Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: N7h7zhmYYoFcpxGUed27LUEIJzoc84aXE/JOe+lGQc4=
Subject key identifier: E7:3F:82:DF:84:F0:76:06:CA:67:BF:2A:6C:B7:62:1E:F5:60:E9:2A
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 0194BD175C97A7E0F2FC8736EFA0829441BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: 2PNnlbVLe3AxReY0cTJG15yDc/VisaSsnHKMlDJIDls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:97:a7:e0:f2:fc:87:36:ef:a0:82:94:41:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=e73f82df84f07606ca67bf2a6cb7621ef560e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:9b:01:8a:02:14:3c:7d:43:84:6a:50:02:
ad:79:1f:1f:73:c2:b0:80:e6:d8:88:01:be:09:24:
9b:d0:82:41:64:a9:06:b7:34:52:52:51:8e:44:9a:
fd:4b:83:f9:7f:bd:b1:a6:f1:fd:fc:6c:1e:26:92:
e3:1f:52:2f:df:b6:ca:90:49:2d:4c:b1:b3:f9:05:
37:05:e0:3b:af:21:3d:98:dd:b1:92:a1:7c:7c:68:
be:e3:76:f5:d6:7b:f2:54:90:9a:68:c4:0d:64:fb:
20:b2:b4:70:fa:5c:5a:ee:03:58:53:ba:39:a7:b8:
11:86:ba:cb:6c:6c:9c:f6:88:f8:fa:e5:59:27:97:
d3:10:b5:6e:21:62:99:95:6f:32:fe:eb:4e:f3:a8:
99:72:9f:7c:a5:0e:29:b2:6c:6b:13:b3:83:4c:5a:
2c:43:e1:96:48:ea:f1:5f:32:c6:ef:f1:d6:61:97:
72:3d:b3:bf:4e:17:82:58:10:3c:dd:b1:f0:c3:09:
ba:99:92:7c:ec:7b:17:e6:2c:4f:63:8e:41:21:3e:
55:3f:d3:35:b4:56:82:10:9e:95:22:d9:42:1d:db:
a4:8e:76:0f:79:45:69:6a:ac:83:30:3c:16:4e:e7:
4f:5f:f8:ce:94:49:20:71:24:f3:33:6a:22:8c:e8:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:82:DF:84:F0:76:06:CA:67:BF:2A:6C:B7:62:1E:F5:60:E9:2A
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c7:57:c9:d7:bb:08:d4:a4:26:0b:01:a0:8f:34:82:12:4f:
71:b7:4c:61:e3:e4:8f:2d:8a:f5:49:a6:5a:e6:71:10:7c:57:
b9:da:97:b6:22:fd:38:cb:d3:58:94:25:d9:54:7d:ca:93:b3:
c2:e3:62:e5:ed:8c:15:ce:b1:6d:d0:b7:82:73:67:73:ce:6b:
ae:94:22:19:31:9f:03:89:53:66:b8:14:d3:fa:d3:8a:bb:3a:
91:c2:c1:e0:b7:ba:ee:bd:b7:b9:25:50:51:9c:46:67:5e:3e:
eb:27:4b:6f:3e:09:16:16:e1:59:0c:e2:82:09:e2:c3:2c:c6:
d3:10:96:d9:f5:6e:c2:b0:4a:04:92:0f:51:63:f2:e5:cb:d2:
b8:8e:cd:e9:66:1f:c1:4c:c9:a2:cb:09:02:5d:dc:8e:ba:4b:
69:b4:18:b6:5c:d0:c8:e0:20:2b:e2:35:f9:36:c0:26:ab:14:
fc:db:c9:6f:5c:4c:a5:c3:80:aa:dc:b0:c6:b5:14:e2:b9:47:
2d:01:59:b2:6d:a8:ab:e3:24:df:cb:cc:22:01:90:81:39:b6:
ff:33:06:50:67:1c:51:4c:a7:5a:5a:50:5c:8c:e4:41:21:ab:
53:3e:82:8a:72:b5:8e:28:fc:63:53:cd:ac:03:7f:ec:fb:11:
d9:45:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:29 2025 by rpki-client