Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
File: nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft (raw, json)
Hash identifier: cN4nKP7vs5DuxNXSpAKk1ZQXnwnR8wD83DMXwAf2MKI=
Subject key identifier: DE:54:74:FE:DD:E9:6B:59:1D:AF:46:37:A5:01:3D:C8:81:D2:67:27
Authority key identifier: 9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
Certificate issuer: /CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Certificate serial: 01957EA43DD16C5C1D5CF2B92ADAB68EFBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
Manifest number: 0374
Signing time: Mon 10 Mar 2025 06:00:47 +0000
Manifest this update: Mon 10 Mar 2025 06:00:47 +0000
Manifest next update: Tue 11 Mar 2025 06:00:47 +0000
Files and hashes: 1: X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa (hash: I6HoTfl6GNQQqkXZn/T89sRl04MZcoN1b181n8idbSk=)
2: nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl (hash: 1nKcMLASHrBoaFpnqdP6KIRf0OFy7bpopd8l49DUbmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:a4:3d:d1:6c:5c:1d:5c:f2:b9:2a:da:b6:8e:fb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Validity
Not Before: Mar 10 06:00:47 2025 GMT
Not After : Mar 11 06:00:47 2025 GMT
Subject: CN=de5474fedde96b591daf4637a5013dc881d26727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d6:ab:b7:64:42:10:de:a4:f2:74:28:52:7f:
04:7d:48:fe:3d:9b:02:32:af:d1:5d:ed:af:f6:75:
e3:f8:76:b0:90:d2:d1:34:1d:ac:53:05:be:2b:f6:
6e:9b:88:44:b2:b0:ac:71:00:c6:93:3b:45:7b:9c:
74:2c:61:a2:6d:97:e0:77:f0:68:60:bc:93:1b:ad:
ee:a8:32:df:dc:c7:bb:8b:55:74:a5:c8:e4:35:57:
ff:4b:00:a2:b7:44:4e:1b:a6:bf:41:e2:03:d1:a1:
fa:1d:5a:43:71:93:66:e9:98:94:96:d5:b2:b6:27:
33:e4:15:b4:f5:83:e1:59:e5:1e:01:67:06:45:6b:
5e:6d:46:a5:44:c0:22:12:32:66:fd:9f:b9:d7:ff:
d2:14:ce:ca:a3:56:6e:a4:58:d8:74:5d:8e:fd:18:
4c:28:07:29:35:d6:ee:db:59:9e:66:90:e4:b1:29:
d5:38:7a:03:c5:f6:7e:09:35:3c:f5:b7:c8:03:19:
33:f2:39:75:61:31:c1:6e:b0:59:09:31:4e:bf:47:
dd:20:b6:69:dd:40:0c:59:1e:d0:a1:f1:30:4e:f6:
18:10:bc:07:bf:aa:4d:bb:cf:fe:92:75:88:c2:60:
31:48:73:b8:7c:52:83:a2:c5:0f:de:de:3d:94:01:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:54:74:FE:DD:E9:6B:59:1D:AF:46:37:A5:01:3D:C8:81:D2:67:27
X509v3 Authority Key Identifier:
keyid:9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:40:11:81:d7:55:ed:f3:d2:af:d0:5d:f9:99:56:f0:38:db:
af:e3:12:a1:52:1e:41:c2:f4:97:d4:66:53:bf:99:46:99:f3:
99:b2:62:4a:60:4b:a2:d8:c1:d4:11:42:65:9d:72:17:b6:dc:
f2:7f:14:c9:4f:d8:82:1e:44:ad:96:f9:b8:4b:26:6c:a3:16:
7b:79:35:31:d7:45:b8:80:c5:2e:a4:4f:e7:50:92:6a:6f:0a:
40:91:9e:ea:73:fe:ad:41:c4:3e:b3:35:bb:4c:ca:2c:34:9d:
23:56:ef:82:61:ef:eb:41:04:19:db:69:45:a4:4e:9d:75:39:
f7:0e:65:62:82:26:a9:3d:16:c4:f4:6d:fb:48:db:a7:7f:af:
98:e4:ac:03:2d:0d:5b:d7:a2:f8:3d:79:de:5d:8c:73:a3:64:
ab:80:97:3e:af:40:ae:6e:ad:a3:78:93:37:64:8d:0f:7d:9f:
06:22:60:b7:db:b3:c2:24:b0:32:45:c0:b1:b4:29:1e:3d:25:
95:a6:c8:d3:3b:65:97:7b:1a:4f:44:82:7c:e0:d7:9d:9f:a1:
aa:6c:ff:cf:7f:e9:91:86:d6:ad:19:86:0b:06:7b:b0:57:b8:
ad:d9:4e:80:fb:fc:83:a3:f7:c5:6d:bd:97:63:b2:45:41:b5:
93:b8:42:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV+pD3RbFwdXPK5Ktq2jvvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNWQ0ZWJhZjBkM2QxZWY2YzA3Yzc1ZGNhMzNkNWI1MTEz
YTQyZjYwHhcNMjUwMzEwMDYwMDQ3WhcNMjUwMzExMDYwMDQ3WjAzMTEwLwYDVQQD
EyhkZTU0NzRmZWRkZTk2YjU5MWRhZjQ2MzdhNTAxM2RjODgxZDI2NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89art2RCEN6k8nQoUn8EfUj+PZsC
Mq/RXe2v9nXj+HawkNLRNB2sUwW+K/Zum4hEsrCscQDGkztFe5x0LGGibZfgd/Bo
YLyTG63uqDLf3Me7i1V0pcjkNVf/SwCit0ROG6a/QeID0aH6HVpDcZNm6ZiUltWy
ticz5BW09YPhWeUeAWcGRWtebUalRMAiEjJm/Z+51//SFM7Ko1ZupFjYdF2O/RhM
KAcpNdbu21meZpDksSnVOHoDxfZ+CTU89bfIAxkz8jl1YTHBbrBZCTFOv0fdILZp
3UAMWR7QofEwTvYYELwHv6pNu8/+knWIwmAxSHO4fFKDosUP3t49lAG6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5UdP7d6WtZHa9GN6UBPciB0mcnMB8GA1UdIwQY
MBaAFJ5dTrrw09HvbAfHXcoz1bUROkL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmwxT3V2RFQwZTlzQjhkZHlqUFZ0UkU2UXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMTVmYjAtMGFhOS00ZjRjLTkxYTUt
YjMxNmQwMWRkZDgyLzEvbmwxT3V2RFQwZTlzQjhkZHlqUFZ0UkU2UXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMTVmYjAtMGFhOS00ZjRjLTkxYTUtYjMxNmQwMWRkZDgy
LzEvbmwxT3V2RFQwZTlzQjhkZHlqUFZ0UkU2UXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEARgddV
7fPSr9Bd+ZlW8Djbr+MSoVIeQcL0l9RmU7+ZRpnzmbJiSmBLotjB1BFCZZ1yF7bc
8n8UyU/Ygh5ErZb5uEsmbKMWe3k1MddFuIDFLqRP51CSam8KQJGe6nP+rUHEPrM1
u0zKLDSdI1bvgmHv60EEGdtpRaROnXU59w5lYoImqT0WxPRt+0jbp3+vmOSsAy0N
W9ei+D153l2Mc6Nkq4CXPq9Arm6to3iTN2SND32fBiJgt9uzwiSwMkXAsbQpHj0l
labI0ztll3saT0SCfODXnZ+hqmz/z3/pkYbWrRmGCwZ7sFe4rdlOgPv8g6P3xW29
l2OyRUG1k7hCFg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:05 2025 by rpki-client