Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: ZWwt9ruNMDlWhT8+x1rWGY30XBOMWXgNAC3XLTqeXQ0=
Subject key identifier: DA:34:28:18:78:64:E5:C5:BC:90:14:B4:EB:28:E0:E5:15:32:85:34
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 0195E1592F0E1891F1BA6FACC45DE3D3F741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0E38
Signing time: Sat 29 Mar 2025 10:01:13 +0000
Manifest this update: Sat 29 Mar 2025 10:01:13 +0000
Manifest next update: Sun 30 Mar 2025 10:01:13 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: RCX417nFtPc0bKQ9a7/ZpP/7iD20WVh1krqL0ul/45c=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:2f:0e:18:91:f1:ba:6f:ac:c4:5d:e3:d3:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Mar 29 10:01:13 2025 GMT
Not After : Mar 30 10:01:13 2025 GMT
Subject: CN=da3428187864e5c5bc9014b4eb28e0e515328534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:18:ac:bb:20:ee:51:f0:31:c8:07:2f:77:
f2:89:05:8f:81:d4:aa:28:a3:f3:1d:da:45:65:81:
d6:4f:4c:e5:26:10:52:b9:a9:e2:da:52:2f:ea:87:
f1:a0:58:8b:ea:0a:86:bb:cb:0f:79:65:ee:51:21:
61:14:49:12:25:21:e6:c6:92:78:ed:80:23:8d:70:
00:a6:57:8c:22:9e:d8:ab:24:e4:b0:eb:0e:2f:5d:
37:67:e2:45:d8:7a:91:4b:48:27:d0:87:67:c3:e8:
9e:75:47:57:84:da:f3:45:26:e6:c0:f6:9c:cf:e8:
af:8d:75:70:f6:dd:6f:6f:01:07:5a:cb:e2:f3:21:
47:a8:dd:32:cd:dd:34:1a:b0:cb:19:ed:94:e8:b9:
44:0c:7c:9d:2c:e3:28:c5:05:7d:34:48:a6:25:28:
2a:bc:db:41:f3:f5:ba:e3:b1:56:5c:a5:21:6f:0d:
99:6f:53:fd:4a:d5:4d:82:51:29:43:3d:f6:98:71:
a2:37:0e:8c:d5:8a:e9:b6:b5:6a:db:49:36:54:86:
28:2c:0c:29:e4:e8:01:4f:8e:16:9d:75:2f:77:6f:
09:0d:43:0b:2c:aa:89:79:4d:44:42:95:8b:53:21:
23:2c:0a:7b:79:5b:44:18:76:6b:9b:1f:2a:96:37:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:34:28:18:78:64:E5:C5:BC:90:14:B4:EB:28:E0:E5:15:32:85:34
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b0:6d:78:a1:ec:73:d9:eb:42:79:72:cd:51:5a:0d:49:5a:
de:ae:7b:24:d6:81:99:ca:54:36:ba:2d:5d:8a:f2:7b:49:52:
ca:12:99:57:5e:c4:32:fa:7c:4f:37:7e:51:ed:ec:ac:53:6c:
12:4f:f3:46:1d:8b:48:55:48:c0:b4:36:85:d9:f4:dc:41:8a:
0f:fe:1d:59:51:15:9d:1a:59:10:83:d7:7f:d0:89:3a:96:39:
65:b1:79:aa:e4:d3:a7:cc:28:f1:d7:a4:6d:1c:59:4f:2d:ac:
6c:35:37:03:f0:b1:b6:38:27:79:3d:95:4e:8a:f2:c3:98:72:
a4:9d:7e:20:a3:35:8a:b4:01:b8:89:47:a7:f9:68:e1:55:f3:
a9:27:38:77:e2:a0:13:eb:f1:a4:12:e5:23:2b:d8:6d:36:5a:
15:49:5c:05:a9:80:07:62:58:e7:88:c0:b2:c1:a9:5f:85:a0:
da:10:04:76:38:eb:42:6c:37:d4:17:d6:2a:c9:42:de:ec:c7:
5a:8c:d5:e3:9d:e0:90:e2:79:f1:2e:64:2e:d0:0b:23:dc:ef:
3e:d5:13:4b:0d:21:4f:a0:95:5d:57:a4:1d:d8:36:dd:84:b5:
38:a7:e5:f6:03:c2:a7:97:54:e9:0a:ee:77:ad:de:e7:f7:24:
0a:1d:42:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWS8OGJHxum+sxF3j0/dBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjUwMzI5MTAwMTEzWhcNMjUwMzMwMTAwMTEzWjAzMTEwLwYDVQQD
EyhkYTM0MjgxODc4NjRlNWM1YmM5MDE0YjRlYjI4ZTBlNTE1MzI4NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq94YrLsg7lHwMcgHL3fyiQWPgdSq
KKPzHdpFZYHWT0zlJhBSuani2lIv6ofxoFiL6gqGu8sPeWXuUSFhFEkSJSHmxpJ4
7YAjjXAApleMIp7YqyTksOsOL103Z+JF2HqRS0gn0Idnw+iedUdXhNrzRSbmwPac
z+ivjXVw9t1vbwEHWsvi8yFHqN0yzd00GrDLGe2U6LlEDHydLOMoxQV9NEimJSgq
vNtB8/W647FWXKUhbw2Zb1P9StVNglEpQz32mHGiNw6M1YrptrVq20k2VIYoLAwp
5OgBT44WnXUvd28JDUMLLKqJeU1EQpWLUyEjLAp7eVtEGHZrmx8qljdMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo0KBh4ZOXFvJAUtOso4OUVMoU0MB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLBteKHs
c9nrQnlyzVFaDUla3q57JNaBmcpUNrotXYrye0lSyhKZV17EMvp8Tzd+Ue3srFNs
Ek/zRh2LSFVIwLQ2hdn03EGKD/4dWVEVnRpZEIPXf9CJOpY5ZbF5quTTp8wo8dek
bRxZTy2sbDU3A/CxtjgneT2VToryw5hypJ1+IKM1irQBuIlHp/lo4VXzqSc4d+Kg
E+vxpBLlIyvYbTZaFUlcBamAB2JY54jAssGpX4Wg2hAEdjjrQmw31BfWKslC3uzH
WozV453gkOJ58S5kLtALI9zvPtUTSw0hT6CVXVekHdg23YS1OKfl9gPCp5dU6Qru
d63e5/ckCh1C9Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:25 2025 by rpki-client