Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier: tCPUp9eEvuwC/ofcFX7ivo40A4flb1CIJ9nI8pw9I6Q=
Subject key identifier: B2:AD:F0:AA:DA:8B:A8:A2:FD:0B:DA:2C:FB:05:AC:76:C0:93:71:FC
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 0194BC728BAD91C4406BC6936E19F316B06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
2: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
3: fqBbVbtULHABomysYFDLPJ3ysX4.roa (hash: bDz9nKBgQ62YdO94rFUTyk/zQ5UqsUgp/EaAIRwgW74=)
4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: IowAg/xbSlRTn1IKXgw34rHrFKPqSjm8n+xJSjBK9CI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:ad:91:c4:40:6b:c6:93:6e:19:f3:16:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=b2adf0aada8ba8a2fd0bda2cfb05ac76c09371fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:05:c3:f3:7b:bc:20:5b:56:a7:3e:6b:ad:e6:
23:28:71:87:45:a8:fe:75:7a:59:e5:90:69:6e:5b:
2f:cc:74:09:34:4e:6a:d1:b7:80:f5:25:f5:1b:33:
3b:17:72:0e:11:d8:84:0a:37:da:02:09:85:a8:4e:
64:34:bf:7d:47:66:07:af:7b:5a:25:51:03:af:8e:
a9:92:9e:f6:fe:be:4f:90:41:01:2d:f6:25:cc:50:
cf:32:98:32:da:42:7f:6e:d8:d0:b3:a1:ea:9d:bd:
44:97:6a:99:3b:b8:55:0e:ce:25:f8:55:61:6d:50:
21:21:da:a6:e6:de:0d:df:42:45:31:32:44:0b:dd:
71:c0:da:23:2a:29:e6:02:30:e3:f4:b2:09:0d:e7:
82:95:ec:e0:1b:8f:0b:3d:32:f9:9f:6f:f4:c7:c5:
52:d7:fd:89:39:26:22:46:8a:bf:e0:e7:46:0e:56:
d0:93:70:fe:c7:58:e6:dd:ab:73:4f:52:0f:1e:6f:
9f:1a:e5:4e:68:60:f2:b3:21:89:a7:c8:44:11:43:
21:15:8b:8b:38:7a:b4:cf:e4:f7:9f:6d:04:84:ff:
bf:8d:0f:2d:cf:3c:dd:62:47:46:bd:ca:28:47:68:
d4:33:34:74:23:3b:9b:bc:1b:88:81:27:68:d6:3c:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:F0:AA:DA:8B:A8:A2:FD:0B:DA:2C:FB:05:AC:76:C0:93:71:FC
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:0a:69:38:27:67:a4:ca:40:b6:5b:92:7c:a8:c5:cf:39:
cb:a1:77:b9:ce:79:5b:22:51:3a:e2:88:ea:7f:62:1b:7c:b1:
a6:8b:80:3f:e2:3d:82:da:c4:41:5f:26:fa:42:58:73:89:2a:
63:f3:43:cf:ea:d7:d3:a3:21:af:2f:30:5b:26:89:9c:9c:08:
92:e8:e2:82:2a:5c:1e:70:fb:81:91:71:31:25:a9:1b:d5:fc:
24:dc:70:0f:00:61:e7:ab:b8:4e:e9:eb:94:38:8a:f0:a9:27:
bc:07:6f:b1:38:41:89:15:80:f7:16:ca:3b:fb:97:18:a1:ee:
f9:bd:0f:89:12:7a:31:9f:bf:ff:ea:41:e7:37:7a:8a:e0:b7:
c5:8d:c6:e9:98:65:ab:26:bd:6e:e1:1f:21:07:4b:15:42:a2:
71:bf:49:79:95:65:b6:a8:98:4e:7a:74:87:7f:39:3e:ac:43:
11:75:f6:b7:96:3f:10:b2:71:05:33:d7:27:4c:51:1f:1e:c4:
f5:ae:6b:02:03:8f:b2:82:22:15:88:2b:c0:77:43:9f:78:91:
ca:d5:85:21:d5:8f:95:c1:c3:ac:9b:7c:dc:61:5e:9d:68:2f:
9a:81:38:54:0b:66:1b:69:31:c8:23:2f:fe:4c:a1:48:0b:63:
f9:84:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:25 2025 by rpki-client