Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: Qto8LJU/oUoWhB5nsVT9LMyQ8Z/4m8dhEOjxd3lZDGc=
Subject key identifier: 61:DA:47:9F:C1:51:C2:F8:32:97:2B:07:3F:E4:A8:D0:2F:87:21:48
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 0194BD176E91C2D1A12B0AA0A113DC4388E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 07C4
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: hghnyH/lY4LlvOI2n1nzaf5aMuUKpiyDKFhMBx+UpzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:91:c2:d1:a1:2b:0a:a0:a1:13:dc:43:88:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=61da479fc151c2f832972b073fe4a8d02f872148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:b8:2d:ad:f3:0d:f3:aa:94:14:1f:3c:77:
d5:ea:8e:fd:12:7c:04:2e:fe:c9:5a:b9:cd:c7:02:
c3:4e:ea:72:29:31:bd:85:ea:a5:05:25:7a:44:f3:
c4:50:79:64:6d:d8:91:74:7c:06:38:dd:79:01:fd:
3b:e9:66:bc:b7:60:7d:88:1f:ce:a2:97:31:f1:d8:
01:63:d6:84:ad:04:0a:07:a2:ff:db:ec:ce:aa:00:
45:ea:5f:fc:04:e7:df:1d:1f:5b:24:50:9b:60:a5:
a0:10:21:9c:20:48:fc:cf:ba:e9:71:2e:ea:04:8b:
c5:dd:54:7e:95:84:9d:7a:8a:ca:f9:c5:7d:28:49:
48:26:d8:f0:a7:94:44:f5:a3:5a:85:4f:6a:8c:8e:
91:2b:6c:99:39:3a:af:2f:38:36:e3:9e:43:33:2d:
ec:cc:16:e2:ab:2e:ff:7a:f3:01:b5:e3:72:10:42:
c5:3b:1e:a9:ad:df:c7:b7:ef:06:0d:32:fb:83:d9:
28:f3:e8:9b:fd:8a:5e:a0:e9:df:19:8f:bc:f4:21:
33:24:4b:8b:9c:b8:ed:24:24:ba:9d:27:35:2e:12:
e6:f2:e1:9d:34:79:27:dd:d9:88:f1:51:59:f9:02:
d8:a5:c7:d3:02:02:b5:16:1b:ab:0a:74:d9:cc:0a:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:47:9F:C1:51:C2:F8:32:97:2B:07:3F:E4:A8:D0:2F:87:21:48
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ef:b2:42:24:9b:12:de:9e:73:b0:2c:12:ba:35:6d:9c:b2:
f1:49:c3:e3:84:a5:47:be:24:d1:c6:b1:c9:5a:b7:cb:b2:63:
e6:0e:ad:50:28:9a:30:0b:05:e5:c9:74:a0:65:95:f4:b5:05:
53:49:52:fe:a3:02:4f:e8:ed:47:d8:db:8d:d7:fb:95:eb:36:
fc:bb:00:79:d2:ef:5e:d6:12:0b:4e:33:5c:90:5b:5e:d9:c3:
7e:5a:dc:84:7a:72:78:a7:73:d3:6f:1c:d0:9b:8c:c3:44:de:
e8:d9:53:24:d3:01:8f:e6:f8:15:f9:d2:35:f3:90:b0:2b:91:
2c:bd:1b:f6:ad:88:9f:84:ab:12:cc:c3:58:94:15:e0:3b:61:
22:e3:0f:72:da:5b:ec:d8:8f:d1:07:5d:0d:f8:70:b5:61:d4:
ee:19:58:3f:19:20:81:68:a4:92:2b:56:8d:42:ef:a2:fe:af:
09:16:76:35:6e:7d:e0:7e:e8:80:0b:79:68:de:50:47:76:6d:
d0:b8:43:d3:32:1e:b8:27:a8:36:91:af:2b:83:8e:8e:20:f3:
7d:84:3b:78:2a:84:69:77:d6:8a:17:c7:13:a7:62:0e:65:98:
c3:30:9a:61:82:16:f4:26:8b:90:ce:c2:84:d4:66:ae:cd:a6:
55:98:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client