Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier: 5KdqIlIIBXV7Q9zVq3ICBsu/RNLwIt1ARbaK8yzEsK8=
Subject key identifier: 2C:71:F1:45:DD:F9:71:60:04:C4:70:E4:32:29:28:DF:7B:7E:D6:6F
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial: 0194BCE0796753BBD918F04DA3B295B5DF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=)
2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: SY5hJUVOEzuJAWvTUjnRRjIi1ioAj7X8lcyzw9zuMkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:67:53:bb:d9:18:f0:4d:a3:b2:95:b5:df:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=2c71f145ddf9716004c470e4322928df7b7ed66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:47:a3:e9:e4:f1:3a:28:e6:68:d4:be:09:
29:bf:4b:ee:7d:1c:61:13:23:74:77:fa:31:6c:7d:
3a:8a:5f:4e:43:61:ae:5d:a7:2a:7d:0a:01:cf:75:
cc:d7:83:82:98:49:52:1f:38:ab:1c:ac:f0:5a:6b:
d5:a9:a1:f0:fd:2a:d3:6f:a8:08:60:17:6d:5e:43:
4a:71:be:da:5c:6a:5a:5c:07:db:f3:34:c1:d5:b9:
7c:cc:0d:10:70:7c:ab:fe:83:8a:6c:9d:70:d1:ff:
81:f3:6c:c9:03:84:18:6b:5d:5d:59:b6:de:67:fe:
67:9a:2a:70:aa:19:5c:c1:6f:55:79:5a:25:51:22:
0b:0a:08:dc:0a:f6:c6:cb:71:50:43:48:73:e9:57:
79:16:c5:f4:02:2f:93:8c:2c:ec:c9:43:94:b9:b2:
0c:b3:b7:06:5c:7f:74:d3:cf:d9:25:08:c6:25:7a:
4e:d9:85:1b:84:30:57:3f:64:83:2f:cb:b3:d7:d0:
5e:77:7a:a4:d0:a5:84:8a:59:9c:ea:82:c3:05:fa:
9e:0d:26:49:31:97:3f:2f:fd:1c:bf:12:2d:c1:21:
a6:c9:8e:91:8d:ab:42:7a:fd:82:f2:6e:e0:e7:53:
37:89:76:51:8a:56:d8:35:19:42:a3:20:19:5f:eb:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:F1:45:DD:F9:71:60:04:C4:70:E4:32:29:28:DF:7B:7E:D6:6F
X509v3 Authority Key Identifier:
keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:d2:4a:0d:0d:93:7e:5e:3e:f3:d2:f9:29:3c:9b:90:18:
44:35:2f:fd:27:b6:c3:d9:09:ea:f7:b5:00:6d:4c:7f:a0:8c:
71:28:ce:1e:fd:25:73:5c:a4:10:bf:88:eb:80:4f:cc:12:53:
11:04:2a:e5:59:d8:ec:59:ef:20:d0:ab:d3:ba:d0:15:8e:bb:
a6:49:75:8f:a1:c3:93:dc:fd:f1:85:a6:41:33:47:8b:67:fe:
b0:58:3c:84:5c:25:d8:2a:74:ed:29:1a:38:75:33:e1:27:6e:
63:c4:75:00:df:34:a6:75:94:cc:ce:9d:b5:70:e9:4e:2e:a6:
b3:18:17:53:23:ba:b4:5b:f9:38:78:67:bd:62:53:11:ea:3f:
3d:98:6b:e7:2b:f6:d0:7a:bf:64:9c:54:e0:6d:39:66:e6:d7:
b7:02:a9:21:4b:ef:8f:50:4b:22:b9:08:dc:20:3d:84:92:17:
2c:55:fc:59:38:5a:48:60:9f:4c:34:35:97:5f:de:db:21:57:
7d:69:28:d8:e3:9c:69:9a:48:6a:9e:ac:44:03:2c:6d:b0:f3:
ef:66:de:a2:de:81:5c:4c:fd:e1:5f:e1:66:b5:80:b6:c5:5f:
51:7e:ef:bb:ca:c4:37:dc:8d:9d:1e:4c:bc:df:74:89:c2:d4:
05:42:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:34 2025 by rpki-client