Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier: OMFVwlzs4G6KZFupmXCdT/x1lI9EfkHt/u9i6LXeujY=
Subject key identifier: 6C:C1:5B:38:F5:22:25:E8:59:F0:AD:0B:B9:53:8D:02:8F:62:1B:DF
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial: 0194BC7308C57582DAF1CD360FAFF3FA24C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number: 54
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: obgSXA79cdklgt2XOSP3nilKhFW2yu+0J0ekyVGsqtY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:08:c5:75:82:da:f1:cd:36:0f:af:f3:fa:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=6cc15b38f52225e859f0ad0bb9538d028f621bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:3c:5a:d5:fb:1a:1e:90:80:95:03:0d:3e:
7b:7e:49:8f:7e:b9:fd:b7:58:0c:48:33:b6:0e:06:
94:6c:25:4f:c6:0f:7f:8c:48:51:1a:c0:67:10:80:
44:63:7c:67:ab:bd:93:1d:8a:56:47:0a:75:dc:f0:
e1:b3:f9:2d:78:0b:06:b3:6e:9b:a0:76:27:08:4c:
3f:5c:ce:00:39:18:71:14:4c:30:9a:8a:c3:37:d9:
b1:00:12:e0:05:10:d0:75:f8:15:ab:63:58:de:1b:
4e:61:ce:48:db:bb:0d:80:8e:98:7e:41:cf:72:fd:
ff:6b:b3:ec:02:04:5f:af:dc:ef:42:9e:26:0d:8f:
ef:34:99:0c:f6:b0:87:86:cb:8b:5c:39:6a:3e:90:
36:ff:87:50:7e:0f:c2:17:7c:cc:a9:43:ac:3f:d2:
46:23:8c:93:4c:03:45:7e:62:60:48:43:79:46:ca:
de:03:13:bf:eb:92:3b:29:8a:7c:d4:4c:3a:80:f3:
ad:23:07:6d:7f:97:81:0e:66:86:e9:3f:ab:6a:af:
18:71:6c:20:ba:fa:e8:60:44:04:31:0e:27:72:7d:
c3:0b:47:8e:4a:5b:e6:8b:2b:08:d1:fc:83:64:0c:
2f:2c:bc:05:66:14:4c:d4:ca:70:9b:0c:2b:04:bd:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C1:5B:38:F5:22:25:E8:59:F0:AD:0B:B9:53:8D:02:8F:62:1B:DF
X509v3 Authority Key Identifier:
keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:44:f4:9c:82:0d:5b:96:c4:31:74:73:34:b6:5a:b6:87:6e:
5b:ea:9e:e1:86:c9:03:86:13:ed:78:b7:f6:cb:26:20:57:47:
69:e9:18:5e:4f:03:e4:d3:fb:91:ae:d9:ec:8d:60:42:e2:5e:
84:1a:cd:ca:cd:2e:14:46:a6:21:fd:d0:83:ee:ac:ae:d7:df:
1c:0f:ff:dd:6b:dc:9b:da:3d:18:49:1b:e0:d6:59:cb:17:0b:
98:ad:0d:b3:98:75:15:9d:78:74:ea:ab:9f:1d:a2:e3:4a:72:
a9:1a:6f:5c:00:89:7d:96:d2:44:2e:8a:49:be:e4:6b:26:51:
75:79:04:c6:76:aa:b3:1b:7b:f0:c1:e3:00:bd:a6:6c:c2:02:
0e:b9:ae:04:20:1b:ec:e1:08:a5:d7:f6:84:bd:a0:a4:e7:6c:
2a:ac:01:31:29:c6:79:12:b0:c6:6e:b0:cf:c5:6e:41:34:5a:
ec:45:c6:be:a6:64:00:8f:ec:28:27:0e:16:76:6c:b1:86:f1:
a0:cb:f8:cf:93:58:8c:72:79:0f:bd:bd:ae:0a:25:b9:6f:6d:
07:36:12:d8:22:ff:e4:71:56:5f:05:ba:5f:b9:65:83:fa:2a:
79:59:ea:b5:db:fb:1a:7c:85:e3:4a:e5:b8:ba:c1:87:29:f6:
46:61:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:56 2025 by rpki-client