Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: Apl2OC+BOX2sacwMA0M5qxSaG2X0WVEvd47FJ19be1I=
Subject key identifier: B7:15:50:6B:DD:0D:C1:AD:9E:9A:89:AE:A5:A2:FF:E6:34:D3:1E:9D
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0194BD179C5C36BA5891F16D5CF789B4E5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
2: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
3: d-A9abVhzoyR77GP5fjse5opquk.roa (hash: SH9taC665HXJXvPloMTs2WsTRMUAVA4wBqAM/eu3n6o=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: HCxboYf2jDyFpPlap1Bil8bzzCvocViczHRX4NbjWJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9c:5c:36:ba:58:91:f1:6d:5c:f7:89:b4:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=b715506bdd0dc1ad9e9a89aea5a2ffe634d31e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:1f:d4:c8:55:34:bb:69:ca:04:a4:88:23:
79:2e:c7:a9:67:9d:55:30:cc:bd:96:1d:76:0e:0a:
49:69:af:35:0f:a2:f1:48:86:3a:da:9f:da:47:80:
c9:06:61:d7:b8:72:d8:02:e1:b8:eb:de:a1:1d:5d:
41:83:b8:73:a5:ef:96:f1:09:ee:da:39:4e:75:cf:
51:7a:87:a3:d7:e3:3b:8c:7d:2d:ba:d6:a6:51:d1:
18:ea:54:01:84:17:2c:0c:4c:3a:30:0f:cb:5a:86:
3e:c7:e0:4c:e3:bc:59:cb:49:7d:b0:a6:76:86:09:
1a:9f:23:40:1f:91:8f:c3:99:ed:4d:80:fd:88:e0:
33:1f:20:e1:10:de:15:a3:51:dc:1f:bf:7b:36:47:
97:e7:45:10:c8:5d:95:49:45:9c:0e:1e:16:e4:fc:
45:d2:fc:9b:4c:d3:68:ac:94:fa:0c:63:2f:d0:87:
f0:bc:8e:20:4a:30:2b:98:e3:3c:09:39:f0:b7:1d:
71:a3:07:3c:29:2a:de:bc:7a:25:c5:68:08:5d:ec:
70:ac:20:33:ac:dd:9b:dc:77:d6:93:5f:94:8a:2b:
38:3a:c5:eb:a7:0a:aa:60:45:1a:dc:6e:55:af:18:
20:38:d2:33:c8:c8:56:91:ad:7c:fc:3c:75:b3:2c:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:50:6B:DD:0D:C1:AD:9E:9A:89:AE:A5:A2:FF:E6:34:D3:1E:9D
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bc:09:14:e6:2f:fc:ee:a7:46:e9:a2:3f:69:37:6a:3e:7f:
8c:93:93:7e:3e:f7:b3:62:7d:c1:9f:ba:3f:a9:c2:fc:67:51:
7c:94:f4:5d:ce:39:2c:70:a2:d4:69:10:c7:50:a4:8a:8b:74:
ff:e4:a9:5e:d1:5f:0c:3a:83:77:4b:47:37:03:a1:0c:02:27:
d0:06:8b:9c:88:5a:96:fd:ec:0a:7c:f7:d0:0b:a3:0b:1c:5c:
7d:40:f4:d6:eb:e5:d9:44:ad:03:3c:57:57:81:59:02:c6:b3:
65:8d:86:b4:ea:60:74:45:7a:2c:6b:25:7f:6c:e4:33:14:84:
13:ee:5f:ad:e1:df:a7:f4:5b:fe:4f:93:d7:d3:d4:72:d0:4d:
b9:0e:1c:12:12:b2:4d:58:13:87:44:f9:24:62:34:c0:f5:f9:
bd:84:1f:4d:64:4d:fe:18:4d:77:76:7d:22:63:57:24:fd:d2:
14:ca:3d:a5:4b:ae:18:be:96:f4:5e:95:99:f3:5a:db:a2:6e:
c7:73:df:d6:c9:99:f7:79:4d:69:19:c6:a1:44:70:05:97:51:
ba:71:54:92:55:c7:eb:b5:17:e3:9c:96:60:9d:82:61:0f:2c:
1a:8e:1c:3c:42:36:f5:7b:a9:c9:7e:3a:54:6a:8b:f2:06:17:
77:03:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:09 2025 by rpki-client