Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier: pS4XOpvjZEq0h9hWdsz/1z56kn/ftLqXf97J02ULAoU=
Subject key identifier: 26:9B:8D:DA:E4:D0:62:77:14:94:A0:D4:A1:45:A9:05:FD:2C:3A:39
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 0194BCE0D94E35327107819FD73E0E8EA197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number: 1387
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=)
2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: g4/7e/Vz6j7yVYNCnU6MAy9o8fa79v4/lYIUhOJMuY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:4e:35:32:71:07:81:9f:d7:3e:0e:8e:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=269b8ddae4d062771494a0d4a145a905fd2c3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:5f:bb:4a:d8:79:07:99:4b:df:3d:be:8d:
71:39:28:f2:64:36:32:61:ac:55:83:96:5e:90:a0:
de:ea:e0:51:ee:1e:b5:1b:f8:ab:ec:63:98:52:18:
e2:56:1f:5f:ad:57:61:1a:cb:aa:e1:62:96:1e:c0:
41:cb:07:7a:05:21:47:42:1e:30:09:c6:a7:d9:d7:
19:5c:f0:21:37:39:e9:d1:2a:01:2d:04:84:d6:c1:
11:72:4e:27:df:31:5f:ef:db:d4:2d:d0:97:2a:53:
7f:6c:f2:f2:45:34:89:e2:14:d5:4b:f3:22:85:32:
1c:d1:62:e3:a9:6f:2d:14:c2:f7:4d:68:8e:42:f6:
68:0c:4c:03:49:94:00:71:a3:ee:f3:fc:4e:e5:ef:
59:13:98:88:ab:6e:a1:ed:56:5e:04:64:8e:d0:02:
59:aa:0a:9a:4f:83:c1:8a:69:90:5a:53:9b:21:7b:
51:bd:02:49:c2:9f:4a:4e:8a:11:0b:93:88:27:c2:
1f:3b:24:71:45:b2:09:5c:e4:a2:d9:5c:9d:e1:7b:
36:53:03:84:f8:9e:82:2e:f1:a4:e5:a1:2f:75:aa:
14:b6:19:ef:9f:1c:48:04:33:0e:26:5a:60:4e:0c:
83:c1:3a:4c:94:6a:ec:a3:88:a4:91:12:87:c9:20:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:8D:DA:E4:D0:62:77:14:94:A0:D4:A1:45:A9:05:FD:2C:3A:39
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c5:23:17:6f:95:65:d3:92:63:e8:57:a6:0e:5e:c5:e3:1f:
a3:0f:96:55:3c:06:7b:28:c5:ae:6a:83:85:1b:e5:e5:15:1d:
d0:b5:42:9b:7a:cc:a6:3d:11:59:58:72:db:75:35:93:35:c0:
8c:44:71:e2:34:a6:37:fc:6e:4a:23:a7:5f:fc:99:98:67:1b:
41:15:6b:f7:40:40:c3:74:40:71:bb:0f:a6:ce:f9:62:05:f7:
9c:7d:bb:7f:4f:a6:ca:c1:42:8a:38:a5:90:0c:60:e4:21:28:
be:fd:a0:a9:8d:e7:a8:09:8e:12:7d:e6:2c:19:27:40:09:19:
a4:1f:2f:64:a0:c9:22:5f:41:3b:19:99:a8:45:9b:bb:69:6b:
3d:d8:ce:73:71:e3:8a:02:fa:d0:62:41:29:61:ee:3e:81:56:
97:f3:ce:ec:a5:32:80:f8:c6:bd:9d:c1:45:3e:85:6d:92:0b:
84:d8:d7:e4:91:d8:22:3e:f6:90:21:82:16:cf:18:8c:3d:51:
8d:44:56:4f:1f:16:00:e0:c3:3d:ac:b4:80:1a:8e:c5:8e:45:
3c:f1:ee:6a:0f:f6:52:69:fa:83:76:f9:43:39:71:da:e5:01:
14:59:9d:bd:56:fe:03:1f:aa:b6:e1:5e:31:d9:d5:f2:f8:fd:
94:f2:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client