Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: b2mIYcpaTJqKzB1zqJBO2aiHZUPFSsCooI044ZP1eqk=
Subject key identifier: 1E:17:53:76:44:E3:96:31:A0:1A:0E:DA:00:57:75:CE:BF:68:D1:D0
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 0194BC04AEA8FEFD4694A26A25D36D741F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: L4+kLmkm8K988BbzDvpJ0P3FTMvoJvFhsW3TUoLyctM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ae:a8:fe:fd:46:94:a2:6a:25:d3:6d:74:1f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=1e17537644e39631a01a0eda005775cebf68d1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:fe:d6:8a:da:69:ba:28:a2:70:b1:3b:13:
a7:92:6b:1c:51:8f:3b:72:66:15:fa:38:95:61:a3:
3a:e5:13:c6:24:90:6e:ee:a7:09:cb:0a:12:bf:77:
be:75:80:d3:c4:b1:03:3f:34:19:f8:35:44:fc:c7:
4d:b1:81:f2:83:69:0e:af:82:92:71:9d:a1:6f:5c:
09:9a:24:c1:cd:c2:66:95:fe:e1:5d:54:2b:23:b3:
20:56:f5:b6:65:c8:8b:87:a8:f3:59:eb:ef:c1:27:
ca:17:02:a3:46:22:37:14:a4:db:84:0a:de:bd:18:
c6:55:06:96:47:66:8c:e7:df:53:0a:df:05:ef:28:
cc:8e:f6:a1:40:d7:28:64:d2:65:1d:4a:67:b0:ee:
e6:fc:a0:fe:90:89:25:c0:20:83:d7:b4:0c:f9:c7:
b5:57:eb:1a:6a:8b:c6:96:41:75:35:b1:8c:a3:f2:
5f:9e:b9:73:28:8f:a4:77:d3:78:82:e7:98:49:98:
94:d6:7d:5f:45:fa:81:03:9c:23:c3:fc:7a:ee:4b:
50:0b:93:7b:ba:91:d3:97:6d:55:ca:36:49:42:ed:
7e:fe:87:bf:a2:69:df:07:ef:7b:b6:b7:49:29:17:
8a:ae:d1:34:33:d0:68:39:a7:06:35:1c:c6:2f:44:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:53:76:44:E3:96:31:A0:1A:0E:DA:00:57:75:CE:BF:68:D1:D0
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:76:df:5d:9b:84:f1:7a:4f:92:95:d9:5f:d3:a7:49:cc:61:
fb:9d:38:86:d2:bc:30:0b:73:66:1a:10:16:04:51:fd:54:a7:
71:00:5b:3e:29:c5:cf:a0:9b:c3:41:1a:4c:bd:a4:20:96:0b:
22:dc:f2:cc:6a:ab:6b:5c:1a:54:a8:1a:8c:c1:89:74:a4:f1:
4e:8b:5c:06:22:05:2a:6a:59:b4:62:88:18:2e:62:fe:f7:8e:
95:52:9e:9c:3f:5e:09:ad:75:8b:10:f2:17:41:30:5e:43:cf:
2a:57:b9:99:57:ef:6b:34:2c:41:0d:b3:47:93:ae:9c:4e:8f:
fc:d4:17:9f:a0:c9:1f:6d:ce:52:b6:30:48:cc:c0:68:c9:dd:
43:85:7f:34:c4:c4:6a:43:18:69:61:26:05:9e:dd:0c:e1:a8:
d4:96:58:fa:64:a0:55:62:77:3d:61:70:c0:90:0e:3c:59:47:
8e:21:2a:65:19:2d:3d:cd:8f:a7:9e:5c:de:ea:77:53:28:3e:
d3:7f:be:9c:37:0b:6e:cb:41:b9:58:ef:37:71:7c:ec:6c:28:
62:6c:d9:b2:cd:4f:90:05:96:68:0b:c9:ce:66:16:87:95:f6:
fd:9b:af:09:a3:9a:c3:1d:9d:a0:b6:f2:48:69:ff:c2:bd:ab:
d1:71:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:29 2025 by rpki-client