Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.mft
File: n2mIu99iU0fpxKf8P0_GPc7mqwc.mft (raw, json)
Hash identifier: YDHPKe4yC+T/GAjaTVTuzjeTn9qBT6WqLXYB8dv+pk8=
Subject key identifier: 5B:09:7E:9C:5A:79:1F:44:B3:96:DF:C1:64:4E:09:17:8B:E4:42:39
Authority key identifier: 9F:69:88:BB:DF:62:53:47:E9:C4:A7:FC:3F:4F:C6:3D:CE:E6:AB:07
Certificate issuer: /CN=9f6988bbdf625347e9c4a7fc3f4fc63dcee6ab07
Certificate serial: 0194BCA96BF422FE95299F5D51A02CCEA949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2mIu99iU0fpxKf8P0_GPc7mqwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.mft
Manifest number: C0
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: WpU6YXQuNLjYmG3DNjHXEYY5lyE.roa (hash: l6yPH4xUG3bIWBmY5Lylu2nSn79+vTxNhcVqPmyVtPs=)
2: n2mIu99iU0fpxKf8P0_GPc7mqwc.crl (hash: i6dsnJQ3XZTV3rToV6Pq7VLJyXFwSN6TRKKS8wLnU5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:f4:22:fe:95:29:9f:5d:51:a0:2c:ce:a9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6988bbdf625347e9c4a7fc3f4fc63dcee6ab07
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=5b097e9c5a791f44b396dfc1644e09178be44239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:69:2e:96:04:cb:2f:5a:5b:36:cb:b5:b3:
4b:b8:8c:28:67:1a:95:3a:ca:83:bd:11:66:01:6e:
60:ef:9c:5f:a8:cd:55:0d:18:e4:ed:a5:bd:f1:d1:
21:cd:4c:2f:2d:21:0d:49:f0:66:52:f4:86:4e:ee:
e1:f8:42:76:1d:3b:75:f0:4a:ce:21:b2:78:dc:e6:
24:71:f0:6b:cc:df:d1:87:51:22:26:4b:79:3e:84:
df:4c:1a:75:58:5e:1e:e3:58:c9:5e:c5:d7:ec:66:
a5:18:25:cc:53:78:09:9d:7e:ad:57:c8:a9:f4:05:
22:ea:c4:53:8f:fd:9b:b0:5c:6f:06:e0:64:57:9d:
0f:ce:2d:4b:8d:67:56:ff:83:16:9b:ab:35:3c:1d:
84:ce:78:0d:e4:76:76:9e:0f:c0:a8:bd:49:90:3f:
f2:81:a4:70:d6:b1:f6:82:55:6c:da:a3:02:01:a4:
c9:ec:43:66:b8:ac:95:e1:d2:9e:0b:e8:21:16:58:
d6:d2:17:cd:fe:e9:aa:57:4a:08:7d:e2:ed:3e:7d:
d1:ea:f0:d1:af:c1:49:50:9e:85:60:d8:d3:af:3e:
8a:7c:a6:43:c5:aa:15:1d:51:72:00:8d:ec:9c:7d:
60:fa:9a:a7:37:85:23:43:04:59:72:54:a7:6d:0d:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:7E:9C:5A:79:1F:44:B3:96:DF:C1:64:4E:09:17:8B:E4:42:39
X509v3 Authority Key Identifier:
keyid:9F:69:88:BB:DF:62:53:47:E9:C4:A7:FC:3F:4F:C6:3D:CE:E6:AB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2mIu99iU0fpxKf8P0_GPc7mqwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3b:10:83:35:d0:d4:1f:20:eb:56:ce:82:75:e8:18:fd:db:
ed:c3:1f:f6:f0:95:4e:b9:1c:27:b4:3d:e3:5a:70:89:45:02:
bd:f8:23:d7:28:21:02:49:7c:87:e0:c4:97:38:ca:d3:5d:1d:
76:ca:e7:ea:d1:b8:eb:88:c8:a3:ba:ab:9d:30:44:18:ba:5c:
c5:e8:4a:de:bd:5b:73:5b:fe:b1:7b:05:bf:4d:89:6b:5a:2f:
ab:7f:bb:20:eb:59:ca:0d:02:8e:2f:b6:4a:a9:50:75:ee:b5:
e7:f0:7a:cc:e8:3c:02:e5:76:74:61:7a:81:60:67:3d:aa:79:
3c:71:f1:13:a5:9e:3b:9a:d8:b5:c5:46:6d:fb:6b:89:2d:0c:
5f:8c:9f:f3:78:fa:9c:29:e4:21:88:cf:39:d4:8e:fb:dc:2b:
3c:87:cc:63:4d:3a:9a:92:54:4b:ee:72:55:7d:db:5c:cb:af:
39:2a:01:d5:11:72:36:0d:5b:7c:8e:27:44:94:19:4c:bc:5b:
77:7c:4a:78:27:eb:2f:27:41:1d:62:97:89:4e:5d:63:14:dc:
eb:45:78:6b:03:80:c2:2a:2d:c6:d6:a5:49:b1:9d:75:62:83:
cf:49:ec:fa:d2:e7:58:d3:c0:9a:11:ed:4a:3b:f7:c9:30:56:
15:f4:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:05 2025 by rpki-client