Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: 223vqV+YPcsCcBoH2Q+qNjZK5rFvgztQuD+ZnPg3lY0=
Subject key identifier: 76:D4:46:C9:15:33:46:DD:7B:10:62:79:89:EB:89:78:5B:31:A6:6B
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0194BD8585D4A00C2E74A0D2CCC7328D92F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0AC4
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: oEQheHLLu1FdUoC6Hgo8hkieKXTBrYw0i3o/gZhS3xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:d4:a0:0c:2e:74:a0:d2:cc:c7:32:8d:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=76d446c9153346dd7b10627989eb89785b31a66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:32:b3:17:4e:d3:07:dc:98:34:96:cd:6d:
f5:e8:9a:ce:b9:77:bf:be:6b:cc:ff:dd:b8:da:da:
0b:1d:ea:29:a5:e0:0d:19:e4:d9:2e:d7:63:e8:b9:
e0:a7:80:f7:74:57:ab:7a:81:b7:34:c0:af:04:c5:
ef:ad:32:a5:de:de:da:c2:df:dd:09:5e:c6:59:04:
49:3d:93:af:11:e1:20:e1:8a:66:1b:1c:4c:ea:69:
da:51:78:82:45:58:b9:46:54:7e:c0:06:f3:6f:56:
93:ff:3a:25:fa:bf:02:1c:4f:d5:0c:97:d4:69:c2:
a5:ed:45:cb:67:f8:25:a5:5d:7d:ec:f1:5f:97:3e:
b5:b7:49:11:9a:e7:cb:6c:86:da:42:9a:97:50:77:
54:07:5a:61:84:7c:93:7c:68:e2:c6:11:c7:f9:39:
90:3b:bb:30:8c:21:ff:cd:38:a3:ed:af:92:f0:d9:
a2:25:7b:33:6a:b0:b9:c0:23:b1:dc:1e:33:0f:87:
78:a2:e3:ce:09:ce:95:d7:74:e3:2d:b7:da:30:61:
30:1f:c5:a9:12:8e:28:04:b9:44:7a:68:93:3d:b3:
fb:87:71:9b:4e:02:7c:1d:ed:6e:59:d2:e2:01:3a:
5f:ef:71:a1:78:e0:b5:1a:4a:92:14:27:3e:4e:15:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:46:C9:15:33:46:DD:7B:10:62:79:89:EB:89:78:5B:31:A6:6B
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:64:c0:0b:3f:91:03:52:b1:fe:53:dd:b1:e3:95:c5:1a:
21:23:49:84:87:9a:0c:65:86:a1:0c:12:1c:28:24:ac:18:45:
39:9a:85:62:f4:ac:5d:e0:fd:7d:07:b2:5e:8d:74:94:41:48:
93:73:84:73:aa:5c:43:0f:09:3d:45:e0:dd:35:51:5d:1c:31:
db:46:f3:02:a1:19:a4:48:85:d4:8c:f3:eb:ff:9b:1f:bc:21:
23:83:51:06:6d:e7:47:43:df:01:1f:33:10:c7:b2:30:2e:c9:
50:e8:39:4c:ad:cf:e7:9d:52:86:10:63:cd:3e:eb:f1:09:db:
89:f6:c6:7e:f9:6e:83:c1:d9:5b:2e:38:23:ea:5f:3d:29:10:
f5:22:3d:b6:3e:a2:b1:f2:d6:08:f6:07:f8:6b:5a:f8:c6:fb:
65:fb:77:3f:c6:7c:e9:61:0f:00:63:83:75:dd:43:29:2f:f0:
2d:3b:cb:66:aa:4c:fc:96:80:f0:5b:d8:6a:68:08:f0:a4:a4:
68:78:94:dd:05:2c:38:d9:07:4f:e2:1e:66:39:cf:4a:03:37:
f8:7a:7b:c4:bd:30:20:65:11:90:d4:2d:53:da:06:95:c3:07:
00:a5:c3:71:92:d1:2c:ff:8f:9f:33:41:35:c2:72:7e:ae:f0:
83:c2:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:58 2025 by rpki-client