Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: OwMJlwRFzgV3t7dKl4D+tzV5vNbIfrLCLPPiR+LtXJw=
Subject key identifier: EA:B7:8C:E8:1D:ED:A9:41:44:73:17:2B:E3:DB:D3:CB:BF:E1:75:97
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 0194BC3BE240AADA759D9FD2D7FCF360A272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 05BE
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: 4ll7eCcmB+zLBsnXFaldeJc81A2imp8UPR1Wi+eaBn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:40:aa:da:75:9d:9f:d2:d7:fc:f3:60:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=eab78ce81deda9414473172be3dbd3cbbfe17597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:bf:8d:68:c8:da:c4:ce:3f:b7:09:e9:99:
06:26:d2:93:bb:20:12:fa:2e:ff:2e:37:40:c7:52:
d1:95:b1:21:8c:ae:b8:b0:7a:8f:31:90:04:1d:9d:
c9:d5:14:ed:77:6c:bb:e7:ad:31:5b:7e:47:76:9f:
53:68:0c:bc:84:62:5d:0b:24:a0:24:7d:76:1a:2b:
60:c3:66:15:2d:5c:ea:5e:20:bd:14:62:48:16:63:
92:7d:64:0b:4d:60:fa:53:60:8f:10:03:ce:36:6a:
45:a2:08:e2:43:13:1f:88:b0:69:ed:a6:39:18:bb:
9e:45:f5:07:b5:6c:68:fa:57:b2:0b:cc:c1:4f:8e:
cb:0c:f3:5c:0d:68:35:71:8e:37:fb:20:91:64:1a:
04:b9:7c:61:35:af:1c:4b:b6:d7:36:40:5e:4f:d3:
3c:bf:be:38:28:31:64:b9:c2:15:5d:ba:22:92:8d:
19:42:7d:05:f8:23:5c:06:62:d7:05:74:37:c9:1f:
c3:13:b4:fe:60:3b:fd:ea:7e:50:58:71:d3:a4:59:
79:58:67:d6:89:39:fb:3b:f0:b0:f8:e3:f8:ea:03:
77:4c:97:39:b7:4d:85:22:29:73:1d:28:15:6a:c2:
24:1a:43:da:d3:86:89:9b:e4:a3:cf:b4:2d:0d:47:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:8C:E8:1D:ED:A9:41:44:73:17:2B:E3:DB:D3:CB:BF:E1:75:97
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bc:00:e5:11:e0:06:04:03:25:75:e6:40:c5:f1:19:ca:50:
b1:19:7a:e3:15:d3:d5:d8:61:24:b2:9e:2a:30:11:e3:85:52:
6b:36:a2:49:60:e3:92:c0:c2:65:9b:e5:6e:5a:f9:6b:50:ce:
97:d8:41:56:00:44:a3:0d:fd:ea:76:fa:3d:b3:d6:7d:c9:97:
c1:17:a6:c7:39:0f:35:0e:27:06:ed:7b:7c:4b:67:ea:bc:56:
86:89:e9:e2:99:a2:94:81:69:1c:76:c8:8a:a5:80:08:f0:00:
c8:01:fd:b0:66:75:b3:ad:83:15:7c:3f:49:68:d8:9d:86:6a:
4d:44:e7:96:6b:d7:c7:94:3b:c3:8d:63:d9:8d:75:e9:b0:f9:
d6:83:46:19:ef:ed:0d:cd:0c:45:94:31:29:30:df:53:71:d6:
04:fa:af:0d:60:41:9f:1f:59:e1:bf:c3:78:e6:24:c3:9c:23:
a8:b0:cb:1e:34:cf:5b:a1:2f:1d:85:6d:7e:50:e3:25:1b:6b:
f0:eb:d1:de:b8:95:c3:9f:c0:18:b5:c2:5c:54:49:8f:0c:97:
59:ba:0a:9e:13:ec:3f:ce:93:09:a1:38:42:17:af:21:a5:20:
87:35:56:e1:6e:65:eb:bd:99:26:23:85:96:de:e2:84:06:d9:
d1:be:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:53 2025 by rpki-client