Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: 9wMKyhJ4QeZohIvsfGP6e+gPzEmRnWY4rAaTq/y1tSc=
Subject key identifier: 4A:EA:C1:E9:C4:D3:DA:E7:30:5D:E9:12:F4:04:9B:B1:A5:75:EE:9B
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 0194BBCE18992740525FAC250EB4DCCD95CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 05B0
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: WCoaHNc3Le+1tV1rWOfMxz0GIQYJhpGBA7ungXfuMCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:99:27:40:52:5f:ac:25:0e:b4:dc:cd:95:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=4aeac1e9c4d3dae7305de912f4049bb1a575ee9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:13:03:5f:8b:c0:0b:e3:44:89:33:a0:98:
39:78:4d:44:0f:32:c3:4d:1e:1c:c1:2b:f8:50:2f:
10:bb:55:27:52:16:29:d0:f1:22:5d:01:fa:2c:44:
69:8f:eb:32:90:98:0c:02:0f:8e:80:ee:02:18:9b:
74:23:b0:70:37:72:54:73:9c:40:1f:d2:e8:2a:62:
dc:2e:bb:da:b1:8a:9b:d0:1a:12:3d:73:1c:d7:ba:
8a:68:ab:41:25:ab:11:cc:1b:a8:d2:04:73:87:6f:
d6:76:e7:02:28:e0:57:f4:f5:87:15:e7:51:cc:d1:
44:e0:69:54:55:e6:2b:84:4e:4b:fe:3b:c4:06:9d:
2e:5b:3c:39:17:d2:38:4b:4d:03:cb:63:10:92:16:
48:82:83:f3:40:f1:1e:7b:f6:06:c5:03:62:81:43:
09:b9:13:14:6f:c1:13:9b:f2:b1:11:4b:a5:46:ce:
2d:57:f8:86:90:71:fb:d5:86:95:49:ff:c1:0d:38:
bd:19:e1:8a:d0:34:57:54:f8:9c:c2:13:f5:5c:0f:
2e:04:5c:73:e7:b0:80:2d:83:13:e3:a3:ef:08:5d:
72:6c:df:48:70:bd:19:05:dd:36:40:fd:ef:ee:f4:
ff:33:27:63:02:04:1c:c6:ac:c6:2a:3b:ab:03:0e:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:C1:E9:C4:D3:DA:E7:30:5D:E9:12:F4:04:9B:B1:A5:75:EE:9B
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f9:45:90:6e:da:30:61:ec:6d:0b:7c:46:9b:16:bd:c4:d8:
21:55:04:91:d4:12:cc:e3:ec:4d:f0:a3:b5:63:9f:27:47:ba:
19:54:1b:5e:06:ac:9d:a7:bd:41:29:58:f9:4c:e1:56:98:65:
12:b3:cf:ca:e3:80:ca:5f:97:bc:1a:12:e1:bb:68:61:a0:e8:
42:9d:eb:95:2f:88:29:e2:af:9d:8a:65:09:f1:66:cf:06:94:
7d:32:4f:10:9a:75:13:a4:40:ec:69:71:4e:80:3f:b4:ca:26:
8d:1c:b0:c3:d4:c2:2a:14:0d:f1:24:17:ac:91:18:4c:51:1a:
18:71:59:ee:32:90:a5:65:da:18:a8:d8:46:33:dc:80:f5:84:
51:c2:2c:02:b4:a0:87:b6:b5:98:b9:1c:5e:93:cd:4f:66:46:
78:7a:08:89:6c:7f:b4:09:96:aa:e1:d1:f8:d8:39:62:dc:60:
3a:92:68:45:ee:e6:42:69:8a:f0:e7:da:dd:e6:f0:bd:2b:d2:
3d:2c:86:23:39:09:3a:13:0c:76:0b:fe:f9:e3:cc:27:6f:37:
71:2a:4e:c0:0c:c6:5a:9e:cd:2f:1f:50:23:49:0c:72:2a:fa:
bd:4b:2e:6d:83:30:8e:58:3f:e4:50:ea:20:77:d8:60:88:34:
1b:12:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client