Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier: v94Xu0S7iJ5ThehrRTxfRUcKnf17REZ8qARcRrSWDWE=
Subject key identifier: F0:7E:39:A2:7E:57:DC:FA:A6:10:B9:9C:3B:11:AB:88:80:3A:27:EC
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial: 0194BC05165DEDEE28F3BF9A24ECF1D6B482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number: 03B2
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=)
2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: xCBEVxg83h7oyt+tSTlC7VNz/N3k6HinByIiZ5onLwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:5d:ed:ee:28:f3:bf:9a:24:ec:f1:d6:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=f07e39a27e57dcfaa610b99c3b11ab88803a27ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:c4:91:72:56:60:50:19:0a:39:a5:3c:a2:
40:9a:01:13:13:82:3f:9b:27:20:09:8f:d7:e2:17:
08:44:b3:2b:07:ea:63:12:17:12:a0:4e:1f:78:44:
db:da:2b:e3:02:e1:9c:95:c5:37:89:72:ea:c4:71:
1b:69:a6:e2:12:d1:6c:7a:81:3d:35:05:c8:e6:74:
9b:fc:d9:ff:33:56:5a:13:a5:1f:a7:f1:b5:06:4c:
2d:71:93:84:ac:57:79:0a:8b:19:e9:a6:18:55:69:
60:c4:6a:5b:d9:0e:5c:87:10:17:a5:f0:e9:b2:1b:
ec:18:d6:b5:09:11:7e:8f:c1:b5:dc:98:5b:0f:75:
46:39:dd:d9:3a:8f:99:25:31:ee:a2:00:bb:c4:90:
2d:cb:a1:b5:31:4a:1e:73:7b:e5:2e:cf:ea:fa:9c:
e9:85:2c:ea:63:a8:67:89:ec:cd:f4:f1:c7:b5:cc:
ff:48:68:04:e6:22:74:74:ef:17:30:bf:15:16:a2:
a9:b7:07:da:04:ec:7c:b3:2b:93:16:48:a3:e2:ab:
62:7f:5c:b0:a6:47:11:70:c5:cb:df:cc:b8:4f:30:
57:51:77:f6:93:de:2d:68:30:99:e7:12:14:bf:0b:
2d:e0:99:50:53:69:ab:86:a4:23:4d:7c:7d:ea:1f:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:39:A2:7E:57:DC:FA:A6:10:B9:9C:3B:11:AB:88:80:3A:27:EC
X509v3 Authority Key Identifier:
keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d3:97:d5:93:e7:28:ed:4b:26:a0:22:94:52:92:07:c1:8d:
7c:6b:41:3c:94:7a:7b:49:68:da:39:4e:61:c8:cf:44:0e:97:
80:20:93:5d:db:04:c1:1f:ca:65:98:9b:c9:fa:bb:c0:f4:28:
e0:48:dc:9c:92:12:fd:46:12:f2:bf:2b:b9:52:c5:dd:c5:07:
55:40:f1:47:57:8e:6c:05:3e:5b:df:ea:40:34:cd:c9:c9:db:
06:f4:a2:1f:a9:6e:a4:07:af:1d:38:61:49:b7:58:14:52:11:
46:1b:e3:26:ff:d3:e5:08:a6:f7:87:cb:76:ee:ce:23:90:d2:
7e:a4:d7:72:83:a8:2c:7a:92:d9:31:84:86:87:6b:d2:70:21:
97:50:eb:d6:0c:38:74:b5:58:98:f4:38:db:ec:6e:44:76:0f:
f6:23:06:e9:44:1f:a7:22:20:9e:54:ca:68:46:43:ce:b6:c5:
0a:7c:be:8e:8d:e4:d6:33:70:15:87:b1:6b:ac:6e:17:c7:1a:
c3:a5:fc:57:1c:31:32:85:c7:98:f7:cd:64:a9:2c:af:78:eb:
94:d9:a7:5f:3a:68:ac:03:7f:da:eb:e2:52:e1:6b:b0:87:26:
40:fd:2a:17:f2:b1:fd:51:33:94:cd:73:bd:25:a8:9e:cc:e3:
6c:49:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:19 2025 by rpki-client