Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: Dmir9KZpOiPDdU2OTI17xNEQUNqBEXSAMjCtlX9i6cA=
Subject key identifier: A4:18:5E:02:86:39:71:13:87:6F:94:6C:A0:21:90:96:FC:1B:0D:83
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 0195E00F5C61FF1DF6ADABD22CAB151C03FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 067C
Signing time: Sat 29 Mar 2025 04:00:57 +0000
Manifest this update: Sat 29 Mar 2025 04:00:57 +0000
Manifest next update: Sun 30 Mar 2025 04:00:57 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: Kg2sf4OPyO5xIwO4kA2cICKttxlUR8WeeuFBap7oTzk=)
2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:5c:61:ff:1d:f6:ad:ab:d2:2c:ab:15:1c:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: Mar 29 04:00:57 2025 GMT
Not After : Mar 30 04:00:57 2025 GMT
Subject: CN=a4185e0286397113876f946ca0219096fc1b0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:c9:b8:40:ca:78:e5:88:81:54:ec:7e:83:
1b:45:a9:7b:7c:e1:09:52:5c:b1:53:d3:69:ff:bd:
87:41:d9:43:26:70:e0:06:f8:9c:1d:45:a2:98:74:
74:43:e4:b5:78:36:e6:b1:1e:73:5b:9b:cc:0b:49:
28:63:1d:8e:2c:5b:39:e4:c1:2d:b8:0d:a4:e2:90:
c0:fa:ee:1c:66:e3:6c:3b:5b:51:b5:0c:b1:82:66:
b7:91:a6:b7:80:c3:93:1d:e8:25:20:09:50:37:44:
dd:cf:63:4b:87:1a:38:14:de:14:e1:d4:9f:fd:8a:
3b:22:63:d2:5e:b7:4a:fd:eb:1d:b7:2d:b6:91:ba:
8d:06:8e:1c:ce:3c:3a:d3:7c:d8:57:47:d5:5b:7e:
78:a0:c3:8e:80:ed:eb:71:67:fd:de:1a:e6:6b:00:
39:5c:6c:7d:3d:1a:d5:23:e7:d7:a8:4e:d5:90:a9:
88:fa:4b:70:c9:2e:ea:af:79:e2:7d:e3:f3:71:82:
6c:fd:42:da:35:32:45:0d:ac:de:7b:cf:f0:f5:ba:
84:e2:c9:fe:00:bd:ba:a2:a6:17:4a:fe:d7:9b:ee:
10:cc:cd:a8:fb:52:5c:45:8e:40:5f:d9:61:e3:a9:
f1:aa:ae:23:67:0e:03:b2:6c:4f:f4:ac:09:cf:8c:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:5E:02:86:39:71:13:87:6F:94:6C:A0:21:90:96:FC:1B:0D:83
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:65:b6:fd:e7:b8:39:f4:9e:74:40:ff:02:85:dd:9f:02:d8:
95:0a:fa:82:96:52:00:16:8e:24:59:4e:e0:4a:ab:61:6e:c8:
97:06:70:f8:75:95:ca:cd:fb:b5:15:4e:92:b7:24:bb:23:87:
f5:be:e9:e2:9e:85:df:db:ac:10:a2:05:85:ee:d6:d9:87:f0:
f9:bc:d4:1e:d2:2e:d2:8d:05:bf:44:dd:e6:ab:69:49:b2:8c:
5a:05:ee:f8:f9:aa:79:c2:1f:5e:3b:f2:b1:99:b9:51:8a:22:
bd:f3:d1:bf:e7:18:b7:a5:1e:93:6b:8d:37:eb:f7:72:64:93:
95:cb:b0:7a:12:82:34:bf:de:85:4a:97:8e:dd:68:d9:5d:9e:
6a:10:21:90:2a:9c:89:18:3e:5b:02:52:22:7e:40:24:7d:56:
4b:9f:e2:f7:ac:84:87:82:dd:cb:09:ea:de:b7:8b:ef:9f:fc:
5e:6e:e8:eb:39:b4:33:95:3b:ff:df:0c:56:35:f4:6c:ed:ad:
f0:ed:73:1a:4b:72:c0:eb:c8:dc:c8:cd:3b:52:07:f6:b4:91:
73:52:83:13:9d:3a:8f:11:08:58:04:a3:1d:b5:af:7e:57:42:
4a:d6:17:82:61:f6:63:86:2d:a2:d0:88:b2:ca:8f:3c:45:6d:
37:65:dd:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD1xh/x32ravSLKsVHAP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjUwMzI5MDQwMDU3WhcNMjUwMzMwMDQwMDU3WjAzMTEwLwYDVQQD
EyhhNDE4NWUwMjg2Mzk3MTEzODc2Zjk0NmNhMDIxOTA5NmZjMWIwZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoLJuEDKeOWIgVTsfoMbRal7fOEJ
UlyxU9Np/72HQdlDJnDgBvicHUWimHR0Q+S1eDbmsR5zW5vMC0koYx2OLFs55MEt
uA2k4pDA+u4cZuNsO1tRtQyxgma3kaa3gMOTHeglIAlQN0Tdz2NLhxo4FN4U4dSf
/Yo7ImPSXrdK/esdty22kbqNBo4czjw603zYV0fVW354oMOOgO3rcWf93hrmawA5
XGx9PRrVI+fXqE7VkKmI+ktwyS7qr3nifePzcYJs/ULaNTJFDazee8/w9bqE4sn+
AL26oqYXSv7Xm+4QzM2o+1JcRY5AX9lh46nxqq4jZw4DsmxP9KwJz4wrowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQYXgKGOXETh2+UbKAhkJb8Gw2DMB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmW2/ee4
OfSedED/AoXdnwLYlQr6gpZSABaOJFlO4EqrYW7IlwZw+HWVys37tRVOkrckuyOH
9b7p4p6F39usEKIFhe7W2Yfw+bzUHtIu0o0Fv0Td5qtpSbKMWgXu+PmqecIfXjvy
sZm5UYoivfPRv+cYt6Uek2uNN+v3cmSTlcuwehKCNL/ehUqXjt1o2V2eahAhkCqc
iRg+WwJSIn5AJH1WS5/i96yEh4Ldywnq3reL75/8Xm7o6zm0M5U7/98MVjX0bO2t
8O1zGktywOvI3MjNO1IH9rSRc1KDE506jxEIWASjHbWvfldCStYXgmH2Y4YtotCI
ssqPPEVtN2XdhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:03 2025 by rpki-client