Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.mft
File: NAcp3GB7SGwyTZEU3kUkKhLktbo.mft (raw, json)
Hash identifier: WOI+2DoxMSYaP/0U87obmjFhm6fpwXuDoQVlz7ENEdg=
Subject key identifier: EB:D9:A7:0B:E9:AC:2F:A5:12:BA:80:1C:CE:FA:C5:5B:C9:9E:69:61
Authority key identifier: 34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
Certificate issuer: /CN=340729dc607b486c324d9114de45242a12e4b5ba
Certificate serial: 018CED7482EC5FAD2A6EF3CE7E784EEF5AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.mft
Manifest number: 0CD4
Signing time: Tue 09 Jan 2024 09:01:24 +0000
Manifest this update: Tue 09 Jan 2024 09:01:24 +0000
Manifest next update: Wed 10 Jan 2024 09:01:24 +0000
Files and hashes: 1: NAcp3GB7SGwyTZEU3kUkKhLktbo.crl (hash: J9e3BRZAmjlXk42fBaH/XdVkSS2yxQ4CfEXi5UQVZsw=)
2: hD1AphFIn6fuV9gSTSrraqks_Sk.roa (hash: oBX9aRcDYNWZ0t6xKF0WdTEUvu7dgkLbf0ja/L0F1mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:74:82:ec:5f:ad:2a:6e:f3:ce:7e:78:4e:ef:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340729dc607b486c324d9114de45242a12e4b5ba
Validity
Not Before: Jan 9 09:01:24 2024 GMT
Not After : Jan 10 09:01:24 2024 GMT
Subject: CN=ebd9a70be9ac2fa512ba801ccefac55bc99e6961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:ed:c5:18:df:b9:8e:60:4f:60:3f:33:8e:
8a:43:af:b7:ae:08:5e:08:29:05:9c:6c:d4:cb:78:
d0:85:8a:7e:8f:5c:dd:68:29:b6:62:00:19:1a:d9:
86:67:0a:38:73:fa:55:66:fd:54:a1:e5:46:a1:54:
27:0c:39:a5:f1:92:2f:2d:6c:f3:71:45:df:1a:59:
a4:0b:d2:0f:ba:dd:04:4e:e6:81:5c:c7:24:89:25:
65:c4:21:f5:9e:2f:05:8b:0b:ca:d2:eb:bf:8e:36:
0f:a1:ff:5c:8b:a6:06:7f:8f:83:79:a9:34:74:3a:
f6:ff:d6:93:31:12:6f:ef:94:b6:eb:32:ed:e6:62:
64:c7:94:d7:0f:18:70:f0:8a:b4:86:45:bf:36:ce:
48:45:c3:36:4c:1c:61:64:8b:bb:5f:37:a8:8d:00:
28:41:31:71:fc:a6:ca:5b:34:4d:e3:da:8d:8c:b4:
41:a1:f0:64:2b:01:3d:26:d1:a2:43:2c:b5:32:eb:
31:f0:5b:e7:a8:55:b9:e2:de:7c:95:9a:d4:61:89:
f5:15:20:c3:34:b6:cc:6c:37:16:cb:c0:76:9b:b6:
79:55:9f:68:9b:be:b8:90:0d:a0:31:b1:0e:a5:9d:
4d:d7:b5:f1:64:e4:9a:23:05:09:c2:49:9b:cc:69:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D9:A7:0B:E9:AC:2F:A5:12:BA:80:1C:CE:FA:C5:5B:C9:9E:69:61
X509v3 Authority Key Identifier:
keyid:34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:a5:c4:7a:55:b8:55:f0:8c:ec:02:3a:6c:23:d8:28:df:
8d:8f:98:f5:25:03:be:78:ba:69:b3:0e:08:ff:bf:86:83:ef:
d1:54:ae:cb:0d:8d:4e:9d:8a:12:73:61:97:70:e1:b8:8c:6d:
00:2b:f0:37:c9:4b:d6:6f:ff:88:32:c4:7d:b9:90:46:6e:f6:
3b:b2:fe:49:c2:91:56:c2:dd:f4:f5:e5:af:47:73:b8:16:c2:
0d:a6:4b:5d:90:8c:7c:30:75:df:a1:13:70:7a:1d:44:61:3f:
2e:41:3c:44:bf:11:3b:72:f4:63:53:de:1c:2d:f3:a2:5c:aa:
49:26:cc:18:be:d1:4f:6f:64:73:31:78:ea:f3:ff:52:7a:a9:
83:91:df:08:8b:9c:dd:e2:f3:1c:17:a0:6c:2e:b4:55:00:d7:
b8:d7:cc:6c:f6:6f:62:d8:61:f6:10:0a:bb:23:98:9a:9d:e3:
28:bf:95:d6:03:96:43:ad:79:ef:3f:a0:85:97:59:3a:5b:21:
79:97:54:04:05:f7:26:47:46:d6:ca:e3:ac:dd:fe:98:29:c9:
5f:39:f3:32:42:57:32:71:7e:c4:2b:26:db:57:09:71:6f:1a:
14:d0:20:45:c2:d4:0a:f3:4c:5d:6a:6f:62:7e:bb:e5:90:f1:
10:17:d2:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYztdILsX60qbvPOfnhO71rlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDcyOWRjNjA3YjQ4NmMzMjRkOTExNGRlNDUyNDJhMTJl
NGI1YmEwHhcNMjQwMTA5MDkwMTI0WhcNMjQwMTEwMDkwMTI0WjAzMTEwLwYDVQQD
EyhlYmQ5YTcwYmU5YWMyZmE1MTJiYTgwMWNjZWZhYzU1YmM5OWU2OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiULtxRjfuY5gT2A/M46KQ6+3rghe
CCkFnGzUy3jQhYp+j1zdaCm2YgAZGtmGZwo4c/pVZv1UoeVGoVQnDDml8ZIvLWzz
cUXfGlmkC9IPut0ETuaBXMckiSVlxCH1ni8FiwvK0uu/jjYPof9ci6YGf4+Deak0
dDr2/9aTMRJv75S26zLt5mJkx5TXDxhw8Iq0hkW/Ns5IRcM2TBxhZIu7XzeojQAo
QTFx/KbKWzRN49qNjLRBofBkKwE9JtGiQyy1Musx8FvnqFW54t58lZrUYYn1FSDD
NLbMbDcWy8B2m7Z5VZ9om764kA2gMbEOpZ1N17XxZOSaIwUJwkmbzGmtvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvZpwvprC+lErqAHM76xVvJnmlhMB8GA1UdIwQY
MBaAFDQHKdxge0hsMk2RFN5FJCoS5LW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFjcDNHQjdTR3d5VFpFVTNrVWtLaExrdGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmUwZWMtNjFiMy00N2MyLTljMjkt
ZTRjZmJjYzhiOGQwLzEvTkFjcDNHQjdTR3d5VFpFVTNrVWtLaExrdGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80ZmUwZWMtNjFiMy00N2MyLTljMjktZTRjZmJjYzhiOGQw
LzEvTkFjcDNHQjdTR3d5VFpFVTNrVWtLaExrdGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4WlxHpV
uFXwjOwCOmwj2CjfjY+Y9SUDvni6abMOCP+/hoPv0VSuyw2NTp2KEnNhl3DhuIxt
ACvwN8lL1m//iDLEfbmQRm72O7L+ScKRVsLd9PXlr0dzuBbCDaZLXZCMfDB136ET
cHodRGE/LkE8RL8RO3L0Y1PeHC3zolyqSSbMGL7RT29kczF46vP/Unqpg5HfCIuc
3eLzHBegbC60VQDXuNfMbPZvYthh9hAKuyOYmp3jKL+V1gOWQ6157z+ghZdZOlsh
eZdUBAX3JkdG1srjrN3+mCnJXznzMkJXMnF+xCsm21cJcW8aFNAgRcLUCvNMXWpv
Yn675ZDxEBfSrA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:51 2024 by rpki-client on console.sobornost.net