Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: LytFCN7aai8yzU5eG8l9zGJKvvYaI1Yi8wKX3ihte3E=
Subject key identifier: 80:60:06:D5:91:EA:52:26:2B:A5:5F:FB:2E:97:03:CE:6C:CA:74:4A
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 01962ECF9B19A5F7D27956567ABD9020B4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 0176
Signing time: Sun 13 Apr 2025 11:01:19 +0000
Manifest this update: Sun 13 Apr 2025 11:01:19 +0000
Manifest next update: Mon 14 Apr 2025 11:01:19 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: qYuCybl6V+jN2iPaNrF/UAojTyr1Z/0bqlL3c7A0ANg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:9b:19:a5:f7:d2:79:56:56:7a:bd:90:20:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Apr 13 11:01:19 2025 GMT
Not After : Apr 14 11:01:19 2025 GMT
Subject: CN=806006d591ea52262ba55ffb2e9703ce6cca744a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:eb:49:0f:9b:16:c6:a3:3e:60:85:ae:ea:
e2:b9:63:48:1b:a4:a7:37:3e:84:e4:ff:04:90:a7:
88:e4:16:ad:e5:a5:6a:fe:c9:57:97:27:ea:60:6d:
bc:dd:fa:a2:60:0d:eb:77:6d:cf:a4:79:74:13:16:
8d:68:3e:c8:12:ad:b3:9c:f6:74:3e:40:83:ee:77:
e0:2e:4b:bb:52:66:05:4a:25:29:b6:d8:2a:dc:8b:
17:0b:09:ff:6a:ca:ff:14:2a:60:60:0b:ee:54:1b:
7c:32:db:18:88:e6:57:80:89:05:19:80:63:1c:69:
63:fb:e1:a7:36:8b:b8:a6:24:3a:5d:11:db:ae:d4:
ec:99:e5:7c:28:77:17:6a:ab:c8:5f:be:15:51:b8:
bb:fa:77:93:70:8a:b5:20:c2:e0:92:dd:05:5f:48:
76:a2:80:7b:2d:f2:61:e6:22:ab:3c:98:6d:d1:ce:
72:03:79:d8:b8:ee:23:32:fd:e7:9a:7c:b3:da:0c:
61:1f:75:e3:5c:3e:b8:d9:b0:d2:23:c5:7d:8f:37:
7d:54:66:79:74:61:12:05:b8:16:dc:01:32:13:74:
c5:cb:f1:17:dd:58:b2:33:bc:cd:64:55:7d:00:e5:
fe:71:27:50:a6:65:cf:b6:fb:13:5d:1f:ee:66:69:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:60:06:D5:91:EA:52:26:2B:A5:5F:FB:2E:97:03:CE:6C:CA:74:4A
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:66:e5:99:07:d0:20:e9:7b:49:e4:8c:eb:46:24:de:a4:
e8:4e:43:39:73:0f:dd:5c:75:5c:2f:1b:ee:22:30:34:52:95:
d3:8a:4c:57:44:45:37:bc:7a:ef:6a:60:ce:a7:dd:04:23:51:
bd:61:9a:4d:61:77:6f:a7:f6:de:b9:15:7e:d8:c8:a6:55:04:
bf:bc:a8:65:d7:d0:93:39:c0:65:98:c5:a0:e5:c1:29:a1:5e:
20:d9:92:04:ab:02:ad:4c:71:d4:96:39:e5:db:ca:79:1b:67:
62:6d:2a:7d:94:f5:2c:5a:a8:82:a1:a0:ac:06:6d:54:e5:77:
98:c0:6f:71:02:0b:a3:59:13:2c:8b:05:06:20:fc:03:5a:44:
9d:76:cb:77:a4:2d:77:01:64:1a:a1:86:f9:c7:a7:f6:ae:03:
c8:01:24:3f:ab:ce:3a:fb:b6:f7:5e:2e:2e:97:6e:65:af:2f:
9e:0a:15:57:20:bf:35:31:97:28:25:85:73:b0:a1:1e:48:f1:
7a:9e:69:8c:59:8a:a9:10:2a:43:73:6e:51:7b:81:22:13:fe:
ee:43:3c:54:8c:fb:f8:8b:9a:34:84:de:5e:6a:9b:62:c5:2e:
e6:93:f1:cf:70:ee:ff:ba:d6:5c:1e:70:e8:cc:a5:d7:87:de:
17:d6:c2:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5sZpffSeVZWer2QILSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDcwNDFmZTU1NTkxZTRlMjIzNmE0MGY0MzkwMGVmMjZl
ZjA0NWUwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
Eyg4MDYwMDZkNTkxZWE1MjI2MmJhNTVmZmIyZTk3MDNjZTZjY2E3NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslbrSQ+bFsajPmCFruriuWNIG6Sn
Nz6E5P8EkKeI5Bat5aVq/slXlyfqYG283fqiYA3rd23PpHl0ExaNaD7IEq2znPZ0
PkCD7nfgLku7UmYFSiUpttgq3IsXCwn/asr/FCpgYAvuVBt8MtsYiOZXgIkFGYBj
HGlj++GnNou4piQ6XRHbrtTsmeV8KHcXaqvIX74VUbi7+neTcIq1IMLgkt0FX0h2
ooB7LfJh5iKrPJht0c5yA3nYuO4jMv3nmnyz2gxhH3XjXD642bDSI8V9jzd9VGZ5
dGESBbgW3AEyE3TFy/EX3ViyM7zNZFV9AOX+cSdQpmXPtvsTXR/uZmm7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBgBtWR6lImK6Vf+y6XA85synRKMB8GA1UdIwQY
MBaAFJ0HBB/lVZHk4iNqQPQ5AO8m7wReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDkt
NzQ3NDY5ODlhYzkyLzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDktNzQ3NDY5ODlhYzky
LzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiZm5ZkH
0CDpe0nkjOtGJN6k6E5DOXMP3Vx1XC8b7iIwNFKV04pMV0RFN7x672pgzqfdBCNR
vWGaTWF3b6f23rkVftjIplUEv7yoZdfQkznAZZjFoOXBKaFeINmSBKsCrUxx1JY5
5dvKeRtnYm0qfZT1LFqogqGgrAZtVOV3mMBvcQILo1kTLIsFBiD8A1pEnXbLd6Qt
dwFkGqGG+cen9q4DyAEkP6vOOvu2914uLpduZa8vngoVVyC/NTGXKCWFc7ChHkjx
ep5pjFmKqRAqQ3NuUXuBIhP+7kM8VIz7+IuaNITeXmqbYsUu5pPxz3Du/7rWXB5w
6Myl14feF9bC5Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net