Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: ORnnb6JKJNTQsLoj63sybIlcUi6SQqJ3tZu34q00Ss0=
Subject key identifier: C5:7F:34:1A:E3:3E:33:B7:F7:62:7D:13:2D:82:02:DC:B1:9E:64:10
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 0194BCAA4E50C30D6539EDDAEF8F9BF13077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 30
Signing time: Fri 31 Jan 2025 14:01:05 +0000
Manifest this update: Fri 31 Jan 2025 14:01:05 +0000
Manifest next update: Sat 01 Feb 2025 14:01:05 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: MU0yhmkoWyf+pDVLjEYBqvtVyUo0w8hZR2k9XbY321E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4e:50:c3:0d:65:39:ed:da:ef:8f:9b:f1:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Jan 31 14:01:05 2025 GMT
Not After : Feb 1 14:01:05 2025 GMT
Subject: CN=c57f341ae33e33b7f7627d132d8202dcb19e6410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:52:90:1d:7f:42:80:1a:02:45:12:aa:33:
97:82:08:59:af:43:67:42:d7:60:c1:c2:16:f7:06:
28:ec:74:77:0a:fd:d4:e2:e7:a1:93:cd:05:0f:31:
5f:b9:01:86:15:74:93:f6:0d:fe:da:a3:c3:22:a1:
69:82:aa:97:0b:7d:f3:79:f2:5e:cf:f2:f9:5b:17:
ba:b5:b9:70:97:a0:e0:cd:04:0d:72:b3:43:b3:de:
99:40:39:e5:9a:ee:d3:82:f2:3e:10:84:cb:1b:90:
39:9c:2b:de:f3:f2:21:d9:4a:93:78:98:9c:ef:3f:
6e:cb:8e:42:4a:7a:12:1f:a7:7c:a8:cc:6c:e7:55:
b5:97:da:4a:81:9c:ea:73:08:50:c1:69:65:62:08:
91:1d:32:7c:bc:87:cd:b8:15:e0:4a:7e:04:1b:65:
8c:6a:ec:7f:47:4e:35:df:d0:92:88:66:fc:a6:80:
7d:97:99:b7:d7:b6:25:25:76:c7:f8:5b:d3:17:f0:
ba:93:c6:0c:76:24:c8:18:ff:7b:cc:20:2c:d4:32:
6f:dd:0b:4b:74:8b:f7:a6:80:10:51:84:27:91:6d:
58:15:07:fd:01:ba:1e:9f:ed:27:9f:59:4d:e3:6f:
28:fb:b9:a3:26:0e:84:a1:77:9b:7e:38:d3:88:b4:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:34:1A:E3:3E:33:B7:F7:62:7D:13:2D:82:02:DC:B1:9E:64:10
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:f2:de:b4:d3:48:43:f9:0f:52:39:e2:38:24:8f:62:8b:
da:c4:3a:a8:ea:22:f5:d7:aa:b7:c5:22:12:75:c4:33:bd:70:
14:51:b5:30:8f:c9:6c:5f:0c:8b:02:d3:f6:d8:7b:4f:a9:35:
6b:1d:4c:31:ef:a3:4f:1a:b7:64:92:bb:f5:bd:3a:98:1e:e4:
57:64:14:40:67:93:62:54:43:c1:18:d0:d2:40:54:b4:a6:35:
61:3c:6b:ba:64:31:e7:35:82:0b:d6:82:67:79:04:5d:56:db:
e1:40:45:21:95:db:09:7c:09:5f:b2:57:a7:0e:d4:a4:6b:6c:
fc:2d:8d:14:fa:19:cb:70:90:a4:f0:36:e8:5b:b0:d7:99:97:
bc:da:eb:37:66:22:b0:5f:8b:ec:79:83:0c:92:22:3b:b4:c5:
bd:d5:d2:6f:9f:f0:ab:b8:44:23:90:95:cd:d9:0b:a9:65:79:
47:a2:df:0e:e4:53:9e:4d:f1:01:23:f8:2f:87:a1:31:24:65:
a5:46:c3:7d:c5:3f:ec:42:42:60:42:64:99:e0:69:b6:37:7a:
26:94:50:2c:e0:c7:72:16:2e:09:3c:83:6e:da:9c:8c:d9:e3:
d1:5c:52:16:f2:35:f0:d9:2d:4f:0c:eb:a6:14:a3:ab:b0:a6:
7b:9f:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:36:59 2025 by rpki-client