Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: ayi8VB5j4XhzeWUEV56Bmpg9YJZ7Pmnx88WG00Kbpsg=
Subject key identifier: E0:6E:27:4C:25:E6:66:F0:AE:39:49:CE:97:BC:F7:71:8B:DD:E0:C9
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 0194BD857FDAA3F12601358AEA9B11C6B493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 0F95
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: vaNBWiyAEdaBLWeNn/+RUmHUW/kbxlGCW3HaMz3EyNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7f:da:a3:f1:26:01:35:8a:ea:9b:11:c6:b4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=e06e274c25e666f0ae3949ce97bcf7718bdde0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:b2:af:ef:d5:c4:91:b3:2b:e4:7c:51:db:
c6:4e:e7:24:73:72:96:57:55:0a:5e:8b:06:29:bc:
8f:e0:e5:74:f3:6b:e2:f7:56:a7:06:f7:d9:c6:84:
a5:5b:4c:2a:0b:28:e0:50:08:e4:35:c5:03:51:ac:
12:9a:f2:4c:6a:01:dc:12:91:2d:04:2c:28:af:ac:
82:e6:58:5e:2e:81:51:03:4e:dd:6e:fc:cf:e7:60:
c9:99:c5:ce:04:46:5b:db:c7:3e:5b:6b:a5:3c:4c:
dc:01:2f:75:7d:01:a6:56:fb:d6:71:38:4b:9e:0b:
dd:f4:ae:db:97:4a:5f:25:09:a5:6b:b7:f4:a6:92:
b8:67:2c:99:39:84:a5:e9:6d:d7:da:37:d3:b4:39:
2d:77:ab:6a:81:76:4f:2a:30:ba:ac:85:06:d0:d3:
5c:ab:3e:05:74:66:77:e9:64:1a:40:e0:59:86:1a:
a0:89:aa:c2:2c:cc:89:1c:09:5d:47:d6:ee:a5:c6:
f4:e2:5e:0f:49:49:5f:5f:1b:ef:e0:89:22:3a:a6:
34:40:6c:97:35:4a:74:89:2f:85:ea:15:4d:e9:42:
a6:d4:0f:93:14:72:94:6e:71:9b:5d:25:5e:52:35:
79:16:b6:76:86:b2:df:74:ec:56:7e:71:48:3b:8b:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:27:4C:25:E6:66:F0:AE:39:49:CE:97:BC:F7:71:8B:DD:E0:C9
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:29:d2:f5:52:87:44:50:f9:88:29:0a:c4:fd:d6:aa:85:b5:
b7:c6:d9:e0:e8:c7:ee:7b:be:0e:66:bb:ae:a5:5d:8f:bf:41:
20:2c:5d:e8:fc:82:bf:38:23:5e:15:e8:05:0e:2c:b5:04:27:
a3:c1:2e:68:3d:41:1b:fe:9a:4d:c5:38:ad:93:76:24:6c:4e:
8d:ef:f7:05:09:32:88:ec:03:38:51:cc:39:f0:80:6c:f2:ec:
0f:bf:02:83:24:58:47:65:1e:98:9d:fc:2e:06:d7:3d:f3:5e:
46:fe:f0:34:0e:9c:08:7f:78:3c:20:18:2c:36:0b:d9:bb:85:
66:b5:71:09:2f:69:6e:91:a5:d2:82:b1:6e:6e:bd:d1:c2:7f:
b2:e5:b1:88:3e:52:8d:ba:b6:38:ce:49:ca:8c:8d:43:42:a4:
94:4b:85:47:31:ba:88:6c:5c:44:15:38:66:68:b1:b1:61:b5:
14:b7:58:2a:df:84:84:8e:a6:5e:69:62:6d:27:b3:6e:ab:05:
8d:f6:91:9e:cb:65:bd:c0:f0:7b:eb:23:5f:c5:7f:45:16:4e:
f7:81:0b:81:2a:a4:4d:5f:19:21:f8:98:3c:05:43:0f:46:e8:
4f:f0:67:14:05:16:bc:ea:46:31:bb:4b:11:a1:08:e2:0e:e0:
4f:3c:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:35 2025 by rpki-client