Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/nvn3oOgsc3suYq_rIhqXZqoNPSc.mft
File: nvn3oOgsc3suYq_rIhqXZqoNPSc.mft (raw, json)
Hash identifier: gCPZL9jQeRg9Epgr5wQgXlV89zFbSZ0PsHxQ+1LrWTw=
Subject key identifier: E6:4E:43:95:6E:75:D4:83:5B:97:5B:20:71:99:01:80:30:91:91:FE
Authority key identifier: 9E:F9:F7:A0:E8:2C:73:7B:2E:62:AF:EB:22:1A:97:66:AA:0D:3D:27
Certificate issuer: /CN=9ef9f7a0e82c737b2e62afeb221a9766aa0d3d27
Certificate serial: 0188ADDD7CC07A6A5EC08744E786539EB8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvn3oOgsc3suYq_rIhqXZqoNPSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/nvn3oOgsc3suYq_rIhqXZqoNPSc.mft
Manifest number: 0D01
Signing time: Mon 12 Jun 2023 04:29:13 +0000
Manifest this update: Mon 12 Jun 2023 04:29:13 +0000
Manifest next update: Tue 13 Jun 2023 04:29:13 +0000
Files and hashes: 1: 5TPXCAFiMBh5U8VkfORxsQ-zCTU.roa (hash: 1gHTgwdhWWEjZ/EU+S/zQJgfLfq+GM0xLlVn+BOoURQ=)
2: nvn3oOgsc3suYq_rIhqXZqoNPSc.crl (hash: Pb26DOA92bKuGfE/HYdtB2wLa0NAF3sQ9NOuHWH/Rnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ad:dd:7c:c0:7a:6a:5e:c0:87:44:e7:86:53:9e:b8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9f7a0e82c737b2e62afeb221a9766aa0d3d27
Validity
Not Before: Jun 12 04:29:13 2023 GMT
Not After : Jun 13 04:29:13 2023 GMT
Subject: CN=e64e43956e75d4835b975b2071990180309191fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:79:49:be:48:e7:d0:60:4b:60:2b:d8:20:
b1:5f:c7:35:92:c1:a5:53:11:5a:86:d6:8f:86:c0:
06:45:1d:0d:9f:48:a6:39:1b:bb:a5:1d:35:cc:69:
cb:23:f5:3d:8c:b5:8f:9c:3a:5d:3c:7f:01:9b:cf:
22:78:70:78:12:62:34:56:65:c2:7a:6b:34:a4:a3:
2e:75:48:63:67:7a:14:d2:9f:dd:ae:6e:61:bf:72:
5d:6b:96:c6:e1:fc:63:93:ed:d4:63:28:d5:62:db:
f0:4d:76:ba:41:c3:7e:cc:0b:f0:df:f6:d5:40:03:
0f:70:08:21:10:cd:92:5a:0f:01:34:6f:53:67:03:
13:f3:a5:75:b9:55:69:c7:5b:38:b7:69:d7:52:57:
90:06:e0:18:b8:46:25:0f:49:13:43:af:ea:3c:9d:
56:0a:a9:bb:00:3b:78:ee:dc:88:0f:5b:f0:19:7d:
a1:fa:8b:04:bd:41:6f:0e:8d:b6:6c:a8:ac:62:1a:
9f:b9:3a:88:b8:46:a3:c9:5d:16:d2:41:35:e7:05:
24:ab:be:e9:1a:b0:9a:6d:61:16:8c:b7:19:10:c9:
9e:78:87:9a:02:59:38:dc:ea:6e:8a:47:c8:4a:35:
8f:2e:85:d0:a0:ff:b3:78:de:74:f2:e8:10:e5:22:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:43:95:6E:75:D4:83:5B:97:5B:20:71:99:01:80:30:91:91:FE
X509v3 Authority Key Identifier:
keyid:9E:F9:F7:A0:E8:2C:73:7B:2E:62:AF:EB:22:1A:97:66:AA:0D:3D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvn3oOgsc3suYq_rIhqXZqoNPSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/nvn3oOgsc3suYq_rIhqXZqoNPSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/nvn3oOgsc3suYq_rIhqXZqoNPSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e5:e8:07:1b:23:42:58:2e:93:ad:09:8d:5b:2f:1d:79:d7:
b8:25:e1:de:f3:bf:d0:63:81:65:57:60:33:49:c4:43:6d:c7:
12:41:a1:d9:1d:e7:fa:f9:aa:b8:f5:a9:86:03:0f:67:b8:a0:
2f:7c:a7:04:e4:f8:08:d9:4b:81:fe:53:d3:43:41:21:d6:d1:
34:c5:fd:11:21:9b:ab:54:3f:3e:81:20:5d:53:96:dc:ce:cf:
bc:fd:f9:3f:2d:24:c9:8b:36:9f:50:19:55:de:24:31:99:32:
59:6a:4b:b0:4b:85:c5:2a:97:15:5c:51:a0:a1:c5:dc:6b:46:
f6:f7:cd:51:45:d0:09:34:ae:57:35:46:38:5c:30:8f:e0:0d:
8c:47:c2:10:fc:2a:4c:92:3b:d4:79:27:32:85:2d:b7:45:65:
aa:49:77:e5:70:85:a1:2a:1f:1c:33:78:43:fc:37:b3:33:fd:
5f:f0:fa:87:c8:df:59:2f:27:0b:4c:78:a9:5f:0c:f9:d3:d9:
66:d9:d5:8c:1f:c6:7d:83:c7:2c:ea:0c:a9:05:97:9e:39:57:
ce:0b:27:3e:76:75:a2:b6:b1:be:94:8d:89:25:ec:3c:30:0b:
2b:0e:be:b0:ce:49:3b:03:57:76:1f:d6:ae:a2:c6:c8:05:b7:
16:13:21:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYit3XzAempewIdE54ZTnrjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjlmN2EwZTgyYzczN2IyZTYyYWZlYjIyMWE5NzY2YWEw
ZDNkMjcwHhcNMjMwNjEyMDQyOTEzWhcNMjMwNjEzMDQyOTEzWjAzMTEwLwYDVQQD
EyhlNjRlNDM5NTZlNzVkNDgzNWI5NzViMjA3MTk5MDE4MDMwOTE5MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzx5Sb5I59BgS2Ar2CCxX8c1ksGl
UxFahtaPhsAGRR0Nn0imORu7pR01zGnLI/U9jLWPnDpdPH8Bm88ieHB4EmI0VmXC
ems0pKMudUhjZ3oU0p/drm5hv3Jda5bG4fxjk+3UYyjVYtvwTXa6QcN+zAvw3/bV
QAMPcAghEM2SWg8BNG9TZwMT86V1uVVpx1s4t2nXUleQBuAYuEYlD0kTQ6/qPJ1W
Cqm7ADt47tyID1vwGX2h+osEvUFvDo22bKisYhqfuTqIuEajyV0W0kE15wUkq77p
GrCabWEWjLcZEMmeeIeaAlk43OpuikfISjWPLoXQoP+zeN508ugQ5SIn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZOQ5VuddSDW5dbIHGZAYAwkZH+MB8GA1UdIwQY
MBaAFJ7596DoLHN7LmKv6yIal2aqDT0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZuM29PZ3NjM3N1WXFfcklocVhacW9OUFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNWFmYWQtYzIwYi00MGYwLWIxMmYt
YzZhNDRiODNmYmNjLzEvbnZuM29PZ3NjM3N1WXFfcklocVhacW9OUFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNWFmYWQtYzIwYi00MGYwLWIxMmYtYzZhNDRiODNmYmNj
LzEvbnZuM29PZ3NjM3N1WXFfcklocVhacW9OUFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeXoBxsj
Qlguk60JjVsvHXnXuCXh3vO/0GOBZVdgM0nEQ23HEkGh2R3n+vmquPWphgMPZ7ig
L3ynBOT4CNlLgf5T00NBIdbRNMX9ESGbq1Q/PoEgXVOW3M7PvP35Py0kyYs2n1AZ
Vd4kMZkyWWpLsEuFxSqXFVxRoKHF3GtG9vfNUUXQCTSuVzVGOFwwj+ANjEfCEPwq
TJI71HknMoUtt0Vlqkl35XCFoSofHDN4Q/w3szP9X/D6h8jfWS8nC0x4qV8M+dPZ
ZtnVjB/GfYPHLOoMqQWXnjlXzgsnPnZ1oraxvpSNiSXsPDALKw6+sM5JOwNXdh/W
rqLGyAW3FhMhNw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:10 2025 by rpki-client