Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: yMyfffnTlHVAy/yTisC3bZjJ9cAlhkO7gTgCrDGrONo=
Subject key identifier: 91:1E:7F:A0:74:C7:6F:D3:4A:1F:FA:3E:5E:C7:C1:7B:0C:AF:3F:6B
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 0195DFD883B818D34EE55D5B19F6652DAD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0D80
Signing time: Sat 29 Mar 2025 03:01:03 +0000
Manifest this update: Sat 29 Mar 2025 03:01:03 +0000
Manifest next update: Sun 30 Mar 2025 03:01:03 +0000
Files and hashes: 1: H1xZrK8BzhRwkTkCMVhmcve9QBM.roa (hash: Ikkhh1Z73FpF6J184UPhQAhV8U+jJLMRcZ3g/9Cu0hA=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: vOusBExoFOOstE20oo91KYlUDE/wHVKbb/6p4HdZFbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:83:b8:18:d3:4e:e5:5d:5b:19:f6:65:2d:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Mar 29 03:01:03 2025 GMT
Not After : Mar 30 03:01:03 2025 GMT
Subject: CN=911e7fa074c76fd34a1ffa3e5ec7c17b0caf3f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:7f:ce:c1:80:ac:c9:7d:a0:40:af:42:a9:
48:23:d5:c7:8b:d3:b9:c5:a4:8c:7e:6b:51:d6:58:
73:e3:90:b5:69:0f:04:d2:d6:b3:7b:88:9f:49:4c:
82:fb:3d:4a:fb:ad:e4:5d:a3:42:6b:6a:59:61:9a:
f8:2c:8f:d5:33:54:1d:29:80:c9:72:3a:dd:b5:16:
6c:8b:d7:01:db:f1:bf:bb:c0:80:2d:f8:cc:e8:ef:
d7:f8:c9:61:85:7e:dc:46:d3:74:7b:2c:38:a0:61:
98:f7:ef:45:7e:0c:21:f9:a2:db:d2:3b:f6:a7:b5:
43:64:bb:ca:62:3f:f4:51:e7:19:3b:bb:f1:d5:fa:
34:79:28:a1:86:fd:de:03:6b:5b:71:3f:ce:0b:f1:
54:a2:54:46:f2:66:57:c2:d6:37:1f:95:71:bf:e7:
66:fc:8c:79:4b:58:96:34:57:1c:50:b5:16:29:1c:
b4:2b:0c:f3:ae:c6:8e:7b:85:9e:d4:3b:50:0f:44:
51:38:38:d8:f1:42:8e:43:4f:e5:ef:42:70:5b:81:
10:13:2a:73:0f:dd:eb:80:4d:b0:c3:ca:bb:a6:57:
fa:5c:5b:4b:44:4d:ce:f4:75:bf:fd:08:8e:d2:01:
7e:d4:a7:13:66:0c:fb:9f:de:24:de:3e:65:80:7a:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:7F:A0:74:C7:6F:D3:4A:1F:FA:3E:5E:C7:C1:7B:0C:AF:3F:6B
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:e2:80:ac:b1:bc:88:b2:b1:51:c7:69:c8:d9:83:4d:bc:
42:53:dc:a2:cf:60:df:45:cb:4a:50:04:e1:f7:af:80:fd:ca:
95:12:2e:51:62:db:b2:6c:5b:f2:ec:50:27:b3:89:e7:1d:e3:
d9:01:39:49:83:11:b8:e2:8c:fe:10:89:10:62:19:83:8e:ab:
58:ff:c8:2b:7a:fb:92:f3:85:2b:64:c7:ed:4d:85:7a:e7:98:
6f:25:97:37:c2:c0:52:54:f9:79:75:4b:e1:9a:a5:3f:75:af:
b6:b0:13:53:ff:8b:40:95:8f:5b:20:76:1f:44:fb:10:5b:0c:
32:01:62:06:a3:d2:d9:b2:09:7d:bb:39:b0:13:2a:78:d5:59:
d9:82:b1:54:b5:04:d0:a4:98:4c:a7:91:10:6a:a7:a5:38:30:
0a:db:4a:44:8f:5a:07:49:69:f1:98:10:5d:23:32:6b:85:0c:
f4:fe:62:64:5e:27:9f:35:41:82:e7:f7:82:26:66:56:13:de:
5c:56:4f:14:6f:ce:44:47:35:61:04:cd:13:00:b7:49:d0:d8:
ab:21:a9:b4:80:35:cb:92:ef:c9:d9:92:1d:52:ff:d5:a8:33:
7f:89:52:57:5e:43:e2:5d:76:00:86:8f:d4:63:5f:86:db:b9:
0a:60:1e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2IO4GNNO5V1bGfZlLa0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5
NWJjYzAwHhcNMjUwMzI5MDMwMTAzWhcNMjUwMzMwMDMwMTAzWjAzMTEwLwYDVQQD
Eyg5MTFlN2ZhMDc0Yzc2ZmQzNGExZmZhM2U1ZWM3YzE3YjBjYWYzZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZB/zsGArMl9oECvQqlII9XHi9O5
xaSMfmtR1lhz45C1aQ8E0taze4ifSUyC+z1K+63kXaNCa2pZYZr4LI/VM1QdKYDJ
cjrdtRZsi9cB2/G/u8CALfjM6O/X+MlhhX7cRtN0eyw4oGGY9+9Ffgwh+aLb0jv2
p7VDZLvKYj/0UecZO7vx1fo0eSihhv3eA2tbcT/OC/FUolRG8mZXwtY3H5Vxv+dm
/Ix5S1iWNFccULUWKRy0KwzzrsaOe4We1DtQD0RRODjY8UKOQ0/l70JwW4EQEypz
D93rgE2ww8q7plf6XFtLRE3O9HW//QiO0gF+1KcTZgz7n94k3j5lgHrDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEef6B0x2/TSh/6Pl7HwXsMrz9rMB8GA1UdIwQY
MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt
Mzk2MDc4MjFhMDlhLzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh
LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkczigKyx
vIiysVHHacjZg028QlPcos9g30XLSlAE4fevgP3KlRIuUWLbsmxb8uxQJ7OJ5x3j
2QE5SYMRuOKM/hCJEGIZg46rWP/IK3r7kvOFK2TH7U2FeueYbyWXN8LAUlT5eXVL
4ZqlP3WvtrATU/+LQJWPWyB2H0T7EFsMMgFiBqPS2bIJfbs5sBMqeNVZ2YKxVLUE
0KSYTKeREGqnpTgwCttKRI9aB0lp8ZgQXSMya4UM9P5iZF4nnzVBguf3giZmVhPe
XFZPFG/OREc1YQTNEwC3SdDYqyGptIA1y5LvydmSHVL/1agzf4lSV15D4l12AIaP
1GNfhtu5CmAeYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:16 2025 by rpki-client