Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.mft
File: NKnrbE06V8mlZFbdvwASuBdQsdM.mft (raw, json)
Hash identifier: CsCFUjgaI9FByIJOP8nQk/xZdVQglyfE3r/KSTNQ7lA=
Subject key identifier: 57:F9:5E:54:2D:61:F8:04:1A:11:2D:43:78:9A:83:DE:D4:1F:57:6E
Authority key identifier: 34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
Certificate issuer: /CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Certificate serial: 018C43149600F6FF81C96A4998B8CE1ADA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.mft
Manifest number: 05A3
Signing time: Thu 07 Dec 2023 07:01:11 +0000
Manifest this update: Thu 07 Dec 2023 07:01:11 +0000
Manifest next update: Fri 08 Dec 2023 07:01:11 +0000
Files and hashes: 1: NKnrbE06V8mlZFbdvwASuBdQsdM.crl (hash: SgOSPOtvLDXTA525Qzr1DmFIBJoQHiqVULwcnbuOld4=)
2: YjBKXkQXMHf0_pA4qcpXsGbUeRk.roa (hash: i1DqFHpsj9QAGTJ1gIk3MfC4El+yBvATAcNyHakLZNc=)
3: ZUTwTfvy5gZ1XNeuDKqDlkFc_Mo.roa (hash: SddHLfDCxBkTM+dyjdzcw1b/Y+MxxC1+o1NdthXEeug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:14:96:00:f6:ff:81:c9:6a:49:98:b8:ce:1a:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Validity
Not Before: Dec 7 07:01:11 2023 GMT
Not After : Dec 8 07:01:11 2023 GMT
Subject: CN=57f95e542d61f8041a112d43789a83ded41f576e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:70:e6:d5:f0:ea:87:c2:fe:8f:ef:a1:4b:
77:7c:ea:c6:79:1a:8c:eb:4c:c2:f3:5e:cf:23:1c:
8b:61:ff:34:64:3f:ba:e0:77:a0:ac:91:8c:81:c1:
e2:bc:72:6a:44:b1:56:c9:2b:97:2d:ab:cd:4d:ab:
b4:d0:86:f1:87:43:aa:99:43:9c:a1:21:5f:9e:ff:
3e:46:2d:90:e1:2c:bc:05:c3:3a:3c:90:e4:b7:7c:
69:79:24:7b:ef:9a:de:46:a1:71:70:01:43:d2:7e:
c3:bc:fa:07:3e:41:07:d3:25:f4:7c:6a:6a:21:3e:
16:52:c5:ff:44:9e:5b:e3:f5:33:92:e0:60:c5:a3:
14:e5:23:43:f3:89:47:84:6c:11:f1:5c:f7:cc:ed:
ca:6d:59:db:7a:a5:73:0a:26:22:e9:4c:be:99:3d:
97:f1:a8:7a:0f:c2:b6:d4:a6:f2:88:c6:74:61:1b:
0e:ad:86:29:b8:5b:63:00:dc:33:cc:26:b0:55:f2:
47:3d:0d:4e:f9:02:3a:1c:cf:e7:d7:66:c7:ab:46:
68:30:ab:64:51:7e:b4:9a:b4:0e:a7:9f:4a:df:ec:
1d:09:22:ec:ba:5a:01:33:e4:60:76:fd:e7:ef:2c:
69:e6:3a:bd:5d:68:67:ca:6d:30:e8:ba:ca:ae:34:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:5E:54:2D:61:F8:04:1A:11:2D:43:78:9A:83:DE:D4:1F:57:6E
X509v3 Authority Key Identifier:
keyid:34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f3:02:33:37:5c:0d:b9:8a:4e:52:ce:22:9b:71:50:10:57:
cf:80:ce:14:03:03:0b:ad:1a:0e:74:33:c7:02:f5:6d:5c:e8:
9e:ff:77:70:2f:71:cc:aa:34:c1:37:10:c2:a2:7b:03:f0:18:
45:00:7c:7f:f0:f3:02:d7:f7:d8:07:eb:b7:f4:7c:49:92:bc:
a1:2b:f8:9a:71:51:b6:15:0f:cd:df:60:69:6c:6c:f7:f5:0d:
42:53:f2:5e:75:e3:4c:0c:c9:19:68:fb:e9:96:4b:e2:bc:d3:
fe:83:6b:ea:cb:2b:76:6e:19:ef:03:7c:6b:e0:20:74:f8:6e:
76:cf:36:41:09:78:c5:72:71:ee:52:01:db:25:11:76:2f:3e:
65:cc:db:39:fe:1d:d3:d8:6c:b1:ac:be:cb:60:9a:82:3f:7d:
b1:1e:cf:6e:07:d9:3c:fe:e0:1a:8f:5c:06:13:33:0c:8a:10:
2a:b6:5a:b2:b1:ea:59:ab:f0:35:01:dc:63:1e:9a:4d:6c:9c:
f4:da:1a:fc:a7:4b:75:2e:5f:41:74:ae:e9:da:3d:18:ee:0f:
dd:e4:62:24:c6:68:35:3a:f3:8a:e5:7a:59:30:49:2f:9f:7d:
75:c2:47:9f:c0:33:8d:19:bc:7d:ef:f6:f4:1f:8a:aa:e3:73:
de:17:79:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxDFJYA9v+ByWpJmLjOGtofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTllYjZjNGQzYTU3YzlhNTY0NTZkZGJmMDAxMmI4MTc1
MGIxZDMwHhcNMjMxMjA3MDcwMTExWhcNMjMxMjA4MDcwMTExWjAzMTEwLwYDVQQD
Eyg1N2Y5NWU1NDJkNjFmODA0MWExMTJkNDM3ODlhODNkZWQ0MWY1NzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvulw5tXw6ofC/o/voUt3fOrGeRqM
60zC817PIxyLYf80ZD+64HegrJGMgcHivHJqRLFWySuXLavNTau00Ibxh0OqmUOc
oSFfnv8+Ri2Q4Sy8BcM6PJDkt3xpeSR775reRqFxcAFD0n7DvPoHPkEH0yX0fGpq
IT4WUsX/RJ5b4/UzkuBgxaMU5SND84lHhGwR8Vz3zO3KbVnbeqVzCiYi6Uy+mT2X
8ah6D8K21KbyiMZ0YRsOrYYpuFtjANwzzCawVfJHPQ1O+QI6HM/n12bHq0ZoMKtk
UX60mrQOp59K3+wdCSLsuloBM+Rgdv3n7yxp5jq9XWhnym0w6LrKrjSF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf5XlQtYfgEGhEtQ3iag97UH1duMB8GA1UdIwQY
MBaAFDSp62xNOlfJpWRW3b8AErgXULHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktucmJFMDZWOG1sWkZiZHZ3QVN1QmRRc2RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZDg0MjctOGU2MC00NDI5LTg0YjMt
MzQ1ZDA2NGRhN2JmLzEvTktucmJFMDZWOG1sWkZiZHZ3QVN1QmRRc2RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZDg0MjctOGU2MC00NDI5LTg0YjMtMzQ1ZDA2NGRhN2Jm
LzEvTktucmJFMDZWOG1sWkZiZHZ3QVN1QmRRc2RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvMCMzdc
DbmKTlLOIptxUBBXz4DOFAMDC60aDnQzxwL1bVzonv93cC9xzKo0wTcQwqJ7A/AY
RQB8f/DzAtf32Afrt/R8SZK8oSv4mnFRthUPzd9gaWxs9/UNQlPyXnXjTAzJGWj7
6ZZL4rzT/oNr6ssrdm4Z7wN8a+AgdPhuds82QQl4xXJx7lIB2yURdi8+ZczbOf4d
09hssay+y2Cagj99sR7PbgfZPP7gGo9cBhMzDIoQKrZasrHqWavwNQHcYx6aTWyc
9Noa/KdLdS5fQXSu6do9GO4P3eRiJMZoNTrziuV6WTBJL599dcJHn8AzjRm8fe/2
9B+KquNz3hd5mw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:47 2025 by rpki-client