Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: JDLOkvjg1fSKgvPWiKf3ZLm8GQxlBc/xOotHW/MD7E4=
Subject key identifier: 7C:F8:1C:75:88:8B:A7:C5:8A:B6:8F:AA:19:51:37:54:81:A5:B8:3F
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 0194BC729D8F42D0D78B5DE7570EEF981D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: oGZC+C44QZdfgD3lYPtq/BMoT99Pv3PwOunN9xyZFOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9d:8f:42:d0:d7:8b:5d:e7:57:0e:ef:98:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=7cf81c75888ba7c58ab68faa1951375481a5b83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:8d:b0:90:dc:50:51:cf:0d:35:7c:6c:55:
47:bf:5b:34:ae:f9:87:44:29:e2:dd:1c:75:c7:ee:
fe:b0:48:e4:6f:a2:7a:e2:af:68:b9:46:61:83:57:
eb:8a:84:41:a4:26:96:2c:18:55:7d:73:68:90:e9:
d7:9c:58:26:8f:e0:28:69:0e:5e:ca:2b:70:40:c5:
d9:d1:73:82:aa:cd:c3:d3:93:ae:02:e8:7b:3f:ef:
f6:9d:1c:c7:04:b5:5e:ac:70:9c:d9:8c:a0:c3:e4:
03:e5:45:6b:35:46:34:be:ea:f9:df:7e:20:b9:35:
ee:e2:94:de:97:eb:c3:aa:a3:3b:99:d9:a7:c7:b2:
75:34:22:30:57:9f:17:5e:d0:0c:0e:f5:11:9c:5b:
53:13:53:c6:4d:74:6c:bd:e6:ed:f1:4d:5a:a0:25:
be:3c:99:c7:8b:ee:e3:4d:f7:ba:5c:f1:cb:aa:30:
13:bb:01:90:c7:d8:c7:61:6e:fd:ae:46:98:5f:f7:
e7:92:22:94:d7:29:79:3e:09:13:58:34:35:4f:22:
0d:2a:96:c1:0f:9c:5f:77:41:a3:07:86:35:eb:e9:
cc:84:23:30:cc:6f:f8:bb:89:8b:e5:5a:24:e2:45:
67:d3:5d:d1:59:d0:1b:25:7b:b0:53:a3:49:eb:fe:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:1C:75:88:8B:A7:C5:8A:B6:8F:AA:19:51:37:54:81:A5:B8:3F
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:71:ac:0d:db:b5:8a:4c:63:05:57:e4:cf:70:c5:79:0e:59:
e0:47:dd:e9:13:ed:b5:a0:f0:a8:2f:9b:2b:43:94:74:82:88:
19:3b:26:b7:31:e3:b7:27:c5:4e:dc:76:98:05:66:d8:80:63:
21:91:26:f8:50:41:97:7b:3d:a4:0f:b9:81:44:3e:f2:ae:c5:
cc:a2:eb:33:da:36:50:c5:89:0d:93:33:03:82:7e:fb:db:ba:
4b:78:f8:0d:fc:05:fc:d3:91:bd:bf:14:c1:a3:ad:0f:ec:05:
25:d3:9c:57:3a:d5:70:74:ae:72:db:2f:44:53:3e:7a:bb:76:
7c:0f:77:01:e5:d9:87:34:e2:fe:5c:e1:32:ec:a4:24:1c:de:
8e:ea:91:a6:71:36:6c:71:a9:63:60:c4:ed:b1:9f:e5:e7:22:
29:5a:9a:e4:a2:de:a8:cb:bb:d1:d7:fc:89:84:a4:57:a3:ae:
32:e3:5c:6b:8c:44:7a:84:76:d0:c7:86:57:3e:80:0d:7a:25:
4e:41:cf:68:5c:44:39:9d:07:38:69:90:76:d5:78:dc:1a:62:
2a:f8:58:c9:2e:0c:dd:ce:1d:2e:72:d1:5a:39:5c:8c:cc:89:
fc:e2:d3:1e:4c:2e:e8:1f:e6:fb:21:4c:1f:a2:ba:75:8b:6d:
74:f7:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:35 2025 by rpki-client