Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/NaAMUKoEkNUmpswA2gcGayY9LNw.mft
File: NaAMUKoEkNUmpswA2gcGayY9LNw.mft (raw, json)
Hash identifier: c4EgsbgsH8It4NY3Yu+CPxbX6jZfjO7z2Old6RBnBlA=
Subject key identifier: D3:5D:67:50:66:B5:0B:F0:9F:FD:52:8F:ED:06:72:D0:BE:F6:4D:9F
Authority key identifier: 35:A0:0C:50:AA:04:90:D5:26:A6:CC:00:DA:07:06:6B:26:3D:2C:DC
Certificate issuer: /CN=35a00c50aa0490d526a6cc00da07066b263d2cdc
Certificate serial: 01950214595E00F3BCF21C3A6D3C105A16E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaAMUKoEkNUmpswA2gcGayY9LNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/NaAMUKoEkNUmpswA2gcGayY9LNw.mft
Manifest number: 01
Signing time: Fri 14 Feb 2025 01:30:42 +0000
Manifest this update: Fri 14 Feb 2025 01:30:42 +0000
Manifest next update: Sat 15 Feb 2025 01:30:42 +0000
Files and hashes: 1: NaAMUKoEkNUmpswA2gcGayY9LNw.crl (hash: 2Lh0yqEYEpewv9Y2hmc8QuO7E/6C743hZi73g7ckPgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:14:59:5e:00:f3:bc:f2:1c:3a:6d:3c:10:5a:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a00c50aa0490d526a6cc00da07066b263d2cdc
Validity
Not Before: Feb 14 01:30:42 2025 GMT
Not After : Feb 15 01:30:42 2025 GMT
Subject: CN=d35d675066b50bf09ffd528fed0672d0bef64d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:48:2f:2d:75:f5:44:02:1c:39:8d:09:2d:
f9:24:0b:e3:01:9d:14:8a:50:d0:74:32:f2:43:38:
3e:9c:ec:0e:6c:39:3c:99:b0:42:32:a8:f0:41:55:
75:e3:29:64:fc:65:e5:c2:10:d3:ad:4b:c7:ee:d9:
d2:8d:c5:e1:34:2a:2f:6a:b9:6d:65:e2:31:f0:8e:
50:89:f6:81:27:6d:21:58:ec:f7:c6:cf:f4:22:66:
16:28:83:8f:4a:a7:d7:ff:f0:ec:52:d1:df:5a:4a:
e9:ae:2c:0c:41:fa:ef:f2:03:d3:4d:5d:c5:7c:11:
f5:0c:52:f2:b3:6b:71:38:cf:18:d8:03:c7:5f:1f:
e9:5d:ab:46:df:cf:2c:4a:d3:fc:fe:c3:a4:3c:08:
7a:ca:f0:e6:d7:21:10:ee:0a:c0:4d:0e:a1:66:b4:
7c:4e:35:9a:77:87:55:25:8f:96:7d:f9:fb:6a:8a:
cb:6c:79:59:01:6a:ca:b4:1d:34:3a:20:e8:0f:29:
86:89:f8:e4:75:69:9a:86:13:43:3c:ea:ff:78:fb:
a3:e8:ea:08:6b:3a:38:f1:85:73:c7:92:3c:c7:47:
de:07:30:c1:05:8d:56:e4:41:9c:5c:d2:38:82:7c:
76:fd:86:07:9e:bd:83:df:9e:3f:99:74:05:4b:3e:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:67:50:66:B5:0B:F0:9F:FD:52:8F:ED:06:72:D0:BE:F6:4D:9F
X509v3 Authority Key Identifier:
keyid:35:A0:0C:50:AA:04:90:D5:26:A6:CC:00:DA:07:06:6B:26:3D:2C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaAMUKoEkNUmpswA2gcGayY9LNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/NaAMUKoEkNUmpswA2gcGayY9LNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/NaAMUKoEkNUmpswA2gcGayY9LNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:bb:7e:d7:e6:72:d5:3b:e9:3e:91:cd:a4:20:cc:c0:1f:
24:1f:78:d6:35:e5:7c:6f:32:e0:fa:43:dc:c5:ed:f8:2f:a3:
da:17:94:4f:8b:d2:9d:23:cf:cc:ca:57:9d:01:9d:ed:81:0b:
ca:08:4b:a3:eb:30:94:43:5b:5d:62:f8:b2:f3:ef:6d:4a:c9:
e2:01:eb:9a:a9:1d:b7:2c:01:9b:7c:1d:68:18:f2:64:f9:a7:
7d:d7:cf:95:03:2d:70:a8:ca:ec:32:8e:22:99:db:d8:c1:38:
f5:78:0c:e7:d8:23:22:10:07:f9:7f:01:0a:db:83:44:e1:24:
b6:53:6b:81:b7:5b:95:37:16:f8:ea:30:fd:a9:4e:b8:9c:84:
fe:3e:2d:9f:bf:a9:e2:e4:3d:ae:5b:b5:b0:8c:ea:d1:2e:b2:
17:9e:21:40:26:31:a1:a8:2f:f7:1f:cc:bd:6e:26:81:db:94:
80:92:2b:fe:c4:35:3d:35:2f:26:a9:0e:50:dd:6f:22:4f:3d:
8c:48:b6:4d:42:4e:6f:e1:9d:18:03:69:2e:bd:fe:90:28:7d:
47:e6:36:af:49:ab:66:cf:10:01:92:5c:82:b8:05:76:9d:39:
41:ae:b6:8c:5f:9e:3a:58:13:e9:1c:38:b5:61:48:7f:1a:1a:
40:85:61:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUCFFleAPO88hw6bTwQWhbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTAwYzUwYWEwNDkwZDUyNmE2Y2MwMGRhMDcwNjZiMjYz
ZDJjZGMwHhcNMjUwMjE0MDEzMDQyWhcNMjUwMjE1MDEzMDQyWjAzMTEwLwYDVQQD
EyhkMzVkNjc1MDY2YjUwYmYwOWZmZDUyOGZlZDA2NzJkMGJlZjY0ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7pILy119UQCHDmNCS35JAvjAZ0U
ilDQdDLyQzg+nOwObDk8mbBCMqjwQVV14ylk/GXlwhDTrUvH7tnSjcXhNCovarlt
ZeIx8I5QifaBJ20hWOz3xs/0ImYWKIOPSqfX//DsUtHfWkrpriwMQfrv8gPTTV3F
fBH1DFLys2txOM8Y2APHXx/pXatG388sStP8/sOkPAh6yvDm1yEQ7grATQ6hZrR8
TjWad4dVJY+Wffn7aorLbHlZAWrKtB00OiDoDymGifjkdWmahhNDPOr/ePuj6OoI
azo48YVzx5I8x0feBzDBBY1W5EGcXNI4gnx2/YYHnr2D354/mXQFSz6nKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNdZ1BmtQvwn/1Sj+0GctC+9k2fMB8GA1UdIwQY
MBaAFDWgDFCqBJDVJqbMANoHBmsmPSzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFBTVVLb0VrTlVtcHN3QTJnY0dheVk5TE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xOWMzMGYtZTAyOS00NzM4LTk2YTct
NDJkODAzMDA0MGQ3LzEvTmFBTVVLb0VrTlVtcHN3QTJnY0dheVk5TE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xOWMzMGYtZTAyOS00NzM4LTk2YTctNDJkODAzMDA0MGQ3
LzEvTmFBTVVLb0VrTlVtcHN3QTJnY0dheVk5TE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriy7ftfm
ctU76T6RzaQgzMAfJB941jXlfG8y4PpD3MXt+C+j2heUT4vSnSPPzMpXnQGd7YEL
yghLo+swlENbXWL4svPvbUrJ4gHrmqkdtywBm3wdaBjyZPmnfdfPlQMtcKjK7DKO
Ipnb2ME49XgM59gjIhAH+X8BCtuDROEktlNrgbdblTcW+Oow/alOuJyE/j4tn7+p
4uQ9rlu1sIzq0S6yF54hQCYxoagv9x/MvW4mgduUgJIr/sQ1PTUvJqkOUN1vIk89
jEi2TUJOb+GdGANpLr3+kCh9R+Y2r0mrZs8QAZJcgrgFdp05Qa62jF+eOlgT6Rw4
tWFIfxoaQIVhCA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:33 2025 by rpki-client