Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: lc89yrha+S40uleR6rCoEZpICwus+xc+2USVYc607Ik=
Subject key identifier: 02:43:C3:A3:16:76:67:FA:D0:22:B0:68:2F:E0:D4:2B:91:89:9B:69
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0194BD17CE80759BA4659318B697088939FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 0ECE
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: GNN34PX+ulsZ9kmwt0UdoarB+Epd7bPjrJMKB1Pxx4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ce:80:75:9b:a4:65:93:18:b6:97:08:89:39:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=0243c3a3167667fad022b0682fe0d42b91899b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7e:e2:bc:7a:a1:81:27:38:95:c7:d6:63:5d:
7d:2c:ab:ba:9e:99:c4:ff:eb:cf:cc:8e:5e:61:62:
e0:ac:0c:47:eb:4a:e0:06:a5:19:54:4a:fe:e0:02:
eb:61:7a:75:dc:be:2b:57:b0:b8:91:86:89:2e:90:
e2:24:1f:87:c3:7a:be:7a:42:17:91:2c:ba:18:8d:
e8:24:65:1b:90:68:9f:7b:20:a1:2a:70:c7:f8:2d:
b2:d9:65:9a:05:35:c1:5d:03:3c:b1:b2:33:0d:ff:
2e:8e:39:f3:b6:76:a2:da:81:2f:8f:54:1a:a9:c2:
7f:cc:c8:2f:1e:29:87:db:e7:2a:4e:7e:ef:39:21:
64:21:42:29:1a:3a:47:ad:b1:b5:2d:fb:31:ac:75:
d6:09:37:d4:3e:0b:52:9c:6f:48:2a:3e:90:ae:eb:
b5:01:0e:e5:14:a4:cc:f7:18:6d:27:4e:30:78:5c:
0f:9e:7f:aa:d5:d3:a3:ce:02:16:80:fb:da:f9:a1:
8f:06:7d:3a:af:47:75:c5:8a:07:92:4e:e5:7a:a3:
58:f9:7a:28:5f:a2:1e:c8:1f:43:98:27:8f:92:bb:
4b:f9:a8:39:7d:ab:0c:b2:db:58:53:28:76:67:49:
1f:29:91:fc:71:ce:b7:b4:65:c5:1a:71:c9:0a:2e:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:C3:A3:16:76:67:FA:D0:22:B0:68:2F:E0:D4:2B:91:89:9B:69
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:62:3f:88:c1:17:03:0a:19:c1:3e:a7:ba:99:fe:6f:25:4b:
01:24:f7:84:6e:57:ff:fb:1e:50:81:0b:b6:6b:4a:e4:57:94:
15:a3:f5:fa:5e:42:55:04:e7:24:db:9a:87:a5:2f:de:4c:2b:
b3:82:2c:7c:5c:21:e5:fc:e4:4b:c0:31:8c:f0:9f:a0:ad:eb:
bd:ed:85:aa:18:c8:f4:4a:e2:f4:bb:cc:e6:36:86:95:70:24:
b0:b9:62:72:30:c3:f6:a2:c6:b5:e4:59:4c:b8:31:d6:ab:a4:
e8:8c:d6:24:79:eb:34:d8:e4:1f:3a:29:a3:80:fc:36:65:44:
dc:b6:05:c3:2e:65:2b:91:ee:6a:b0:47:1d:36:25:47:31:4c:
de:39:60:f2:61:ef:09:e4:ad:5f:1f:8f:49:fe:ae:28:b0:e2:
51:23:9d:b4:6e:6a:c2:c9:72:bf:bd:fa:bd:3c:c0:0e:15:94:
af:47:ea:d2:64:e0:4c:bb:a8:38:34:48:7c:89:44:71:96:65:
00:a2:24:6f:73:46:d1:e8:eb:88:f5:1a:ad:f0:52:ca:0e:f6:
eb:d9:c9:76:5f:af:4d:5b:a0:21:65:f8:4e:d6:7a:b9:3a:11:
cd:0f:76:ab:52:d1:8c:05:00:b0:ba:29:b0:54:8c:f3:01:74:
da:81:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:54 2025 by rpki-client