Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: hOqpDze857pCnl8mb6mHUC4jVlgX8H8dhrfrf+ikdZ0=
Subject key identifier: E7:DD:38:9C:9C:E9:F8:4F:43:6E:3C:6D:6E:10:B2:B7:2B:6D:5E:8C
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 0194BCA96F7849EFC0867EE9D085527821F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0CD7
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: Y/xavJtCw4jIp/HhrkNrecKdMUPqX4/YyQEpxElhTho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:78:49:ef:c0:86:7e:e9:d0:85:52:78:21:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=e7dd389c9ce9f84f436e3c6d6e10b2b72b6d5e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:74:37:26:ff:7b:1e:d9:fc:8a:9c:b4:76:
f7:6d:82:38:70:18:3a:01:b4:5a:42:8f:82:ba:40:
9b:44:50:4a:26:70:79:aa:4c:0e:a9:bf:a3:58:72:
52:f3:7c:a9:85:27:5a:f1:eb:2e:99:b4:8a:17:7f:
d8:f2:95:19:8d:11:44:f0:8f:36:1c:ae:c7:3c:e9:
10:89:7b:6b:95:79:a6:5e:ed:22:c7:82:b1:ca:2b:
ba:2b:68:8e:e0:5e:36:e3:64:5e:cb:7a:89:d5:b5:
ca:c8:99:6a:53:72:0a:e2:f5:3a:d4:a2:84:f9:13:
be:3a:d1:23:bb:ee:9c:35:42:ae:de:13:c3:b3:76:
db:8d:66:d7:73:52:bc:94:01:3a:52:8a:26:1e:29:
25:e1:05:d0:65:84:a6:01:78:82:40:a3:23:e4:55:
26:29:52:94:34:6a:2e:c8:87:e6:67:76:85:46:53:
cc:99:a9:fd:28:1a:5b:b1:5f:27:71:c6:f9:72:0b:
ae:4d:3e:12:46:a3:49:d4:66:2f:f5:8a:ac:70:46:
1d:89:dc:ea:e3:12:c0:5f:83:ff:bb:ca:4f:08:96:
4d:4f:81:8b:ff:ad:b3:67:36:2f:7c:2a:92:f9:cc:
ef:bb:d9:84:9e:1d:d0:6a:d0:31:02:05:da:2d:b7:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:38:9C:9C:E9:F8:4F:43:6E:3C:6D:6E:10:B2:B7:2B:6D:5E:8C
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:67:03:7a:cc:b2:b3:3b:14:cf:25:67:8a:67:91:2f:85:50:
9e:e1:44:b2:16:84:6e:5e:39:36:c3:59:67:f1:f1:0c:3d:f2:
08:3b:35:8e:2c:af:2b:9b:2d:28:38:1b:4f:2b:fb:f6:d2:b9:
1e:28:3b:79:42:39:d8:cd:aa:27:33:aa:e3:27:3b:49:68:77:
b3:da:ea:c3:c4:97:68:8e:94:10:67:da:69:81:49:91:3b:bd:
40:57:f6:22:85:18:78:4d:41:0c:6d:30:55:a5:d5:1f:33:84:
f3:6c:13:94:64:6a:90:57:11:5a:47:04:2f:46:ad:3e:f7:c1:
b6:7d:b7:9a:ae:e2:36:36:18:30:0c:50:95:97:ca:67:8b:3f:
c9:34:99:2b:c3:72:c2:d0:a0:29:2c:e4:91:b0:93:e9:11:be:
55:31:fc:5a:35:bf:48:2e:a1:44:a9:ed:23:57:61:95:dc:a7:
1a:3f:78:c5:f8:1f:53:33:c5:9b:9e:1d:db:b7:47:31:c2:04:
a7:90:ae:a0:10:5d:cf:29:46:89:5b:09:7d:89:51:8d:0d:aa:
0b:d2:62:46:11:78:22:ce:ce:83:38:57:bf:b0:73:1c:07:8b:
1a:ca:cc:83:06:7d:ac:a2:6e:a9:6b:13:33:f9:95:ae:33:2a:
63:12:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:19 2025 by rpki-client