Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json)
Hash identifier: 0IX33yALpPhGc5qk3S4HJ+JmHyyg8YrsHHkwfibKhHw=
Subject key identifier: 79:18:FD:6A:58:6F:E3:A8:BF:C9:FA:69:AB:BA:F8:80:D9:2C:2B:C7
Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Certificate serial: 0194BC72C89453D24DA1DE43467DB8AAAEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: RvlNk8dGKorZzV6RSRdv-WDV_HE.roa (hash: KtznCFrYuNrxb/iIoe3x5KvOTsGXxBUw5Sa9+KNOTgg=)
2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: eQH5npI7jWu7KtYCMbW4xrelp2b9WbN68M/c2Zi6xCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:94:53:d2:4d:a1:de:43:46:7d:b8:aa:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=7918fd6a586fe3a8bfc9fa69abbaf880d92c2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:4a:7f:2c:f5:a9:f6:70:45:94:80:b7:ce:
7f:e0:a2:e8:cc:34:cd:e1:88:57:9a:cb:c6:83:9a:
ac:5a:fc:ac:18:1a:6e:8d:22:c3:a5:d1:aa:03:1d:
ec:63:64:54:f1:b1:6b:45:ce:f2:f4:b8:ae:b9:30:
45:22:33:1a:5f:13:fe:c8:94:d4:fd:d3:58:e1:43:
1c:3f:b3:ff:7e:19:99:7f:f6:3c:11:60:6e:1f:df:
11:f9:51:9c:00:9b:30:a5:7a:63:74:84:8f:e7:89:
05:13:52:d3:c9:bc:a6:df:ee:16:3f:21:2a:90:0a:
5d:22:a6:c6:b0:25:c1:2d:86:a3:1c:a4:07:c8:f4:
2b:a8:f4:3d:82:59:a7:86:23:b8:64:e2:95:2b:35:
14:ca:95:52:79:eb:75:72:31:3a:37:0c:0e:5d:1e:
7b:ee:87:59:95:90:46:54:07:d5:4c:9b:68:62:80:
e5:31:df:f2:df:52:91:ed:9c:16:f3:1a:59:90:e7:
ff:60:0b:97:81:bc:98:2d:7e:93:b8:b5:5d:6e:37:
7e:48:e5:d3:83:a0:56:7e:0a:0d:67:20:19:22:2b:
39:90:97:7a:99:21:a4:53:7d:c7:88:64:72:fb:2b:
52:58:d8:73:a2:e4:b8:0d:4b:91:65:be:01:b9:3e:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:FD:6A:58:6F:E3:A8:BF:C9:FA:69:AB:BA:F8:80:D9:2C:2B:C7
X509v3 Authority Key Identifier:
keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:e6:2d:cf:04:69:8b:95:1a:9a:a9:ec:0f:b4:d0:ae:39:
0b:84:64:36:ea:49:7b:61:6f:07:ed:5a:51:fd:86:cf:89:74:
e5:0a:70:80:d0:be:e6:8c:d3:82:e9:5f:bf:ed:cd:42:41:75:
83:a6:c9:17:c1:fb:04:8f:88:02:d2:36:23:d5:3d:a2:92:d0:
76:06:90:0e:33:48:12:fa:75:b1:a4:db:34:f3:b1:be:8a:bf:
c5:da:e1:7c:e1:c1:56:06:5d:2c:ed:50:41:20:a0:4a:e5:31:
b4:e0:1f:1e:07:d0:fe:44:e2:c3:0d:35:46:f8:89:38:48:2b:
f7:3f:11:b5:29:f1:b6:fc:6a:3d:8d:ad:cc:a3:9f:f4:72:f0:
e0:3e:7a:fa:e4:6a:d8:b9:44:17:c4:ce:2f:36:ed:8d:12:c2:
25:d7:d5:4e:df:99:57:be:ee:51:9c:e7:2e:6a:86:77:e0:2e:
b4:c2:e0:b2:1c:00:1a:76:f7:6e:4f:77:28:16:2e:5e:a3:9b:
09:06:47:b9:5f:cd:7a:fe:52:83:91:d9:3c:e4:b3:f0:da:5a:
96:4f:9e:d7:9c:e4:71:16:71:f3:bb:fc:c6:08:0a:11:81:8a:
b1:98:d2:ff:25:8b:c2:1a:dc:26:f6:2e:0f:66:74:e3:78:93:
91:e7:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:59 2025 by rpki-client