Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: S1PKaslv7k8uOx1QAHJBC8wLNpY4GkGk52AVisGhBRw=
Subject key identifier: E2:36:12:48:26:7D:E3:4F:AE:8D:B4:AF:41:08:2B:75:36:D5:8A:CF
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 0194BC3C2129254414531AB4D06730DBE1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 091C
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: 4CVjKwtXpKxGAqGor3lq2aeMarbbLEFevPkED512waY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:29:25:44:14:53:1a:b4:d0:67:30:db:e1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=e2361248267de34fae8db4af41082b7536d58acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:ae:9a:b1:24:ba:b3:fa:f5:38:09:88:6f:
0c:74:02:74:bf:01:7b:37:b9:0e:1d:eb:ca:d2:5c:
a2:53:46:11:e5:9a:20:2b:c3:1c:e0:05:14:db:f0:
3e:a5:ee:08:c6:f1:e4:6f:75:f8:19:f1:41:bf:ea:
60:66:bb:39:fa:22:cb:83:a3:e5:12:ef:88:92:95:
81:8d:bc:fa:2e:a0:cf:95:6e:2b:f2:ca:a7:41:48:
0f:9e:00:46:7d:1e:a8:09:b4:67:30:d9:14:6d:6b:
70:ae:28:14:50:a1:57:49:0c:6b:4e:cc:b6:35:19:
66:7f:d0:46:e5:d8:b1:0a:72:28:1b:68:dd:9d:dc:
43:40:45:e8:04:86:28:af:38:61:92:8e:51:2b:b7:
82:1e:3e:63:f6:f7:23:a3:a5:80:b8:aa:8f:a5:e7:
03:f1:59:1e:f6:2d:27:a1:e6:fe:0e:ef:34:a3:cc:
b8:7a:28:9f:6c:98:d8:b6:74:17:c2:89:2c:83:66:
d9:86:8e:f5:0c:6a:e0:52:52:5b:a2:cc:bf:2e:8f:
45:a1:35:8e:12:27:51:df:5e:e8:ac:82:58:d5:b5:
36:bd:e8:88:95:a5:1f:42:b1:b3:40:c2:63:a3:ec:
e7:d2:04:ba:89:6b:89:64:1b:a1:1b:14:82:df:4c:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:12:48:26:7D:E3:4F:AE:8D:B4:AF:41:08:2B:75:36:D5:8A:CF
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3d:b3:04:26:d3:51:64:b7:49:59:16:9c:c4:4f:35:82:01:
47:e8:44:5f:2d:66:97:df:62:e9:49:56:db:70:c9:25:83:46:
5f:93:d5:39:49:58:67:75:ff:86:16:70:d4:13:5d:c1:03:23:
f9:a7:f4:a5:c2:02:ed:b1:7b:5c:8c:d0:62:01:1c:e6:27:4c:
5d:14:5a:7b:6c:9b:5f:bb:0a:9b:04:ae:ac:a4:d8:54:ba:22:
8d:d1:90:2c:47:73:7f:fd:79:66:c3:41:5d:36:6f:dc:92:e7:
9b:dd:10:a4:fe:ed:25:9f:cf:7f:4f:bd:8a:9f:80:16:31:25:
0d:c9:20:d8:9c:ee:fb:c6:e8:83:9a:bb:c0:2a:b6:84:98:4b:
78:28:f2:e5:f2:a2:08:c1:41:28:7c:67:f8:77:39:65:c8:f4:
02:b7:13:b0:cc:ff:ed:41:97:e7:71:95:23:e9:c1:24:51:84:
f8:b6:46:0a:2d:28:a8:18:c5:06:cf:2f:e3:84:00:17:84:d6:
35:06:1f:82:14:c9:e7:f4:a9:bf:4d:82:9a:91:79:1a:b0:9b:
bf:93:96:70:73:71:e1:c1:e3:65:dd:7b:79:42:1a:a4:bd:08:
6d:42:9c:93:54:9e:9b:66:d3:ec:bf:64:3a:1e:4b:b7:f1:80:
38:d5:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:32 2025 by rpki-client