Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: b3n4yw4osER5Za0MNdsddaIj5KBuDGsRK7rGKf1zwH0=
Subject key identifier: 60:CE:BA:E5:B0:1A:45:35:0B:3D:6B:26:CF:5F:30:3E:52:FB:1C:72
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 0194BD177872D860CD1ED87D3284778AEB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 08B9
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: 43rtt+QDifId7PlkMgvmSyDJ2oaJQF/izKCjNcNKhdg=)
2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:72:d8:60:cd:1e:d8:7d:32:84:77:8a:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=60cebae5b01a45350b3d6b26cf5f303e52fb1c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:7f:ec:c8:ab:fe:23:47:e2:68:8c:18:88:
79:ad:a3:67:a9:3f:4e:f5:49:bb:7b:d4:16:b7:8a:
88:03:64:95:4b:b4:85:87:2f:dc:30:5a:89:dc:5b:
7e:5d:a1:46:b7:4f:8d:a4:60:1c:52:8a:02:3f:b0:
d7:9d:ba:7a:88:9e:0f:6d:c3:25:b1:43:c7:d1:7f:
1f:b0:b7:26:7e:4e:03:38:6f:bf:c2:ef:e6:5e:d7:
78:35:7f:0b:ef:01:e0:a5:7a:3d:f4:d4:06:d5:4b:
d0:13:21:29:bd:37:ff:36:05:52:e5:2a:74:a1:75:
40:93:2b:7b:14:c0:69:50:b9:f0:c5:84:06:6c:c7:
ee:fe:6f:ee:eb:19:91:44:1a:11:7b:3d:29:54:aa:
c5:54:33:28:53:15:aa:7a:c5:2f:f8:12:04:ac:6b:
ed:a6:be:76:40:bb:04:18:b2:cb:78:10:83:86:de:
67:b2:8c:43:1d:53:80:6b:34:5a:db:e0:47:de:47:
57:f8:1d:d5:1e:4b:8e:d6:0c:e3:56:cf:48:e8:59:
33:25:13:e7:9e:af:f3:39:a8:77:21:b8:2e:da:fc:
81:27:f5:79:cb:23:df:9c:54:6d:9c:34:4b:4b:ea:
bd:b6:dc:e0:cd:33:b2:30:29:a8:31:1e:8d:7d:cf:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:BA:E5:B0:1A:45:35:0B:3D:6B:26:CF:5F:30:3E:52:FB:1C:72
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:8a:fb:59:fb:8f:07:10:f5:0b:f7:ed:b2:7f:8d:ac:11:
1f:0e:e9:2a:5b:9d:5d:eb:8c:30:e7:34:bd:99:ef:27:f9:c0:
6a:6b:69:12:40:4e:b1:19:53:8c:6e:da:7e:34:9f:71:7e:d4:
93:4d:79:16:f1:2f:82:b4:de:5a:fd:d8:7d:47:b4:7f:ba:41:
3f:33:6f:f9:78:db:4d:e8:d8:86:a9:f0:8a:4f:09:ab:93:38:
16:93:e0:21:7f:af:7b:cc:08:c4:80:3d:96:f0:33:2d:5b:3c:
a4:24:d9:e9:c4:d8:e3:97:fe:4a:fb:7d:f9:24:f7:f4:9e:15:
ed:16:3d:06:9b:16:62:d8:3f:de:41:bf:6d:aa:03:bb:69:63:
cc:82:af:19:ff:1b:00:a6:da:a6:f1:c1:8a:07:29:c8:ad:29:
01:ad:d4:43:d4:e8:97:d9:58:18:3a:50:65:37:ff:5e:19:78:
cc:fc:61:29:f5:11:c9:b8:b5:a7:c8:66:fa:68:8f:df:0a:dd:
24:97:48:f6:c1:6b:30:4c:c1:db:06:05:0d:5f:90:dd:e5:cf:
d6:7c:88:5f:47:c3:83:1f:67:2b:44:af:f2:f1:e8:c9:9d:18:
42:4d:92:d8:a0:d8:9b:07:ab:d9:15:f5:37:7b:cb:20:c5:6f:
66:e6:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client