Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: 72ghdpxP81rPC2AjIfRJzU2kgjOgp+MJNiOHP5rJJLs=
Subject key identifier: C0:67:F8:00:07:17:47:7C:C1:D0:E9:ED:41:6F:DC:A4:45:1D:73:B1
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 0194BBCE63334366A82130A82F42E07D6B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 06A2
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: cb8dWgekdgTmGEn_puzoSrtajs0.roa (hash: klMt7aeT4NJnkoShXspgSHaq5Jk7n53EuU54bLRTaLc=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: GcA9AIl6cb99kSm6CprNyqoLCfbfzC1bDagt+GGTNK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:33:43:66:a8:21:30:a8:2f:42:e0:7d:6b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=c067f8000717477cc1d0e9ed416fdca4451d73b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:fb:56:62:dd:b3:9e:65:4f:0d:5d:b6:34:
56:6b:f4:d1:7c:2d:f8:0e:cc:66:8f:a5:87:0a:9e:
e9:cb:43:d6:0f:50:fb:b1:1f:ff:89:0d:00:94:62:
00:73:05:a2:26:7f:98:75:3a:88:90:92:75:4c:6e:
42:f3:53:3f:fa:64:23:de:e6:7f:25:59:27:ee:98:
ce:3b:be:e0:b1:29:0e:4b:50:12:ee:fb:a3:cd:8e:
b2:49:50:74:80:87:23:33:31:b8:7a:b3:b4:63:b3:
27:a4:12:48:cd:80:ca:05:76:5b:6f:68:d7:90:18:
9f:3e:21:03:d3:90:1c:cc:da:1a:03:93:1e:5c:a8:
35:35:ba:67:90:86:5a:14:f3:b9:16:89:c3:d2:27:
a8:2e:eb:77:28:52:26:4e:13:30:ba:07:52:08:ad:
83:dd:da:8f:54:19:18:db:bb:f3:5b:05:43:76:c9:
a8:2e:e2:e8:61:1c:d9:2c:dc:ed:ce:5f:60:4f:eb:
d2:1a:d0:a1:3e:31:f2:76:61:3b:b9:ee:28:05:25:
df:f5:23:36:8b:e7:99:72:87:d9:7d:f5:a0:10:25:
5b:9a:01:1f:9e:97:e4:6e:fc:1d:23:40:a7:d7:29:
b1:61:ea:c6:d8:fd:fe:9c:b0:20:35:92:b0:c0:1b:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:F8:00:07:17:47:7C:C1:D0:E9:ED:41:6F:DC:A4:45:1D:73:B1
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1d:83:15:b4:4a:6b:7f:4d:bd:83:f0:69:da:67:44:cb:50:
96:6d:e3:e6:5a:80:5a:39:99:99:81:c3:48:29:18:38:5d:a8:
f2:47:8a:70:70:b8:11:29:38:20:a6:07:c3:91:3c:08:d5:8e:
05:6d:9c:13:f6:06:9e:53:af:89:8e:b0:5f:a2:ba:32:37:7c:
78:97:21:3d:1c:f0:75:f2:52:d4:5e:5c:a7:1d:fd:e7:a8:27:
4a:8d:19:07:f0:82:80:66:75:96:ca:4c:17:09:c9:0e:d7:42:
3a:b9:da:84:98:b3:83:e8:2a:03:4c:1f:ba:86:2f:a2:2c:3f:
a2:3a:05:67:8a:28:1b:01:2d:7c:2f:8f:da:a3:1c:59:05:84:
b6:9e:75:c3:8e:4d:a2:9b:4f:b7:f0:0d:59:46:78:7f:4c:49:
1e:90:60:48:47:ae:4c:44:12:f9:6b:37:ed:4f:e1:ad:d3:91:
3c:7c:9c:f5:57:7d:13:c5:fe:bf:e0:50:6d:e4:4c:39:e0:0f:
4f:69:0c:2e:0d:f7:0b:df:d9:1b:1d:22:e3:1b:8a:55:92:ba:
de:52:39:2d:56:3c:96:d7:76:49:a2:5b:51:88:3a:8b:e8:24:
e3:b2:2b:45:92:1e:66:1a:96:0d:67:20:5c:04:53:4d:7e:e5:
34:ee:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client