Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: 5IgTqlm5t2nTWSy1LQ2BPCloawANQIMLw31Bqe4Zgbk=
Subject key identifier: 68:89:54:BA:3C:9C:4C:F1:6B:42:26:E3:12:3C:91:F6:BD:9E:13:0E
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 0194BC04FB2D7C2FD8CA9ACAEE5008F0CECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: +LQb6qXy6UqRLAHjar5fmqZcbGYHM6fLHO6H1WNVIkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:2d:7c:2f:d8:ca:9a:ca:ee:50:08:f0:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=688954ba3c9c4cf16b4226e3123c91f6bd9e130e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:e8:42:a6:c5:76:24:b7:90:89:46:32:b0:
94:24:6c:d2:4e:59:05:e9:0f:c8:b9:44:63:a2:e0:
60:3a:92:24:12:0a:a2:68:bc:03:e8:f8:08:f4:41:
b5:55:26:1c:b2:e3:5c:51:ef:ef:fe:b7:26:f2:12:
b0:fe:16:c1:42:00:56:c8:08:bc:e6:94:22:9d:0e:
fe:a6:d3:38:33:a1:5f:60:df:29:85:54:36:a1:a2:
c7:b4:16:33:ee:db:fd:b6:1b:0b:70:c5:cf:42:d2:
5b:78:4a:12:e7:d6:70:10:7c:2d:5c:0b:40:3a:68:
42:a0:5b:b5:b6:6f:fd:59:a1:93:e6:3c:e9:5f:38:
6b:61:e4:d6:d0:49:c9:0b:4f:6e:1d:be:92:a5:28:
8c:c9:ab:5c:95:ad:76:41:41:16:5d:10:2e:6d:69:
c6:5b:a9:53:d2:02:63:f5:5d:f9:30:60:d3:45:65:
25:e2:e7:1b:af:9e:98:1c:3d:d8:4b:df:4a:5e:25:
b2:70:44:fa:bc:b3:0f:c5:4b:c8:64:0a:dc:e4:6c:
af:93:90:fb:65:c5:b0:2d:e6:3e:f7:23:28:7e:39:
f0:36:bc:32:94:58:6c:ac:16:7c:c4:88:ef:8e:33:
2c:7e:3d:fc:65:80:07:1a:48:8c:85:2b:a5:b7:d4:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:54:BA:3C:9C:4C:F1:6B:42:26:E3:12:3C:91:F6:BD:9E:13:0E
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:46:01:e3:82:bf:12:28:a9:41:35:54:8c:01:7a:6a:c9:
0d:cb:3a:5b:3f:69:00:24:cb:4b:02:13:e8:e6:77:c8:06:6a:
c7:f6:9e:ae:9f:b2:ee:5d:42:b3:b9:7e:13:c7:5b:08:7d:6a:
21:31:fa:d5:d0:c0:8d:bb:0c:c1:be:dc:a2:f0:e3:05:a6:25:
b0:10:a8:de:1d:6b:86:fc:71:34:a5:31:c0:ab:38:c5:ff:24:
70:6d:78:63:94:c6:45:1c:c2:5d:bb:3e:b6:3a:72:d6:c4:62:
b2:8e:c7:39:7a:b1:6d:5e:25:a0:0c:3e:d8:14:3e:c9:c9:71:
a0:35:b6:c5:49:3b:82:5f:12:c0:9d:d1:67:66:8a:1a:32:58:
c7:2d:56:bd:6e:a4:10:ef:2b:c3:fb:5b:d6:22:45:69:03:1c:
21:63:bf:a8:d4:49:b4:bf:97:39:f5:8f:c6:bd:48:06:75:a7:
46:cc:ff:95:50:f7:4a:6c:0f:14:fb:ab:f9:c3:45:92:20:b7:
4e:4e:04:5b:4e:10:d4:09:55:fc:ae:be:ee:2a:07:17:f5:76:
62:34:fe:5e:7f:35:29:c6:f1:64:c5:c7:49:22:fc:70:6f:7f:
a0:4d:15:c9:65:18:8e:11:51:74:79:6b:bd:fa:52:64:bc:d8:
07:20:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:09 2025 by rpki-client