Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
File: nR3U4Tta-cKexamAJQniFjf6CNY.mft (raw, json)
Hash identifier: l5Xj5j9ome8acQibavFOCwaK7P3lc3uzaLZnEBU+uTY=
Subject key identifier: E5:0B:24:E5:2F:2B:61:8C:59:05:BC:38:A5:14:4A:62:48:97:B9:09
Authority key identifier: 9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
Certificate issuer: /CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Certificate serial: 01955B05778770269B8E51BC70D043B21C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
Manifest number: 044D
Signing time: Mon 03 Mar 2025 08:00:39 +0000
Manifest this update: Mon 03 Mar 2025 08:00:39 +0000
Manifest next update: Tue 04 Mar 2025 08:00:39 +0000
Files and hashes: 1: nR3U4Tta-cKexamAJQniFjf6CNY.crl (hash: 57/x+vsuyt0mpFVysTnP+SJRYb9uWBOKPlRBKoZhjao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:05:77:87:70:26:9b:8e:51:bc:70:d0:43:b2:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Validity
Not Before: Mar 3 08:00:39 2025 GMT
Not After : Mar 4 08:00:39 2025 GMT
Subject: CN=e50b24e52f2b618c5905bc38a5144a624897b909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:ac:30:e7:8a:ab:12:61:ea:4f:ac:e2:5b:
e4:cb:77:03:3e:e0:5b:a1:20:93:5a:29:bb:a1:03:
ec:8d:b9:b9:ae:ae:b6:b0:c2:08:90:c4:d3:26:7f:
46:a8:51:38:5d:a5:a0:4c:0f:48:54:97:31:43:26:
1b:cf:44:fe:bf:f3:8b:d0:34:c1:3b:9e:01:97:28:
e3:db:17:ab:a7:0e:b3:c6:81:8c:a1:b7:22:fb:7a:
74:c9:f1:d4:06:ad:fb:59:5d:18:41:0e:e5:27:d7:
65:9b:af:ba:60:7e:b4:ad:4d:07:05:c7:44:b6:4c:
97:40:03:19:5c:a5:62:8b:bf:de:83:88:2d:83:2f:
c1:d8:32:d4:cd:03:e3:35:52:47:02:da:c0:64:b4:
d4:fa:ad:5c:c5:fd:bd:85:f3:60:48:61:21:58:06:
4b:92:ca:2f:c8:78:b1:e0:2c:dc:c7:81:f2:c3:47:
86:bb:e4:72:c6:b0:a2:82:82:db:c2:e0:06:a1:6f:
5c:88:3d:33:b2:82:66:e3:8c:98:ec:50:0d:0b:60:
59:ea:c5:a5:68:83:f2:3b:2d:6e:98:31:50:62:f2:
d0:ad:6f:7f:02:87:c3:17:f7:56:05:6d:eb:06:5a:
81:f0:7f:c6:f9:2b:f4:75:cb:60:da:83:1c:36:94:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:24:E5:2F:2B:61:8C:59:05:BC:38:A5:14:4A:62:48:97:B9:09
X509v3 Authority Key Identifier:
keyid:9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e0:27:b7:46:d0:a0:ce:b9:c0:9f:c9:65:25:4c:ff:4f:d1:
20:40:6c:46:97:cd:3b:0c:17:61:c2:50:d4:c8:58:78:2a:c1:
9c:a8:4e:53:66:d7:0a:06:e8:2f:d3:94:fd:eb:f5:ee:93:04:
db:0d:30:84:86:92:9d:cd:92:34:e5:e1:44:c9:f1:52:02:d6:
c5:b8:5e:6b:70:48:fa:95:d8:2d:d6:34:c7:81:43:fb:7b:96:
a2:0d:5b:e7:95:03:96:5f:f5:98:34:b0:18:41:07:44:16:ed:
7d:94:1e:3c:fb:0a:f0:b1:65:8e:9e:c3:96:04:0c:06:45:8c:
f3:3b:d2:60:22:0a:87:b4:f0:b7:a0:a0:dc:2c:4a:97:6f:90:
6f:e5:13:21:e2:8c:b5:d9:f4:01:0a:f4:92:4a:eb:dc:56:3d:
6e:39:8a:b1:0a:2c:ea:12:6a:89:a5:e4:15:3c:78:bd:e7:50:
cc:7a:e5:a1:1e:5b:cf:01:99:90:da:62:34:08:13:61:88:ba:
e1:4e:3f:45:69:50:19:d1:3a:43:05:2d:1f:9c:22:c2:61:2e:
9b:73:f9:78:4d:5c:a7:fa:c1:8f:8d:6f:88:99:1d:88:4e:d1:
6e:2c:48:02:6a:92:95:a9:da:bd:cd:7c:e3:42:75:9c:f1:5c:
99:29:05:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVbBXeHcCabjlG8cNBDshwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMWRkNGUxM2I1YWY5YzI5ZWM1YTk4MDI1MDllMjE2Mzdm
YTA4ZDYwHhcNMjUwMzAzMDgwMDM5WhcNMjUwMzA0MDgwMDM5WjAzMTEwLwYDVQQD
EyhlNTBiMjRlNTJmMmI2MThjNTkwNWJjMzhhNTE0NGE2MjQ4OTdiOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg76sMOeKqxJh6k+s4lvky3cDPuBb
oSCTWim7oQPsjbm5rq62sMIIkMTTJn9GqFE4XaWgTA9IVJcxQyYbz0T+v/OL0DTB
O54Blyjj2xerpw6zxoGMobci+3p0yfHUBq37WV0YQQ7lJ9dlm6+6YH60rU0HBcdE
tkyXQAMZXKVii7/eg4gtgy/B2DLUzQPjNVJHAtrAZLTU+q1cxf29hfNgSGEhWAZL
ksovyHix4Czcx4Hyw0eGu+RyxrCigoLbwuAGoW9ciD0zsoJm44yY7FANC2BZ6sWl
aIPyOy1umDFQYvLQrW9/AofDF/dWBW3rBlqB8H/G+Sv0dctg2oMcNpQPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOULJOUvK2GMWQW8OKUUSmJIl7kJMB8GA1UdIwQY
MBaAFJ0d1OE7WvnCnsWpgCUJ4hY3+gjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblIzVTRUdGEtY0tleGFtQUpRbmlGamY2Q05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZmY5MDUtNDNhMi00NjY4LTk2OGEt
YThlZGU5NjVlYjRjLzEvblIzVTRUdGEtY0tleGFtQUpRbmlGamY2Q05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZmY5MDUtNDNhMi00NjY4LTk2OGEtYThlZGU5NjVlYjRj
LzEvblIzVTRUdGEtY0tleGFtQUpRbmlGamY2Q05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+Ant0bQ
oM65wJ/JZSVM/0/RIEBsRpfNOwwXYcJQ1MhYeCrBnKhOU2bXCgboL9OU/ev17pME
2w0whIaSnc2SNOXhRMnxUgLWxbhea3BI+pXYLdY0x4FD+3uWog1b55UDll/1mDSw
GEEHRBbtfZQePPsK8LFljp7DlgQMBkWM8zvSYCIKh7Twt6Cg3CxKl2+Qb+UTIeKM
tdn0AQr0kkrr3FY9bjmKsQos6hJqiaXkFTx4vedQzHrloR5bzwGZkNpiNAgTYYi6
4U4/RWlQGdE6QwUtH5wiwmEum3P5eE1cp/rBj41viJkdiE7RbixIAmqSlanavc18
40J1nPFcmSkFLg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:25 2025 by rpki-client