Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: HDkEuNOTaR/GtDzzGenqgIU59XkTMObrPQAgssjnO14=
Subject key identifier: FA:B4:78:45:23:96:BB:37:FA:10:1F:FB:B7:23:38:05:B6:DB:95:5F
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 0194BC7286C09CEC0E336F25660F3A44ED21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 0133
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: P4Ok3C1Pwn7c+HNxWs5TatJCvjaqr6oV2RKoi4i3X8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:c0:9c:ec:0e:33:6f:25:66:0f:3a:44:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=fab478452396bb37fa101ffbb7233805b6db955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:9a:a4:78:72:64:ad:ce:34:a3:76:c8:59:
4f:fd:33:6b:8e:a7:8e:4b:bb:d6:28:70:a8:fb:2b:
f8:2d:d0:ea:6b:8c:fa:df:73:fe:54:69:8a:1a:9e:
90:75:08:1e:4f:a1:93:84:34:90:4f:28:78:f9:6a:
8b:a1:a8:03:cc:00:2c:8b:61:63:f0:7d:e8:04:df:
50:b1:f4:84:88:64:38:cc:d5:1f:10:48:28:a1:b3:
0b:00:ca:60:01:07:a9:e1:28:e6:68:67:01:57:94:
c7:62:87:85:39:c1:2e:45:f1:57:21:35:3c:2c:eb:
c5:fe:88:ed:2f:c8:38:36:5f:d5:9d:93:f0:4f:4a:
45:e5:28:46:5b:5c:e6:f2:f4:5a:c8:0b:61:5f:47:
d4:ef:90:94:a6:c8:ad:5c:fd:48:d9:7b:25:90:e2:
5e:08:a7:d6:36:24:f4:44:96:7a:c2:9a:57:5f:15:
1f:f0:44:d7:61:67:00:78:1c:70:47:92:3f:41:e8:
11:bf:9e:1a:f7:98:1a:03:6f:28:ea:f6:8c:9e:c0:
c2:35:bf:3e:d3:f4:21:e5:d5:92:a9:5b:7a:a2:06:
7c:bc:81:d9:bb:7b:a7:85:40:20:cc:24:ab:bf:f8:
51:fc:ff:8a:a0:60:73:82:12:51:23:74:02:aa:62:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:78:45:23:96:BB:37:FA:10:1F:FB:B7:23:38:05:B6:DB:95:5F
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dc:5f:39:9e:f9:46:50:40:39:6e:3b:c1:6d:27:69:58:bf:
bd:24:17:2d:d1:6b:c5:f2:ea:59:3a:b4:61:0c:54:2e:07:d4:
2e:79:52:ab:d1:00:48:a3:1b:5e:5d:8d:8a:b1:94:ff:58:64:
02:f4:78:4d:ae:28:ed:87:4c:2e:58:1b:36:b2:5c:10:7f:af:
fd:e7:ef:24:da:34:ea:cb:fb:6c:9a:a5:47:67:0d:a4:84:b0:
a1:e8:5d:73:9d:4d:36:8a:b9:a9:0e:f6:2a:73:fb:a5:1c:96:
5e:dd:e4:41:72:41:0a:a5:be:02:44:cd:9f:76:53:ba:9b:3d:
68:c9:55:7d:8d:4e:35:2f:53:48:e8:90:08:fb:31:8a:9f:16:
7b:be:42:9e:e8:a1:ba:b6:c8:21:0b:2c:29:17:7d:b0:c6:d9:
79:12:3e:29:63:20:17:af:d6:03:64:8e:ec:5f:44:53:bd:7a:
ea:b5:b1:85:5e:b7:5f:65:54:8e:1c:66:7f:76:e8:1e:62:70:
24:2a:6c:aa:9b:22:5d:26:ee:e5:51:4b:86:45:60:b9:99:92:
b5:d1:92:f8:85:42:43:ae:96:5a:a0:94:fd:aa:6b:ff:31:c1:
52:e8:1e:b4:85:5b:04:71:28:9f:11:34:ae:94:d0:b3:56:87:
82:12:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:46 2025 by rpki-client