Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: V0wyCo7EslzgMjmVlCpCSo84gYPGsWw1kMFi1uE5Mxk=
Subject key identifier: BE:22:51:B0:C1:A5:9F:A9:7A:8F:AE:2E:2D:EB:28:12:AE:72:0F:25
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 0194BD17C0C8925322EE07C7F0A9FEC2B7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 03E6
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: 0IiiuAUilqfjYfVP6YXsT1txZTGXsHdD0k12OL87+sM=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c0:c8:92:53:22:ee:07:c7:f0:a9:fe:c2:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=be2251b0c1a59fa97a8fae2e2deb2812ae720f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:5e:a2:21:04:22:70:e6:04:99:f5:d1:d2:
ba:63:10:19:15:36:02:c4:20:db:30:95:cc:2e:74:
ae:15:78:41:63:cf:73:df:cc:e8:f8:26:4a:00:10:
ab:a5:fe:08:d9:cf:50:0b:a6:c3:be:2e:29:ea:9a:
f6:41:64:a0:04:6c:63:97:ea:1d:c6:58:90:64:4f:
22:09:ea:96:d6:71:9f:d7:d0:05:e2:00:f2:7a:1d:
38:60:62:a7:c6:b5:da:dc:1a:84:0c:dd:14:6d:00:
b9:f8:4c:a8:23:ea:3b:fb:ce:31:ee:a5:3d:83:35:
e4:eb:89:f1:68:b4:c7:f6:9e:bc:4e:8a:18:6d:8f:
4b:c4:22:18:89:da:67:ac:34:f2:62:67:4d:11:12:
d5:57:93:5f:47:c1:85:51:23:20:1f:af:6a:1e:8c:
b3:f0:09:47:3f:d9:3a:1a:16:5b:ad:91:fe:df:fb:
ac:bb:ff:44:f2:9c:5f:63:4d:55:4c:87:58:f4:bb:
8f:e6:dd:d5:db:e8:c8:3c:aa:06:5f:43:dd:c6:d0:
fb:b6:38:0f:9a:ab:0c:a0:c6:7d:5f:38:1c:e2:fd:
8c:ac:55:71:41:f2:0a:1a:8c:ff:1e:9e:9a:5c:19:
4c:c7:03:d6:eb:0d:a6:88:6d:6a:9b:a4:99:b8:de:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:51:B0:C1:A5:9F:A9:7A:8F:AE:2E:2D:EB:28:12:AE:72:0F:25
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:29:75:f5:4e:6c:3e:5c:2b:44:7e:f8:22:9f:08:0b:a0:2f:
dc:78:8a:06:89:e3:08:32:c6:fe:85:80:bb:8a:a6:4f:72:c0:
1b:a0:df:21:81:d4:92:a0:62:29:52:5c:c7:3d:c7:fe:bb:a3:
84:45:7a:23:e5:33:fe:3f:d9:b8:e5:ea:38:1f:2a:13:6a:1d:
b5:68:77:e4:7e:ec:33:1e:d1:0f:e8:14:89:b1:b1:36:83:e4:
da:a1:e1:cf:ef:ae:46:f6:d7:d6:fa:d4:28:f1:22:97:59:b5:
d4:a5:24:93:5f:8f:1f:3e:ae:dc:1d:4c:3f:b0:93:1f:29:52:
2d:32:79:1e:76:e7:f0:c1:4d:b6:44:83:1b:e4:54:e5:12:33:
18:ba:6a:df:3c:68:d5:07:12:d0:dd:fb:f4:ea:9d:9c:98:27:
3f:69:1a:f4:13:72:88:ab:94:9f:0e:7c:d6:2b:17:4a:8b:ba:
47:fe:2a:be:89:9e:b0:0a:a9:8f:5c:a5:94:be:6e:59:d8:5c:
0f:0e:4d:c4:4c:bd:55:92:7d:05:86:bc:34:18:ba:3a:31:27:
7d:ee:90:ef:42:3c:ab:51:8d:63:ae:41:3a:a6:1b:56:1f:9b:
0f:92:56:fc:28:ff:b0:64:94:08:e9:db:bc:93:88:23:74:bf:
03:87:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:27 2025 by rpki-client