Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: ONFHxSH0if/eyesPNlgztKN69cYYQadNUn4VMezapGs=
Subject key identifier: 3F:20:4D:7F:4A:9D:B5:61:25:89:71:C7:47:9A:AB:FA:A7:B5:E9:CE
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 01962ECF52CAD173A07E12974D22D263E496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1417
Signing time: Sun 13 Apr 2025 11:01:01 +0000
Manifest this update: Sun 13 Apr 2025 11:01:01 +0000
Manifest next update: Mon 14 Apr 2025 11:01:01 +0000
Files and hashes: 1: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: Nji1zJo61lnmALmELPeKqNIMOmJd8UAwZLKPSrEiUos=)
2: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:52:ca:d1:73:a0:7e:12:97:4d:22:d2:63:e4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Apr 13 11:01:01 2025 GMT
Not After : Apr 14 11:01:01 2025 GMT
Subject: CN=3f204d7f4a9db561258971c7479aabfaa7b5e9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:89:0b:b6:66:ff:36:34:ac:b2:f2:25:7c:
c1:f1:48:cd:29:1a:70:a8:ff:cf:21:90:9c:43:ca:
02:ed:4e:64:96:e3:a6:4d:a7:99:ba:d8:90:3f:44:
b1:43:12:59:9f:b3:f7:7c:ab:86:ac:ad:c7:8a:07:
2b:21:0a:16:66:18:56:bb:02:14:34:fb:f0:16:6d:
b7:09:29:a2:06:00:f4:3e:ef:7b:34:97:f7:01:19:
32:00:fe:34:e9:4a:58:69:77:f2:ed:3f:47:ff:6e:
24:e4:d0:94:c8:4a:52:48:03:98:99:9f:bf:19:c5:
f8:15:45:d5:a4:93:37:f8:6c:8f:e9:8c:b5:21:f6:
69:7a:7c:bd:b0:1e:f4:4d:1f:31:75:1d:f0:d7:ef:
ad:88:57:1d:24:a7:ec:a9:4f:ca:91:63:05:bb:ac:
77:b8:66:10:5e:34:70:0f:e5:eb:46:11:dd:a1:5f:
40:e5:2d:69:6c:04:1f:fc:d3:d5:80:1d:ca:1b:3c:
a7:24:2d:14:88:74:73:fe:7c:a3:56:0e:64:dd:01:
d9:14:3f:98:5a:e1:2c:35:14:47:de:00:fb:c5:ae:
3d:65:79:8b:84:a1:81:e6:70:16:f4:c6:9c:d4:8d:
46:b1:c7:ab:2f:81:60:50:47:91:51:76:51:03:50:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:4D:7F:4A:9D:B5:61:25:89:71:C7:47:9A:AB:FA:A7:B5:E9:CE
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a7:7f:45:cb:28:84:ae:af:17:23:69:bb:2d:6a:4f:23:77:
9c:4c:23:50:63:6e:68:74:fb:a5:fd:b2:bf:12:93:1a:4c:46:
30:fb:b7:ab:0d:b2:68:78:60:9c:2c:07:de:92:b8:24:0e:bd:
db:11:67:5d:c2:e4:ce:19:23:f5:bf:7f:be:62:c2:a2:7e:52:
1d:1b:82:ef:4a:1a:8b:8f:c6:25:21:8c:9c:42:96:63:83:29:
d3:06:cc:84:ad:e1:91:6e:ca:63:46:67:1e:5f:61:4e:8d:1c:
a9:06:57:25:4e:ab:46:cd:8e:ea:3f:67:5f:17:8c:5a:4d:e0:
12:d3:00:8a:09:f9:3b:7d:51:3e:53:6d:52:41:8f:3a:68:4d:
d4:0c:b3:8a:d3:c5:d2:9a:cb:13:69:11:cd:d3:9a:19:4a:34:
1f:30:a7:7e:25:3b:37:6d:23:e1:43:a9:fc:44:2b:7b:c5:ad:
56:9f:87:72:9f:42:df:4b:43:b8:ae:d4:ed:e0:f6:dd:7d:99:
6b:44:87:fa:6f:fe:59:7d:a5:75:19:d4:3c:9f:f1:01:3a:11:
80:6b:2d:d5:02:83:2d:63:86:7f:a9:e6:35:a8:8e:cb:1c:7e:
8e:1f:d5:ef:e1:c0:94:f5:39:01:b8:ae:dd:ff:c2:77:da:ae:
75:0d:ac:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1LK0XOgfhKXTSLSY+SWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDM1NjE5ZWQyMTBiZTBhYzI5ZDE3MGEyYmI1Y2Q3NDU1
NjkzYmMwHhcNMjUwNDEzMTEwMTAxWhcNMjUwNDE0MTEwMTAxWjAzMTEwLwYDVQQD
EygzZjIwNGQ3ZjRhOWRiNTYxMjU4OTcxYzc0NzlhYWJmYWE3YjVlOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriiJC7Zm/zY0rLLyJXzB8UjNKRpw
qP/PIZCcQ8oC7U5kluOmTaeZutiQP0SxQxJZn7P3fKuGrK3HigcrIQoWZhhWuwIU
NPvwFm23CSmiBgD0Pu97NJf3ARkyAP406UpYaXfy7T9H/24k5NCUyEpSSAOYmZ+/
GcX4FUXVpJM3+GyP6Yy1IfZpeny9sB70TR8xdR3w1++tiFcdJKfsqU/KkWMFu6x3
uGYQXjRwD+XrRhHdoV9A5S1pbAQf/NPVgB3KGzynJC0UiHRz/nyjVg5k3QHZFD+Y
WuEsNRRH3gD7xa49ZXmLhKGB5nAW9Mac1I1GscerL4FgUEeRUXZRA1BwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8gTX9KnbVhJYlxx0eaq/qntenOMB8GA1UdIwQY
MBaAFJnTVhntIQvgrCnRcKK7XNdFVpO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUt
N2EwMWJkZGQ2NTYwLzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUtN2EwMWJkZGQ2NTYw
LzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6d/Rcso
hK6vFyNpuy1qTyN3nEwjUGNuaHT7pf2yvxKTGkxGMPu3qw2yaHhgnCwH3pK4JA69
2xFnXcLkzhkj9b9/vmLCon5SHRuC70oai4/GJSGMnEKWY4Mp0wbMhK3hkW7KY0Zn
Hl9hTo0cqQZXJU6rRs2O6j9nXxeMWk3gEtMAign5O31RPlNtUkGPOmhN1AyzitPF
0prLE2kRzdOaGUo0HzCnfiU7N20j4UOp/EQre8WtVp+Hcp9C30tDuK7U7eD23X2Z
a0SH+m/+WX2ldRnUPJ/xAToRgGst1QKDLWOGf6nmNaiOyxx+jh/V7+HAlPU5Abiu
3f/Cd9qudQ2sJw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net