Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: 4BxQ1pIg2ecHnpdAjHX22zF7AeNiw6bGZEoEWwPU0Oo=
Subject key identifier: 03:D5:F4:B1:8F:2B:98:F4:1D:C9:80:A8:8A:66:C9:BC:93:60:A5:59
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 0194BCA9CA476AA9F63E34F3304B90437381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: zwOeEzhfZ8Qe6Z31Xpg4HJ8aJyGfGdyKAiTiZcdp6WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ca:47:6a:a9:f6:3e:34:f3:30:4b:90:43:73:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=03d5f4b18f2b98f41dc980a88a66c9bc9360a559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:8b:bd:08:a2:e7:db:1b:40:20:bf:34:ec:
80:13:e6:5e:87:1b:bf:15:8d:ed:ac:e4:e1:24:cd:
0b:46:5a:c0:7b:5d:54:2d:76:8d:9b:36:73:70:b3:
f1:8b:80:f7:96:65:6b:0d:ef:98:7d:02:c7:aa:d1:
e9:68:18:f4:79:ba:fa:df:ca:9a:1c:5a:b1:68:0c:
90:d2:dd:72:e5:cd:22:f7:8b:5c:be:19:7c:58:c6:
5c:3f:05:ff:3e:92:5b:c3:64:10:fe:ac:30:f4:b6:
99:f4:61:7e:c7:3e:8b:fe:9e:8b:ea:b3:35:34:91:
50:80:a6:c3:8a:fa:05:f2:7d:4e:52:c9:0e:24:ad:
13:59:3b:39:a8:38:0b:9c:63:78:4e:6d:32:e9:1d:
2a:2b:92:22:0b:ef:3e:14:32:7a:47:58:50:62:80:
49:07:83:ef:0f:e3:10:12:26:a2:28:a2:a3:0b:f7:
cb:f4:63:b4:fb:d0:e6:58:e6:61:79:a8:24:a8:39:
d6:18:2d:ce:f4:64:c3:20:0f:3b:5a:e6:37:b4:fb:
e2:73:48:b1:8a:a4:d8:20:0a:fc:89:aa:b4:4f:d2:
bc:c7:e5:78:f5:87:32:1b:74:0f:3e:e0:09:46:11:
a5:f3:b4:27:40:82:21:65:1d:b1:df:b1:4b:51:76:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:F4:B1:8F:2B:98:F4:1D:C9:80:A8:8A:66:C9:BC:93:60:A5:59
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2f:83:77:cc:2c:9b:9f:0b:3f:f0:12:8e:70:c1:2d:fd:05:
9c:61:72:4e:4d:59:81:ee:fd:40:52:0d:c9:b8:92:b3:1c:6c:
a9:3d:00:bf:01:75:ca:59:03:6a:77:47:9d:03:e9:6c:4b:75:
35:83:59:79:51:dc:a2:ab:da:49:ae:40:2e:b0:e6:d0:5d:a6:
b2:b1:71:7b:bf:ad:c6:20:cc:42:cf:11:a0:8f:87:38:ce:42:
4b:39:61:25:ae:53:7c:08:0c:ab:91:86:54:9d:63:2a:d9:b3:
09:0b:5c:9f:51:40:f5:77:a5:6a:c4:b2:2e:e0:8a:67:cf:b0:
64:4a:0f:7a:9b:e0:37:c5:db:b1:f6:81:a4:da:ed:f1:45:f3:
e2:03:a6:b4:4d:fb:1a:21:ce:df:2e:cd:c7:05:47:83:56:3d:
47:c7:a0:be:4c:67:3f:ad:8d:24:99:be:8d:11:aa:c0:69:a4:
a2:6c:fd:2b:c8:41:76:30:59:d0:fe:7a:5f:aa:88:d6:3d:db:
f4:e0:69:e5:f2:da:50:51:34:46:fb:4d:c1:34:d7:2b:c0:f4:
3c:30:fb:3a:46:20:64:7c:b6:1c:24:4e:4f:b7:59:11:2f:d4:
e2:fb:cd:19:98:dd:ba:9f:67:6e:94:c1:68:9e:2f:21:f1:1b:
58:d0:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:06 2025 by rpki-client