Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File: N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier: gY+SNU1Kw/6gBifsQcPfxq7tqouHRMGXiOSrV2J3F2Q=
Subject key identifier: 1C:91:E1:2C:8D:03:AA:CE:96:1B:79:C5:88:A0:6F:43:DE:B7:1E:74
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0194BC049E4355D402454C5B892921249724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number: 0C20
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: L-MaApnHDQHiH0jEsLJ_jw4vbr0.roa (hash: /nilhJ6DrxdR25S7m0lSwM7yDPcHCpaV3t+H6a/aYao=)
2: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: kPPKPVe9/dezbpWqmAq3F0tVL6SCOg6QV0kX0KifnNU=)
3: oMLAPnf-8o6hPlUDMAC7aaxCwKI.roa (hash: 7+vt6cIV4PMTQBVRV5C6CHoorgZOKgPkkF0RsTwszng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9e:43:55:d4:02:45:4c:5b:89:29:21:24:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=1c91e12c8d03aace961b79c588a06f43deb71e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:aa:c9:87:c2:5a:57:c5:10:95:db:21:c2:
18:8b:a6:74:35:7c:52:a0:72:44:e8:d7:76:1a:42:
1a:e9:2e:b4:9a:f2:9a:19:f9:23:be:a4:e2:00:a5:
3a:a3:b2:3e:54:10:ed:2f:37:70:fc:f4:c1:62:fd:
8f:57:3d:ea:25:d5:2c:e9:ed:ab:5c:6e:c7:83:95:
2e:66:c5:7b:9a:39:0a:74:62:83:9c:6c:f3:0f:1f:
c2:ed:4b:86:f1:3b:6a:f0:5b:96:d4:05:bd:00:fe:
32:9c:d9:36:a1:b6:4c:c7:3d:0e:5d:d7:45:ec:52:
80:06:d2:37:b9:86:38:21:e9:7e:37:4d:ad:10:0d:
10:9c:be:c8:d3:9c:1f:a2:12:c1:78:d4:45:a7:a9:
bf:ea:b7:c6:1b:3e:c0:74:4f:70:38:ed:2a:92:c6:
86:78:af:83:2b:0b:05:05:13:98:cf:f2:ae:18:6e:
8f:c4:64:bf:82:b6:15:c7:4f:ea:92:82:36:c4:17:
9a:b9:46:94:06:9f:7f:59:d5:33:79:29:bd:9b:bf:
a0:7e:6d:f3:66:fa:62:85:c9:ec:f4:a0:5e:38:aa:
48:b9:09:53:ec:ad:12:90:41:a5:94:17:db:b5:00:
07:f8:75:9c:cf:b6:0d:a2:46:6b:32:51:b5:07:33:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:E1:2C:8D:03:AA:CE:96:1B:79:C5:88:A0:6F:43:DE:B7:1E:74
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1d:6b:1c:d8:98:5d:4f:f3:fd:60:2e:8d:fc:12:1a:f4:2c:
5e:cf:35:83:96:9e:02:d6:ec:ae:40:ac:7a:7d:e0:78:eb:07:
7f:ed:9b:ad:b7:3f:2c:91:0b:e3:f4:9c:8d:a8:82:f1:61:f5:
81:7e:d8:e8:eb:de:af:09:bf:5a:4d:2d:59:07:d0:63:57:5a:
b3:bf:8d:f6:5b:69:78:cb:31:92:a7:c3:ba:7d:7f:17:68:3f:
1c:49:82:a3:61:09:23:af:c2:f3:3f:cc:c2:8a:22:39:00:b3:
b7:29:9d:3d:d2:05:b5:05:a7:cc:5e:d0:08:46:7e:3b:35:40:
53:35:15:35:da:24:63:8a:d6:bb:93:8e:bd:01:44:9c:0b:1b:
b8:78:d3:68:4f:60:de:d0:41:30:8a:64:ed:ba:20:cb:f2:0c:
b5:c9:48:ba:c8:b0:45:92:71:31:02:f6:44:3f:42:03:7c:9a:
b3:f4:78:ec:53:30:c4:2e:f0:a3:97:27:7b:29:5c:36:3f:6b:
17:07:6b:42:32:5b:43:07:2b:d9:f6:6d:d2:b0:55:f0:25:ca:
fd:75:10:04:a1:57:14:83:b6:bf:9d:ad:67:eb:85:63:a5:73:
3e:53:83:d4:f0:5f:95:cc:2b:7b:e5:a7:5c:19:8f:1c:cc:37:
e7:78:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:08 2025 by rpki-client