Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: oaoDI7ryGHGgHUfttcax/knf4EKh0bYIjawkdOTT2X4=
Subject key identifier: 60:05:1C:C6:96:59:8C:E5:33:64:DA:69:AA:D4:DE:38:28:CD:CF:BA
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0194BC72DCFD8F421C894571F7C6F5D26671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0D79
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: BJfRRP6sSo9qaM6PTd9kscj18gFRfROGZ0pFoPFO69s=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:fd:8f:42:1c:89:45:71:f7:c6:f5:d2:66:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=60051cc696598ce53364da69aad4de3828cdcfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:a4:3b:74:3a:08:6b:d0:cd:81:57:3d:47:
32:bb:cf:bd:81:87:1e:29:43:9c:d5:4b:95:c6:a4:
1c:e0:70:3f:1c:1e:f0:24:ad:f4:91:94:f2:4b:d5:
66:e1:76:30:69:c2:93:55:57:a2:80:d2:1f:a3:f7:
11:c0:f7:4f:a6:31:16:e2:3b:64:18:a8:b5:1a:58:
30:9e:a2:7a:96:86:64:70:af:aa:fb:16:0f:30:7a:
7f:5b:8a:2f:cd:13:b0:f8:5b:ad:d3:21:59:ab:47:
63:e5:f5:ec:4a:7c:3b:2d:5f:86:2d:fa:e6:87:95:
b4:83:9a:72:f5:dd:f1:64:71:8a:6e:d3:d2:4f:ad:
79:d2:df:e7:8f:b0:73:6f:68:9a:43:86:39:c6:db:
c1:81:1e:9b:6e:ce:3c:f3:58:8c:8b:fc:03:8c:cc:
4b:f6:b6:4e:80:97:e6:77:b2:ab:1e:91:44:c2:ca:
c9:b7:8a:fa:c4:8c:47:20:d9:9a:e2:1f:97:90:9d:
b4:a8:25:d6:12:b5:44:33:81:1f:07:ed:da:ae:32:
e2:2a:38:be:da:c4:f2:97:b3:93:eb:08:7c:13:8b:
c9:75:fe:3a:85:99:fb:0f:d9:36:5a:0f:ed:f5:f7:
de:ce:9d:42:cf:63:7c:e8:26:31:ad:43:7a:38:84:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:1C:C6:96:59:8C:E5:33:64:DA:69:AA:D4:DE:38:28:CD:CF:BA
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e6:50:bc:61:9b:29:8c:0c:70:48:23:75:91:ee:d1:ca:94:
2e:a9:dd:0e:01:4b:aa:34:4c:90:17:c2:d0:80:05:d2:17:13:
ca:41:46:58:27:c0:a0:41:08:75:67:6b:73:86:c6:5e:6a:61:
31:54:8c:47:e0:42:ee:df:91:ea:cc:13:c5:00:1c:73:19:0f:
5b:5d:2a:ef:99:6a:5c:9a:4d:8a:ad:23:86:8a:c5:a2:1c:2d:
89:10:5d:2d:cc:1f:35:32:c2:ec:84:ad:f6:42:88:c5:b1:38:
20:a5:83:7c:89:8d:da:9e:21:3f:4b:52:8d:bb:aa:52:4b:dd:
1d:b0:d5:a0:77:07:10:99:c9:4c:88:ec:a9:db:c4:c8:e2:03:
3a:e9:b6:f8:9f:64:f3:7e:da:00:4a:fe:11:ba:a8:85:a1:c2:
71:de:23:a5:fd:b7:49:73:64:54:eb:a8:24:b2:c4:0b:8d:97:
53:49:ab:cf:78:5d:bb:2a:de:25:68:5a:53:63:6d:89:92:ea:
06:f9:e4:16:4a:aa:cb:58:b3:9c:39:77:ac:86:cb:7b:cd:62:
c0:07:00:79:f1:39:83:e9:b4:ef:bc:d8:ba:74:b1:c7:be:16:
89:d1:a5:1d:d8:88:01:b0:03:2f:1e:2f:7f:50:af:95:3a:ae:
43:39:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:41 2025 by rpki-client