Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: kJ1vrZPJZ3wLQupoAeXXLhFkS4thUNwJ9w1bsAzmZMw=
Subject key identifier: DE:6F:12:54:0E:4A:4D:0B:53:C3:F7:AD:84:FD:70:30:D9:77:45:2D
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 0194BD1768101E9C75020CA86B1DD2749423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 0C09
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa (hash: 1/+Fm1r/KA+hNLAy+y/H8/1fP0WyouANNJuTvhP3iNk=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: JWbp8wKfiE2mXqLhqT37BIK6AKOS/QJGre+EsFDbqDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:10:1e:9c:75:02:0c:a8:6b:1d:d2:74:94:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=de6f12540e4a4d0b53c3f7ad84fd7030d977452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:85:95:01:9a:2e:9f:0c:fa:9b:13:d8:07:
27:31:20:d8:aa:5c:88:34:45:1f:16:f6:05:cd:bd:
1f:21:59:87:96:24:ec:4c:57:84:7f:01:37:8d:79:
3c:bd:12:bd:1b:1a:b6:a9:0d:20:f8:b7:52:62:06:
75:23:f9:25:4a:f6:cf:6f:57:5d:9d:62:8c:f6:15:
1e:19:10:5b:7b:d6:6a:69:1e:05:08:0a:51:d5:93:
8c:55:b5:62:a1:f9:c7:4a:49:11:4b:b4:1f:9c:c9:
85:be:87:cc:41:d5:dc:66:ef:2e:79:a2:3e:b1:23:
5c:e5:15:f3:56:1d:7b:ce:f1:fc:d9:fe:4a:59:50:
3c:a7:0e:ee:43:6d:22:93:09:61:b4:97:c1:af:06:
6a:88:a6:83:5e:e3:05:bd:4f:df:8a:aa:d2:9a:ca:
68:d7:16:de:33:95:58:81:9a:c9:cf:62:d2:34:dd:
fb:96:8f:50:3d:24:01:87:a7:f4:77:37:b9:a4:92:
78:5a:ce:57:92:55:f0:43:5a:09:45:71:d0:3a:b5:
c2:89:eb:93:f5:ed:13:a6:af:df:52:17:89:13:af:
cc:99:7c:74:81:f9:55:62:fb:52:35:98:fc:80:29:
c3:93:05:e6:80:81:6b:e1:20:b1:7e:75:03:a7:a9:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:12:54:0E:4A:4D:0B:53:C3:F7:AD:84:FD:70:30:D9:77:45:2D
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:3f:b4:e7:c6:94:2c:78:97:45:0f:f2:e6:19:78:7c:9c:
b7:a1:12:73:ba:31:41:23:8d:6b:73:27:2a:35:83:fe:aa:ba:
58:f3:ba:0d:8f:98:48:00:30:45:da:f6:6e:ba:b6:7d:81:29:
23:b2:ec:93:d2:70:c4:53:95:bc:d2:fe:91:9e:aa:0f:3d:f1:
e2:98:b6:25:ef:05:13:4c:ce:c8:42:72:57:74:6c:6d:be:ef:
5c:19:f6:f0:aa:27:9a:ae:bf:fb:15:07:d3:71:d8:4e:5c:d7:
ee:ed:b8:0a:70:e1:61:1c:f3:1b:4d:41:2e:90:4b:7c:8d:be:
07:88:6b:cc:d7:23:9d:bf:ea:e7:80:75:79:2f:dc:9e:7d:56:
f6:ba:23:95:ba:1b:de:d0:86:39:30:6e:f7:b9:a5:08:eb:9e:
e3:c0:55:a7:c1:b3:25:dc:f4:3c:da:49:45:79:81:57:d2:fa:
54:fe:02:c9:b7:81:cd:5b:e9:15:5e:39:0c:ba:d4:17:7a:76:
15:cb:a8:95:2c:81:5a:97:79:94:91:9b:a6:f6:64:09:60:1c:
12:34:30:20:76:34:36:b8:f3:6d:ed:98:c2:c1:f1:71:31:f8:
3d:25:0d:7b:1b:3f:6f:9a:5e:32:ea:f7:40:a6:9b:6a:55:dd:
9e:89:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client