Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json)
Hash identifier: wJDnNlFgcSQjsUaZSs8GSa+3z28H3WHJFV9dgsfJgF4=
Subject key identifier: 12:EA:8B:38:05:15:53:0E:E2:B4:AE:A2:EC:B0:2A:61:75:2E:40:E7
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0194BC3CA3EC008A76197A9D94B57EAFAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
Manifest number: 0DF7
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=)
2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=)
3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=)
4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=)
5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=)
6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=)
7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=)
8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=)
9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: 9L8k/RsngwMFrRDY8ZLe6Rgpc62H4dwN0XXVu/pgwvE=)
10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=)
11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=)
12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a3:ec:00:8a:76:19:7a:9d:94:b5:7e:af:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=12ea8b380515530ee2b4aea2ecb02a61752e40e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:fe:32:97:14:d5:49:ca:b5:62:d2:6b:ce:
1f:9f:7b:23:70:02:a3:65:11:6f:88:63:fc:81:b6:
fd:75:22:5a:67:72:7a:fb:ac:2d:71:19:11:fc:8f:
09:0c:89:37:ee:71:a2:16:75:17:d4:04:6f:48:50:
4b:73:52:65:77:48:62:f1:79:e2:da:03:87:0a:36:
21:59:fe:2b:d8:63:88:55:82:d7:0e:97:22:9b:2b:
c1:ba:81:39:79:2d:1c:e8:22:c5:cf:25:71:88:2b:
cf:f3:43:3a:cc:d4:95:88:25:11:98:e5:b6:a9:2e:
20:62:3b:5b:b5:a2:b0:54:25:43:4b:79:1b:46:4b:
f8:92:ee:4c:26:42:8b:b9:f2:4f:05:d1:53:88:01:
81:1c:ea:a5:0e:47:3d:3e:61:24:f0:ff:4f:2a:bc:
0f:15:0b:97:02:bb:e3:1e:d0:1f:d7:8a:ae:7f:e2:
8c:1b:de:7f:7d:2d:b1:99:42:43:1e:22:90:bf:ba:
64:a8:40:51:cb:67:4a:06:f1:ac:2e:5e:63:d2:cb:
7b:c3:bc:4c:b7:e6:2b:ae:1a:fd:37:21:ee:7f:7f:
37:0a:1f:ae:2c:5e:e9:91:f0:6f:24:09:62:48:b9:
95:50:24:08:e0:2b:ad:21:5c:49:d0:0a:77:52:c8:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:8B:38:05:15:53:0E:E2:B4:AE:A2:EC:B0:2A:61:75:2E:40:E7
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:c4:f6:b0:7f:34:fa:37:b7:5d:48:94:eb:d9:d1:6a:90:
90:27:1b:b5:ac:27:33:5e:b0:7d:99:a0:35:36:3b:65:48:4d:
cd:6a:1e:d7:a3:29:af:8f:93:16:d9:04:89:ec:ef:2a:b2:e6:
54:6c:c6:bd:2d:db:d2:07:8f:90:51:36:17:df:e0:c5:ba:a3:
12:8c:4c:08:19:cd:39:3c:e1:8a:f1:d1:f3:78:1c:88:97:6a:
5d:26:b9:10:2e:32:cc:fd:1b:37:d9:01:12:88:ba:60:31:91:
a0:e7:cb:88:66:b9:de:33:e4:fa:b8:35:04:08:7e:cd:31:23:
82:0f:30:61:9e:9f:ec:00:84:89:3e:3b:48:e5:38:8b:fc:67:
a4:20:4e:b6:0e:e6:a4:b9:ec:e9:58:d0:56:b8:e9:5b:52:52:
a3:71:5d:9b:80:35:47:d6:fb:a1:55:6f:44:e7:2d:f2:cd:14:
24:f1:53:96:af:12:f8:d8:0f:23:81:f6:9d:37:c3:98:ae:7c:
57:ee:6c:df:cb:68:2f:7a:60:76:00:a2:d6:43:3c:55:ec:b8:
c8:66:8c:d2:c8:ae:a2:6b:03:c4:1f:16:16:34:86:5e:43:c6:
6b:99:cc:08:3a:bd:e3:c1:f8:14:2d:01:d6:30:16:e2:01:fe:
2f:4a:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:52 2025 by rpki-client