Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft
File: nDKfMzH1ND8pDrSkHxbENjooLJA.mft (raw, json)
Hash identifier: 6wzT1rEUlGeEI5Y0kM61zUZcZUCD98yAZRI+AEMdTg4=
Subject key identifier: DA:B2:10:42:E4:64:CC:99:29:CF:20:8A:38:1B:80:E5:8F:81:7B:5C
Authority key identifier: 9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90
Certificate issuer: /CN=9c329f3331f5343f290eb4a41f16c4363a282c90
Certificate serial: 0194BC3BF0CD0E113966EDB2C28777CC08B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: nDKfMzH1ND8pDrSkHxbENjooLJA.crl (hash: udO2ojMLakpyn1e3xe43di+EzEh4+lh6+FgIdSmY9DU=)
2: xXqtZaQE8p1BJ-LrGDHK3ctGl88.roa (hash: 19HlQM5dbXIMn5dc2AbBJAmDmCjDbQENEnPoWF/ZUJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:cd:0e:11:39:66:ed:b2:c2:87:77:cc:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c329f3331f5343f290eb4a41f16c4363a282c90
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=dab21042e464cc9929cf208a381b80e58f817b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:b7:4f:6e:61:d4:df:e8:b4:2d:2f:75:01:
fe:d7:02:4a:af:66:6b:d3:c3:24:69:b3:e4:46:50:
6b:dd:bb:af:9e:0e:95:ff:f6:36:70:6a:1c:ff:e2:
0d:3d:fd:76:e4:fb:11:f8:18:c0:8f:ef:24:be:16:
9d:14:6e:b5:b3:60:39:33:86:65:8b:f6:11:76:06:
a7:1e:84:38:ae:a7:b6:ad:a0:d2:e8:e6:61:82:1c:
bd:d0:2e:fb:8d:30:53:09:c6:88:45:3a:e9:91:a4:
34:b6:54:cb:05:ce:64:93:77:18:e0:38:3c:a3:14:
b4:1b:be:18:e5:3b:5f:66:79:43:a8:6c:2f:31:58:
f5:a2:6c:60:85:5c:4a:ea:a5:89:bf:09:d3:cb:5b:
e5:33:12:36:1d:63:6e:10:31:5c:0d:06:d7:87:83:
b9:3b:ed:81:bd:4c:b1:45:b8:2e:9c:90:76:0a:88:
4c:bd:8d:ad:00:51:f7:03:1f:30:b8:0a:de:30:94:
d0:5d:58:95:ca:13:00:78:0c:c4:68:40:b1:92:39:
fb:91:24:11:f5:0a:5b:5f:45:cf:d9:7a:40:48:9e:
ca:90:ed:1c:71:07:4d:8a:5a:44:e8:4f:4e:34:7d:
d6:53:db:75:45:82:e6:80:e7:9d:8d:6a:71:07:65:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:10:42:E4:64:CC:99:29:CF:20:8A:38:1B:80:E5:8F:81:7B:5C
X509v3 Authority Key Identifier:
keyid:9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:74:53:82:e1:e6:cc:a8:25:59:09:39:45:b5:02:35:36:
b1:a0:95:0c:7e:19:91:dc:ed:ae:61:53:fa:4f:55:cc:4d:c0:
82:b9:e8:3b:cc:4b:21:3d:ca:ec:6d:3d:95:02:7b:cb:52:e4:
be:fb:ef:8e:ca:46:a7:6b:f0:a4:ba:15:8c:6f:8f:4a:45:7f:
1a:b3:ed:a1:ae:2e:86:66:cf:24:1d:00:64:31:dd:c7:14:18:
5d:c7:bb:c6:4c:43:fa:2c:b0:d5:ef:a5:36:73:8a:01:47:42:
3e:4a:82:b2:b5:f6:46:9f:b1:37:c2:7c:30:43:04:f3:e5:92:
d8:eb:3d:6e:95:56:b4:74:83:c1:10:2e:00:6d:df:4c:09:f0:
5a:69:7d:65:eb:7b:4f:fc:b8:96:cc:1c:8a:18:fa:f7:70:34:
ec:8c:cb:64:2e:1b:dc:86:dc:35:82:7f:70:5e:71:99:be:93:
4f:0b:eb:82:0b:ab:c9:54:a1:ca:1c:7c:b7:70:c8:2d:ee:1c:
57:41:87:70:3b:ea:a9:e8:51:80:2e:5b:f1:56:0b:37:ec:65:
cf:67:d3:e0:27:1b:65:0a:3d:5e:90:5c:4e:83:38:6f:17:d6:
5c:2c:14:8c:f5:e5:02:b8:f8:d0:66:0d:67:2c:1f:1b:0c:43:
3c:8d:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:29 2025 by rpki-client