Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: RPoMzSSWB7bDXWcTSu2vEff+tvC+FAtj3BMcH5N+Cb8=
Subject key identifier: 0B:42:22:B8:5E:FF:33:80:BD:74:AA:A8:02:5E:62:06:9D:AD:52:08
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 0194BC3BCC91D3E0513333E98E18666E7A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0723
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: GCRKBH7qglZF0xL4aoe8rr6NAz9CzLNzJUhdiHsDjEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cc:91:d3:e0:51:33:33:e9:8e:18:66:6e:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=0b4222b85eff3380bd74aaa8025e62069dad5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:91:fd:99:8d:d7:ee:a1:6c:ec:0e:b5:86:
8e:6c:ee:09:19:3b:20:7f:53:81:02:36:34:49:89:
8c:bb:97:4f:8d:33:80:16:17:b6:6a:cb:5d:72:cf:
33:fe:b7:d4:d4:a8:b5:5a:68:64:53:3f:37:25:06:
d3:6b:5e:67:af:80:b9:92:73:b8:79:e3:9d:f6:6b:
b0:84:06:30:c1:bd:e6:a9:8c:bc:44:c5:eb:e0:51:
a6:98:98:6a:5a:6c:f0:4a:a6:1d:f2:a3:1b:ae:39:
3e:d1:89:d0:b6:93:41:b4:7a:1e:bc:18:cd:33:12:
a7:78:1a:55:e2:02:bc:c9:ca:bb:a0:9c:17:9a:82:
9e:83:fe:a6:93:10:dc:12:eb:80:84:c7:2e:58:00:
e6:90:74:ad:a8:18:e7:48:ad:99:68:f2:7f:f1:90:
07:81:c1:65:c2:cf:0e:f5:f9:fc:fa:1d:19:85:09:
e6:8d:e2:73:8f:96:37:51:4e:7d:09:2e:b2:57:02:
49:e7:2d:9f:39:25:c0:fe:cc:a6:f3:c7:b8:c1:97:
d9:2c:d5:fc:36:75:26:f6:15:df:ab:31:18:f8:42:
a2:ed:5a:77:c6:b0:38:d0:46:67:b7:5c:4d:45:b8:
9d:61:44:e8:de:54:b0:8b:42:8d:4e:5b:58:a3:c0:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:22:B8:5E:FF:33:80:BD:74:AA:A8:02:5E:62:06:9D:AD:52:08
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:8a:84:dc:80:2e:35:8a:7c:ca:fe:33:30:27:c6:fa:47:
ae:c3:2d:37:a7:3c:3b:1b:5f:aa:db:ce:5e:55:bb:13:27:ed:
1f:28:4d:c4:09:16:b3:a4:d1:2f:42:9d:cc:0e:39:72:82:66:
c9:37:7a:26:14:b5:af:2b:cc:e8:40:5a:5c:67:69:bf:75:d7:
2c:ec:f2:e9:cb:8a:d7:2b:75:6d:8d:d3:09:d3:42:ad:12:0b:
f5:e2:27:95:e7:49:34:ac:d7:78:e8:f4:ad:39:60:9d:e6:92:
3e:91:bf:51:ef:9a:a8:74:95:98:27:43:2c:26:79:9a:41:e7:
b7:0e:57:89:3e:85:6b:b7:6c:13:92:53:7f:4f:b8:32:f8:7a:
b3:81:3e:12:61:25:ce:c8:21:e4:43:8c:f4:d4:47:2f:90:bc:
83:ba:12:89:52:ce:37:c8:2e:d7:e2:87:a8:f9:f9:92:2d:01:
4b:19:ea:ce:bc:0a:85:5a:b3:de:84:13:3e:ae:8b:a1:0a:bc:
97:aa:0a:12:65:1f:00:98:61:f2:b8:33:59:95:39:81:27:37:
1b:78:65:25:a9:d8:51:99:a4:40:26:c7:45:80:c8:71:21:17:
78:ab:4f:3e:18:da:ea:91:1b:42:84:31:54:b8:7e:73:70:94:
c3:ae:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:38 2025 by rpki-client