Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: PcX9cytxQT1jzEHRPYUi5YEQ4J+s957M0dmH5j4AGxQ=
Subject key identifier: 28:86:5A:5C:1F:EC:D8:63:20:2C:6D:82:3A:3C:F0:45:E1:34:25:D1
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 0194BD858738FB4D478C7BA4E63300982E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 0113
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: Ayt5dJa81w4JI5lMla5rVzqViJREVp5gGtkkPI/eOYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:38:fb:4d:47:8c:7b:a4:e6:33:00:98:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=28865a5c1fecd863202c6d823a3cf045e13425d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:a8:71:1f:c1:26:1d:00:9f:9b:56:65:5b:
b6:5b:80:7d:3e:09:86:8e:b6:02:0b:d3:f1:7d:81:
d5:a2:dc:b1:b2:9f:75:ac:33:e3:cc:cb:f6:47:1b:
7b:78:c2:36:18:72:a3:78:f6:e5:14:0a:01:47:30:
db:e5:28:a9:27:85:d8:52:18:00:af:46:ad:fd:99:
cb:50:dd:f9:a3:c1:91:0d:6e:96:74:07:07:8e:a2:
11:ff:70:b5:98:9c:25:23:24:a2:bb:30:7e:dd:b4:
84:40:b4:90:11:30:04:8f:a3:e5:39:9f:5f:93:ba:
1b:8a:d7:87:58:f2:ce:07:6d:9e:5a:6f:23:a1:6b:
2b:31:9b:c5:03:b3:bb:8d:43:1d:31:6f:39:28:ba:
29:b6:0e:7a:25:62:91:26:a5:1f:7a:8a:bb:35:b0:
2d:89:12:fb:fd:07:f1:61:08:a9:ee:f6:16:62:97:
8c:47:b2:c1:d8:45:35:dd:79:2f:c7:a2:03:97:26:
02:bb:0c:76:2a:a7:71:1a:ff:18:b2:83:72:f0:8b:
0a:2e:15:be:41:49:29:96:ea:ca:92:6a:91:e2:19:
ae:a5:43:29:d9:49:10:e8:a1:39:46:99:a8:2d:5f:
f2:31:c2:b5:66:03:5d:e7:b7:ba:87:c1:5b:31:f6:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:5A:5C:1F:EC:D8:63:20:2C:6D:82:3A:3C:F0:45:E1:34:25:D1
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:00:7f:fa:7b:c0:00:a7:d5:e3:06:04:f2:c3:50:90:b7:
fe:39:3f:0d:60:12:8f:40:3e:e5:5a:c0:28:a0:4f:f6:c8:4f:
77:cf:1d:c2:1d:e9:30:b4:20:2a:a6:2b:7d:f6:21:93:9b:75:
09:4d:70:ae:f8:3b:5b:35:64:01:6d:1a:7c:8f:95:62:4b:30:
f3:58:27:fe:87:17:08:40:10:11:66:8f:d2:95:ad:7e:4b:fd:
8a:18:99:a4:5c:a2:9a:1c:e4:a0:3a:cc:7d:f8:8d:f8:16:f4:
77:85:dc:ea:4f:d6:1f:52:a8:bd:52:b5:f9:15:cc:67:3d:95:
23:3a:c4:12:3e:36:33:11:44:5e:b6:be:2e:7c:b8:c4:60:c9:
38:04:cf:14:88:62:6b:ce:eb:6e:13:8b:59:ef:97:61:39:e5:
1e:5c:9c:de:ef:3b:a9:6b:63:73:49:b4:2a:25:a8:02:8b:94:
f4:09:ea:71:36:41:29:69:d8:96:d0:c0:c0:ec:ba:9c:5f:99:
6c:28:f9:6a:d8:7c:8f:5f:5d:4f:9c:36:a6:0a:96:fb:b9:94:
13:d8:0e:93:bc:45:e5:c0:eb:b9:6c:9b:ef:95:54:83:b7:d7:
91:2f:d6:ca:ba:86:bc:6f:e4:4d:66:d5:db:5b:19:2c:89:51:
c8:7a:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:20 2025 by rpki-client