Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: fEbuvwibd4ks0QGocPgVHDlNw5nl9YVQe3UDLjFg+8w=
Subject key identifier: 03:3F:ED:67:CB:E3:FB:0A:C3:A0:29:90:93:EE:D3:5E:DB:30:CA:2A
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 0194BC72CB1865165118C59F6860DC30D9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 10EB
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: rUnGKAERWOZCqj+klEWWRjLCfRXPHyve0EkQL156rV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cb:18:65:16:51:18:c5:9f:68:60:dc:30:d9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=033fed67cbe3fb0ac3a0299093eed35edb30ca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:cf:aa:dc:e5:e3:b3:4a:28:1d:5f:e8:41:
49:87:0d:b1:12:ac:c5:72:4f:b1:7b:c5:23:2b:e8:
63:85:8e:00:cc:7e:73:d9:1d:21:1d:48:0f:41:07:
fa:57:7f:ee:42:93:a8:1a:07:85:45:05:fc:59:39:
c8:f1:0d:20:d1:c8:08:62:4b:0b:3b:87:64:52:1c:
44:6e:22:41:6d:8f:0f:93:73:ef:82:dc:1e:f1:e7:
6d:c2:20:14:93:d4:28:79:30:42:a8:70:24:fe:35:
af:f5:37:08:08:75:f8:3a:44:94:5d:9f:cf:26:59:
53:ad:0a:72:93:27:d9:f4:81:07:18:f7:b2:71:3a:
9a:42:f7:2c:d0:41:be:15:31:78:c6:b4:50:cd:64:
42:19:9c:27:cc:ae:ae:e6:e5:9a:19:b6:67:b4:82:
cc:eb:f6:ff:3e:19:db:cb:4c:6f:23:d5:c0:8f:b8:
49:0f:61:b0:cf:d0:ec:a4:3c:3f:17:9d:36:d8:cb:
ad:7f:9b:6c:eb:07:2a:f1:34:45:7f:3e:4c:d0:ab:
b8:09:9a:5e:3c:1f:90:74:7b:f5:10:8f:9f:0a:04:
16:5d:1f:32:34:16:f1:8d:a6:88:27:7e:98:6e:da:
03:89:bb:89:df:0b:fc:86:0c:1a:c1:4a:7c:c1:79:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:ED:67:CB:E3:FB:0A:C3:A0:29:90:93:EE:D3:5E:DB:30:CA:2A
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:d0:3d:14:c5:4f:cf:95:9a:1d:76:51:dd:78:a7:ae:62:
1c:7a:76:2f:f1:dc:10:b3:dc:9c:9d:ce:89:31:d4:05:73:48:
c2:62:20:31:8b:70:fa:cf:41:9b:ca:c2:f2:2d:6d:dc:cd:b7:
d3:c1:67:ab:3b:f7:3a:33:e7:25:31:50:b2:e0:7d:30:ea:20:
58:19:a0:90:80:e3:7e:80:5c:c6:49:53:46:77:3b:87:d8:f1:
59:42:18:d4:9b:65:cc:95:49:9b:6e:25:98:3e:48:44:58:c6:
27:c7:93:db:e9:f7:c0:0e:86:99:2b:88:c5:20:88:19:20:f8:
35:55:8e:7b:24:83:43:49:5b:e4:36:4b:dc:2e:8c:f5:8b:c0:
b6:71:45:0b:ae:eb:c2:43:08:2f:d2:27:7d:2c:a8:d6:0e:ee:
71:48:3c:19:54:f0:3b:f4:ad:7a:f9:b4:a5:f5:03:11:a2:33:
a6:e0:cb:b5:73:14:95:dd:60:ee:b8:52:87:d7:3d:fd:57:3f:
2a:ea:14:c3:5e:67:1e:4f:96:50:e5:71:03:cb:51:5e:32:a7:
3d:fc:32:c7:10:ce:4b:70:09:73:fa:bd:2f:72:4b:45:7e:cd:
45:9f:41:57:48:a2:89:10:2a:f8:a0:9c:37:44:ae:f7:7a:9c:
88:b5:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:27 2025 by rpki-client