:f8:4f:a3:84:f1:cf:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:1C:DC:B9:AD:27:89:EA:B1:E8:18:6A:FC:40:C9:6E:58:45:BF
X509v3 Authority Key Identifier:
keyid:35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:d0:72:12:41:68:d7:bf:cc:16:30:0b:a0:9c:bd:ec:15:
51:da:fa:cd:22:f4:e0:39:d2:00:3a:be:19:b5:91:94:10:ad:
f2:30:2b:c3:29:cc:b0:d8:11:db:6f:f9:b2:64:d4:11:db:c0:
28:69:9e:b9:bf:1b:06:b8:de:b1:3e:bd:41:3a:66:ec:4e:4e:
54:17:ba:b8:ac:01:4f:24:7a:b1:5c:42:5e:35:a2:e0:e3:9e:
8f:2e:f0:ab:16:da:d3:11:11:e9:5b:46:32:32:5f:9a:d2:1c:
30:90:b3:b2:83:6d:c0:ed:13:0c:2e:25:bc:74:3e:6b:e8:a3:
0c:59:43:fe:fb:2a:2c:2d:b8:7f:fb:58:e2:20:33:8d:90:93:
05:ee:8f:9f:cd:c0:4f:0e:c2:0e:d5:32:e4:95:ef:9b:71:e8:
bb:4f:4d:ad:f6:15:11:d9:27:6a:a3:cd:98:d8:9e:a1:63:45:
06:41:51:15:14:aa:27:bb:0f:d5:56:b8:51:fc:eb:6c:9e:cb:
d7:a5:e8:09:69:c4:a3:52:cc:85:f1:e4:cf:51:b9:de:25:48:
48:4e:24:22:fe:09:e9:d4:72:44:d8:23:2e:36:96:87:f4:28:
fa:fa:42:a1:19:3e:3c:56:d3:42:3e:1d:f5:8d:fd:f3:b1:5f:
64:b9:ff:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZT50RdOoPeG0WX5sF6TQaU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTVjN2JjN2U1ZmNkNzY5ZWQ2ZTUzMTExZjNjNWU0ODkx
ZjlkYTEwHhcNMjUwMjEyMTEwMDE3WhcNMjUwMjEzMTEwMDE3WjAzMTEwLwYDVQQD
EygwZTlhMWNkY2I5YWQyNzg5ZWFiMWU4MTg2YWZjNDBjOTZlNTg0NWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXLvJZMiy44TORm+ZV/Zp2o1sZp
9C64RzN7Z6s9k/NBmOg5EIulJAqlBoMm/nlhmwjvNqVe7FOfTPNxX4ZEtPoiIaFv
O0YaVnvbzzYpEInj46OkOgunJLpZ5NVlccC4jjZVvbOXLVq3hhD4hX9EhssnRzdl
BHh8a7DcPT3QIDbI3D5AXrq7vhtE+P9RbfbNWsB0xv4uMG6zF2STcj76KcEiQj/p
DwWkji1rY1BDtMnAnh5fmHMhVX1z6kJGvmpbcyTfrEyLThblxdXogCFHx+TciL9B
41FiXs4mRQWmbXUUXUNGw+qIrh1Uvod8du2V2eJWMlXBhyb4T6OE8c9/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6aHNy5rSeJ6rHoGGr8QMluWEW/MB8GA1UdIwQY
MBaAFDWVx7x+X812ntblMRHzxeSJH52hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpYSHZINWZ6WGFlMXVVeEVmUEY1SWtmbmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wMWRjM2MtZDkyNi00Y2RmLTk3ODct
YmUwNDRhNGRmM2EwLzEvTlpYSHZINWZ6WGFlMXVVeEVmUEY1SWtmbmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wMWRjM2MtZDkyNi00Y2RmLTk3ODctYmUwNDRhNGRmM2Ew
LzEvTlpYSHZINWZ6WGFlMXVVeEVmUEY1SWtmbmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxHQchJB
aNe/zBYwC6CcvewVUdr6zSL04DnSADq+GbWRlBCt8jArwynMsNgR22/5smTUEdvA
KGmeub8bBrjesT69QTpm7E5OVBe6uKwBTyR6sVxCXjWi4OOejy7wqxba0xER6VtG
MjJfmtIcMJCzsoNtwO0TDC4lvHQ+a+ijDFlD/vsqLC24f/tY4iAzjZCTBe6Pn83A
Tw7CDtUy5JXvm3Hou09NrfYVEdknaqPNmNieoWNFBkFRFRSqJ7sP1Va4UfzrbJ7L
16XoCWnEo1LMhfHkz1G53iVISE4kIv4J6dRyRNgjLjaWh/Qo+vpCoRk+PFbTQj4d
9Y3987FfZLn/BQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:24 2025 by rpki-client