Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: 1/X+PwfIvBIVftAgF0gmyy+V20Uxr+p7jPGbe+yoNbM=
Subject key identifier: 27:5E:3C:2A:90:7C:20:85:53:BF:C4:D3:77:5E:F6:9E:8C:D2:AA:BF
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 0194BC0504C148AD2217E32B7260C71F1547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: HPE51gDgnmCGxrojsiHRa3E9tsP6iE1j7U1Ofe5PMkg=)
2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:c1:48:ad:22:17:e3:2b:72:60:c7:1f:15:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=275e3c2a907c208553bfc4d3775ef69e8cd2aabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:f2:71:93:90:e5:74:96:41:f9:a8:97:e6:
24:65:db:be:ee:a0:eb:64:d7:a0:aa:12:f2:61:d1:
88:09:38:6b:60:e2:ae:33:cc:1a:72:7d:5b:60:2d:
ba:af:01:0a:de:04:16:4d:58:cf:24:1d:d8:a1:ea:
72:ae:1f:7f:60:9a:0b:99:21:43:0d:1d:69:6f:37:
d3:73:2d:0b:9a:09:2c:9f:7b:b8:4d:2f:61:de:ff:
04:93:7d:38:97:d5:84:14:2a:98:a7:58:8f:29:c7:
87:71:17:6b:27:89:24:e3:19:ba:fb:82:03:ae:e1:
a9:b2:52:a9:0e:f0:33:7b:7d:3d:89:1b:ba:b9:48:
35:5a:c7:f4:d7:ff:eb:f2:d5:86:53:4f:82:0c:f5:
be:76:c5:6d:a0:bc:5f:a0:65:70:19:9b:15:55:9b:
ac:b5:f8:1f:f0:9e:34:14:76:22:6c:7f:89:fb:21:
71:53:21:5a:11:68:78:a2:e5:f2:29:97:28:56:e3:
51:8d:fe:55:fd:04:71:bf:8d:0d:f9:a1:4f:6d:72:
bc:aa:be:d2:1c:9b:eb:b5:c8:20:90:52:5e:c8:e4:
a5:67:06:e3:67:95:27:8e:ce:af:11:03:66:c8:52:
10:12:bc:d9:31:89:33:ef:f6:a3:30:7c:05:b4:e7:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5E:3C:2A:90:7C:20:85:53:BF:C4:D3:77:5E:F6:9E:8C:D2:AA:BF
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:d3:c4:f2:32:b6:6b:68:2c:82:86:d9:e1:a9:80:a6:9f:
07:0c:3f:f6:92:35:df:6e:02:a2:ae:77:01:b1:3f:91:08:3a:
7d:dd:b3:6b:88:0e:62:f1:7b:ad:a2:48:1e:eb:2e:44:dd:e0:
d7:f9:1e:ad:0e:bb:5d:a3:25:76:9d:df:ba:d0:bb:72:9b:19:
b0:34:68:4c:64:bf:d3:5c:ce:92:96:9f:3d:52:48:f1:e4:e0:
83:d3:5a:52:eb:4a:ab:e0:dd:dc:b0:55:d6:8a:eb:ee:55:9d:
11:ba:57:7e:a1:62:77:f1:5d:c7:4a:4f:21:c0:8c:21:dc:c8:
6e:3f:22:7d:da:df:e8:a3:4a:ac:0f:98:41:04:46:75:14:32:
4e:a9:92:f4:4d:11:51:c1:72:57:ac:58:e4:5a:8b:22:20:dd:
2d:bf:53:dd:f4:87:7f:6c:70:02:6a:03:18:ba:97:d6:46:69:
1a:5e:9d:f3:b9:b8:50:81:90:a0:8c:65:50:6e:eb:41:20:9f:
17:19:f5:bb:c7:98:7b:07:e0:4f:25:d0:53:a1:d5:1e:56:51:
e9:4f:34:d8:cd:e6:04:fc:f9:5a:89:53:7c:50:04:7e:50:86:
67:72:ad:ca:48:95:d0:60:d3:82:97:83:c2:54:f2:54:85:3c:
91:e5:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:32 2025 by rpki-client