Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.mft
File: nxkCiJvf_vmjsqzVsnOSjhY_scI.mft (raw, json)
Hash identifier: Z1/LwXLHH49bkYpwlxQ6RCE1+On/9ChX9Dq7nr+XGgs=
Subject key identifier: 09:73:B9:46:10:9F:64:4B:AC:6F:7D:3C:E9:CA:7D:BF:AE:3B:3C:D6
Authority key identifier: 9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
Certificate issuer: /CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Certificate serial: 018F1746C575EC93B608E9F3F629C50E265A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.mft
Manifest number: 081E
Signing time: Thu 25 Apr 2024 22:01:05 +0000
Manifest this update: Thu 25 Apr 2024 22:01:05 +0000
Manifest next update: Fri 26 Apr 2024 22:01:05 +0000
Files and hashes: 1: nxkCiJvf_vmjsqzVsnOSjhY_scI.crl (hash: SCiAYmxVPtf17+pCDkJERqc9mGXead7cCID0HhduHK8=)
2: xRoQpA_kUGHh09lBkwuUDW2Bn4g.roa (hash: mZ0r/kyTbatxLFQAJrut48iJbP+QKg6v23fXADhu7R8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:17:46:c5:75:ec:93:b6:08:e9:f3:f6:29:c5:0e:26:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Validity
Not Before: Apr 25 22:01:05 2024 GMT
Not After : Apr 26 22:01:05 2024 GMT
Subject: CN=0973b946109f644bac6f7d3ce9ca7dbfae3b3cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:bc:3d:82:da:e7:d8:24:7b:14:82:ed:1f:
98:aa:59:0f:af:37:a0:df:1a:ac:b2:a1:cd:4c:bb:
ad:ef:4d:79:91:aa:99:48:f5:ba:f4:9a:c0:89:48:
41:e4:11:46:a5:53:ff:81:69:ac:e8:3f:a9:06:bb:
15:88:52:c6:8b:e4:ef:d9:c7:55:e8:4a:fa:f5:73:
4c:35:59:3c:36:d6:26:22:48:88:60:6a:18:98:4a:
eb:d6:40:e8:85:84:e5:05:f4:d1:c7:d0:3d:a3:c3:
fa:4a:0d:25:82:75:f4:15:38:25:90:f9:f0:99:38:
80:85:d8:ab:ae:ba:5d:99:77:46:fa:28:8c:b3:f1:
42:b6:31:7d:96:a5:c5:1f:6d:dc:21:c7:fd:28:ee:
78:b6:c3:a2:49:bc:15:41:9c:60:4d:42:00:ef:74:
4e:dd:e2:2a:72:db:ac:bf:8c:35:71:09:c3:5e:cb:
3c:c1:ec:63:0a:01:5a:d4:e7:36:fc:58:21:8b:32:
0b:e0:d7:e5:da:4d:ca:e8:22:aa:ce:27:7e:2a:c5:
01:0f:d6:fb:79:6c:b9:79:81:2a:5a:20:f1:b2:a4:
8b:c0:31:e9:a4:7c:03:a4:28:9f:b9:d6:f2:94:5d:
77:46:a5:8c:7c:b4:43:52:84:65:a2:56:7b:9f:d5:
5a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:B9:46:10:9F:64:4B:AC:6F:7D:3C:E9:CA:7D:BF:AE:3B:3C:D6
X509v3 Authority Key Identifier:
keyid:9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:d4:58:4b:ff:bb:f4:c7:e7:05:fe:17:5f:bc:65:b6:a9:
cf:e9:49:e1:52:65:f9:e5:a6:fc:29:7b:01:0a:e4:cb:b2:0c:
d8:5e:28:07:b3:f5:5b:10:4c:86:78:5c:ef:72:b3:d4:09:7f:
9e:3c:98:34:69:26:73:14:c0:3e:14:50:af:b2:af:d0:ee:6c:
98:b3:4d:e8:b0:81:6c:db:98:db:9b:3c:bf:10:c0:8b:f3:70:
d3:56:a8:5d:17:51:fe:e6:5d:32:8c:f1:3d:ff:ce:b6:66:d0:
1c:b4:4f:52:de:bc:6b:5b:fd:2b:bd:49:8b:5b:fd:37:0c:5b:
29:e3:ef:6f:6c:95:60:77:77:81:9d:17:09:2a:00:a4:97:47:
5c:12:f6:08:63:ac:f0:b7:c0:78:c5:53:ef:a4:c6:b8:32:79:
0a:37:89:8d:46:8d:d3:98:bc:29:45:1d:93:0e:26:cb:40:3f:
3f:89:b0:08:c2:bc:8c:c6:66:d0:0f:92:bb:e8:25:b5:48:f0:
2b:ec:b1:70:6b:be:2e:04:33:8a:a1:4b:dd:f8:6e:5a:17:7a:
20:d2:90:72:bb:0c:ad:13:57:98:e1:43:19:10:fe:57:25:dd:
ce:fc:60:bd:dd:eb:41:3a:55:5e:63:42:62:68:84:12:8b:5a:
d0:2c:60:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8XRsV17JO2COnz9inFDiZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMTkwMjg4OWJkZmZlZjlhM2IyYWNkNWIyNzM5MjhlMTYz
ZmIxYzIwHhcNMjQwNDI1MjIwMTA1WhcNMjQwNDI2MjIwMTA1WjAzMTEwLwYDVQQD
EygwOTczYjk0NjEwOWY2NDRiYWM2ZjdkM2NlOWNhN2RiZmFlM2IzY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6W8PYLa59gkexSC7R+YqlkPrzeg
3xqssqHNTLut7015kaqZSPW69JrAiUhB5BFGpVP/gWms6D+pBrsViFLGi+Tv2cdV
6Er69XNMNVk8NtYmIkiIYGoYmErr1kDohYTlBfTRx9A9o8P6Sg0lgnX0FTglkPnw
mTiAhdirrrpdmXdG+iiMs/FCtjF9lqXFH23cIcf9KO54tsOiSbwVQZxgTUIA73RO
3eIqctusv4w1cQnDXss8wexjCgFa1Oc2/FghizIL4Nfl2k3K6CKqzid+KsUBD9b7
eWy5eYEqWiDxsqSLwDHppHwDpCifudbylF13RqWMfLRDUoRlolZ7n9VaqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlzuUYQn2RLrG99POnKfb+uOzzWMB8GA1UdIwQY
MBaAFJ8ZAoib3/75o7Ks1bJzko4WP7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnhrQ2lKdmZfdm1qc3F6VnNuT1NqaFlfc2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yMzEzMWItYzIwMy00ZjQ1LWFkN2It
MGU5NGE4ODlmZmRhLzEvbnhrQ2lKdmZfdm1qc3F6VnNuT1NqaFlfc2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yMzEzMWItYzIwMy00ZjQ1LWFkN2ItMGU5NGE4ODlmZmRh
LzEvbnhrQ2lKdmZfdm1qc3F6VnNuT1NqaFlfc2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGXUWEv/
u/TH5wX+F1+8Zbapz+lJ4VJl+eWm/Cl7AQrky7IM2F4oB7P1WxBMhnhc73Kz1Al/
njyYNGkmcxTAPhRQr7Kv0O5smLNN6LCBbNuY25s8vxDAi/Nw01aoXRdR/uZdMozx
Pf/OtmbQHLRPUt68a1v9K71Ji1v9NwxbKePvb2yVYHd3gZ0XCSoApJdHXBL2CGOs
8LfAeMVT76TGuDJ5CjeJjUaN05i8KUUdkw4my0A/P4mwCMK8jMZm0A+Su+gltUjw
K+yxcGu+LgQziqFL3fhuWhd6INKQcrsMrRNXmOFDGRD+VyXdzvxgvd3rQTpVXmNC
YmiEEota0CxgQg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:34:16 2025 by rpki-client