Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: C11TKUZ3OHtVVHojc21kzGytAnub2/ZpfIJ40DLmWl8=
Subject key identifier: 8A:9C:14:42:B1:3C:94:A9:E8:18:49:74:85:25:3E:31:D1:96:2B:79
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 0194BC3BC87040291DF8262E6BA8E2A8D400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: ZeZG4+MKndnLZHLRI7Ho2dqfYIS/bjB/K4wS+w+3t10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:70:40:29:1d:f8:26:2e:6b:a8:e2:a8:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=8a9c1442b13c94a9e818497485253e31d1962b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:c5:9b:b3:9d:bd:95:45:84:69:cb:69:c6:
76:f7:67:f1:d7:ab:1a:99:c3:31:f2:94:e7:bb:f5:
1d:84:88:9b:9a:d7:5a:3b:cd:c5:7f:1d:2f:f1:e2:
83:bb:ea:c3:05:30:04:45:39:10:43:ab:04:38:f4:
c5:c3:60:a2:87:be:27:92:94:b1:65:cc:f7:c6:1e:
1a:cd:aa:41:0a:aa:ce:e1:09:76:0a:04:e1:bd:99:
72:f4:22:66:ff:ab:54:f8:8f:13:75:95:57:02:04:
ba:c2:28:7c:29:de:47:88:05:bf:1f:0a:08:88:61:
f0:4c:42:19:c6:7b:7a:62:24:36:4e:29:bf:7b:ae:
41:35:31:6d:c9:90:59:56:7d:2f:44:95:ad:d7:96:
62:6d:da:67:5c:a2:5c:9a:06:f8:b4:32:53:57:3f:
48:4f:fe:b7:a3:24:97:96:f4:4b:1c:96:af:48:42:
80:7a:b1:ac:8a:a7:3c:93:8f:e9:94:73:a8:d3:6e:
3f:93:00:aa:99:73:a1:39:02:33:b6:28:5b:63:d4:
e3:f4:e4:bc:f2:1a:e9:d2:97:eb:5d:c0:7b:99:c5:
97:1a:76:98:09:89:24:fa:9b:5b:53:ed:01:a2:21:
30:84:48:5e:ba:71:df:3f:74:50:cb:94:6a:a5:b0:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:14:42:B1:3C:94:A9:E8:18:49:74:85:25:3E:31:D1:96:2B:79
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:95:c8:2d:f0:df:a7:a6:fa:07:93:4e:82:ab:6c:d8:62:fc:
ae:48:ef:9a:38:a6:61:a7:e8:e8:38:63:7c:2d:22:45:e7:2c:
af:6f:77:1d:16:af:12:e8:8f:47:f5:0a:62:6d:2e:af:d0:b1:
6d:ef:d4:16:7f:ee:2c:8f:bd:08:3f:0f:48:0c:5f:e2:f5:10:
61:f0:98:65:85:b4:78:8d:e0:a9:c7:60:d7:05:c8:9b:24:50:
2f:38:5b:cc:7e:d5:d4:d3:c7:ad:ef:0e:10:f5:de:ba:8c:51:
21:a7:fb:81:05:ab:58:59:65:81:13:89:c4:23:f5:b6:09:17:
ee:46:18:37:46:ae:dc:20:89:a7:09:2d:5f:ca:d0:69:df:94:
3d:ad:00:53:81:32:b3:97:20:b5:ad:f4:32:3e:4b:47:32:bd:
9e:06:4d:ab:f4:99:c5:30:f5:7c:e7:30:47:0c:30:30:8d:57:
aa:55:34:c0:af:b9:60:d4:58:4a:c0:81:93:b8:a3:cb:1e:69:
4e:5a:5c:f4:b4:65:92:5e:c2:9b:7f:8f:eb:3c:b5:62:ba:ee:
19:c6:01:af:f6:d6:5d:71:38:fb:c8:c6:1d:b7:44:fd:5f:2b:
5d:4e:35:37:da:c8:75:ed:bc:3a:80:ea:1d:9b:41:6c:7c:83:
4e:da:71:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:37 2025 by rpki-client