Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: OIfsj8uXMRH10QVVncWfHZ2LOhYsci2PC5u+NJ4kTXQ=
Subject key identifier: 41:26:7A:97:66:6D:A3:5D:81:76:B5:00:D4:E3:1A:6F:F1:C8:33:DF
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 0194BC72DD06BE072519FE89FEA37BA39D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: hvWaFS0EttocYGvPpBWtHglH1UU.roa (hash: 5kJHcJE58dfjo4vnxy+41rEzTCWfIQJ14p7YHDvJKE4=)
3: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: lAIqLfsKfSI8v7MVSulyQY7YoR7HjbF5J8Z9d1a8k2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dd:06:be:07:25:19:fe:89:fe:a3:7b:a3:9d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=41267a97666da35d8176b500d4e31a6ff1c833df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:e1:13:54:ba:79:72:76:35:b9:34:90:10:
d1:d0:d0:35:2f:01:a7:b7:34:fd:c0:fb:34:75:8c:
8b:21:01:aa:fc:fc:5e:77:4d:8d:5d:9f:4b:4a:5e:
82:9f:b6:a3:f7:a8:e6:5a:ed:22:25:00:e8:7e:a9:
2e:83:5d:78:ac:d5:8d:6a:db:50:52:57:e1:e6:e1:
23:fc:83:d3:44:48:2d:49:b3:3f:9a:e7:51:61:93:
09:58:d8:28:8b:80:31:6c:51:99:e5:13:a5:f2:40:
8c:0a:00:e2:44:f8:98:78:fc:94:ec:38:52:bb:de:
a7:7b:f8:45:2c:33:9f:6b:55:97:a2:f4:a6:a0:15:
45:01:03:ac:c3:b0:d4:27:7d:60:12:7d:d0:1b:5e:
53:33:b8:e6:51:9d:e9:78:58:ee:0a:33:0b:06:aa:
0c:38:b5:f6:62:1d:f7:3c:6a:7f:d9:43:8e:a7:fe:
04:0d:75:b8:1b:82:ae:f6:94:c2:3c:ff:f3:cf:8e:
bc:34:60:8a:67:c7:49:55:a4:16:28:44:aa:2c:55:
1d:f1:21:d1:28:15:ab:be:e4:ad:79:9b:68:19:61:
a0:55:a2:4f:0f:f6:0f:8f:13:49:15:59:65:1d:bb:
80:1a:36:be:0a:bc:c0:62:b7:3c:35:20:ab:f5:43:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:7A:97:66:6D:A3:5D:81:76:B5:00:D4:E3:1A:6F:F1:C8:33:DF
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:55:f2:46:a9:4f:37:1a:6a:a7:bf:27:6d:ac:ec:a4:e9:
98:f9:c8:62:cf:fb:9f:53:36:47:66:15:4d:b3:dc:99:93:e5:
a4:4f:cf:4e:0e:61:50:13:08:36:1e:dd:08:eb:9c:74:c4:e5:
dc:fc:4f:8f:1b:a9:6a:8b:c7:01:e7:9e:90:fb:ea:6f:2f:be:
1d:95:cd:c7:b8:00:2d:0a:51:58:80:4a:50:40:ae:07:7e:4e:
ca:16:aa:77:cb:cc:ab:dd:22:b2:f7:50:87:6a:c9:3e:c7:c0:
e0:27:2f:d1:73:fc:b7:37:7a:21:e9:92:8b:c9:b9:86:fd:49:
f0:92:3f:b8:52:5e:d9:0c:14:81:db:df:05:bd:33:b0:3c:e5:
9d:1f:9e:51:e9:71:85:07:c9:11:22:f2:1a:48:c3:98:a6:db:
d6:b3:08:96:97:2d:72:16:5c:2c:83:e1:9a:eb:64:69:80:7d:
9e:d4:38:25:4f:d9:ce:70:7a:e4:1b:4d:68:e9:04:a7:ee:cd:
f5:bc:86:5d:cb:7a:64:0a:d6:45:3d:bb:c2:a9:5f:91:5e:86:
26:af:79:e3:16:86:de:42:c7:e7:de:c7:24:fd:63:b3:c0:11:
af:72:5a:e1:76:57:4e:f1:95:71:75:17:77:da:44:c8:bb:77:
d8:49:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:31 2025 by rpki-client