Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
File: nlY8Qm0ark7R5_WVNnSQIgiehHk.mft (raw, json)
Hash identifier: h62Pw6FKDLR/ES4sryH7wTDwsaPMpbu1LAh+vzhJuhM=
Subject key identifier: 8C:24:B3:A5:F1:8F:00:38:3E:1A:5A:CF:4E:47:48:18:CF:67:2E:EE
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Certificate issuer: /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial: 0194BD4E906E088E261AFF935EA491E76061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
Manifest number: 08EC
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: DLPCyIKM7jz79PsqVnrxNoMgYXE.roa (hash: +QgaTeTZpZ2fDtls8hcOtAF0lYWHQbDmqjy56TBm3AY=)
2: nlY8Qm0ark7R5_WVNnSQIgiehHk.crl (hash: ZItMkPX1ZLR+Lc7aXaWc1N3fNpgPTBQZsFgou4fEsvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:6e:08:8e:26:1a:ff:93:5e:a4:91:e7:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=8c24b3a5f18f00383e1a5acf4e474818cf672eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:33:d0:a7:04:9b:00:5a:8b:0a:53:e8:9b:
18:60:4c:ef:20:d0:bb:ad:66:26:33:c0:9d:d8:09:
c4:23:66:a0:14:6b:23:87:04:64:d4:52:d6:36:69:
af:3c:be:70:54:d6:26:fc:62:10:c8:d2:f8:f3:b9:
b6:7f:33:9c:5c:93:eb:37:da:99:8c:ab:f3:b4:a6:
e9:42:50:79:be:be:71:14:85:70:2f:36:f9:43:59:
c5:9c:40:19:ec:fd:80:78:2f:43:3b:a3:bc:02:ec:
18:51:f6:eb:97:a6:b7:c1:97:7d:c8:51:8d:3a:ad:
db:72:55:e7:1b:af:36:21:88:34:3c:dd:13:f5:7e:
e1:7a:a6:96:02:73:74:15:bb:52:20:e4:c9:4f:43:
af:71:32:5e:13:a0:71:df:ab:f6:d0:8b:4d:b7:2e:
8d:d5:4f:87:8f:9e:e9:4c:a9:e8:46:75:d6:89:cd:
78:d7:cd:3e:b1:4b:c5:5c:58:3a:fb:95:f4:eb:df:
db:d9:98:b0:c7:9b:af:35:62:4a:0e:fc:2e:c0:70:
cd:e1:e8:bd:68:06:1c:4f:35:bf:35:d2:bc:75:6f:
2c:33:1a:b9:ba:4f:84:ae:fe:55:fb:5f:75:a5:92:
8e:06:7c:0e:61:f7:3c:e2:e0:20:44:5a:e4:4e:73:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:B3:A5:F1:8F:00:38:3E:1A:5A:CF:4E:47:48:18:CF:67:2E:EE
X509v3 Authority Key Identifier:
keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:65:76:ce:d7:94:4a:14:59:64:e1:ef:c5:94:ff:bf:32:34:
a2:36:8d:6c:d1:56:d3:77:89:65:cb:0f:a5:6a:55:b3:72:4a:
b0:70:ab:ea:92:79:3b:0e:5c:cf:08:25:e1:42:5c:23:15:09:
26:4b:bc:6f:73:e6:f6:03:4e:71:06:14:4a:af:13:c4:d9:68:
7e:65:3f:94:63:92:7c:df:2c:72:80:d4:d2:7d:75:87:12:62:
f8:ac:4e:e8:d9:3c:11:23:3a:dd:7a:fc:96:8d:7f:94:6b:12:
94:f1:23:21:84:18:55:4f:48:22:ff:3f:75:bf:87:09:f5:0a:
7a:4a:77:55:21:04:2a:3e:7d:f7:fe:4f:94:83:3c:bb:ed:bb:
1a:b6:92:b5:f5:79:37:bd:ea:3f:d1:ea:97:eb:5e:eb:97:9c:
91:31:94:d5:c1:c9:cc:62:16:af:b7:a3:23:ff:09:be:5f:e0:
e1:09:42:d2:94:46:f8:2a:d0:c8:4b:41:a8:b2:a9:e2:86:c9:
c7:69:ee:04:8c:64:4e:40:21:c7:dc:b8:8e:5c:93:81:b5:62:
f4:1d:ad:63:1f:58:a7:c3:51:6f:e8:94:1e:e1:04:55:b8:13:
7c:13:2a:d0:82:85:f9:82:94:37:e1:75:b6:b4:c6:20:0c:14:
6d:f6:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:14 2025 by rpki-client