Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier: CRbZDfEhimbDGSZ9yVKng3MT+khvjYg5/o6BrwLKtRI=
Subject key identifier: BB:71:13:54:A4:78:7B:B1:C6:1C:DE:07:C4:E9:BB:20:AC:E9:51:C4
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 0194BD17FC2B2067E9B77CEB006AA7940AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number: 0AFD
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: aRmXLbWgvqCrB_ieixDwg5bWHH4.roa (hash: NkuU0nUuwUULqqtGwJsRiK14f6VjdQm0HvAAtBo3GJQ=)
2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: +cM/8vY1tFFyEOd6qHD875roYTOmHWGTBFYMRks0Oso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fc:2b:20:67:e9:b7:7c:eb:00:6a:a7:94:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=bb711354a4787bb1c61cde07c4e9bb20ace951c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:d8:fc:44:c6:ce:b0:cd:b6:60:71:e6:bb:
05:40:5d:29:cd:e9:b5:3d:f7:06:c2:73:cf:d2:49:
1a:07:dc:b9:13:ae:4c:65:7f:b3:a2:38:79:1b:eb:
18:54:e3:9d:1c:39:f5:3f:00:61:f0:6d:65:3a:1b:
5f:05:81:44:ca:92:2a:f5:71:37:8a:00:d4:4f:0b:
f4:34:6a:76:74:43:1d:05:57:62:ae:da:ce:c9:bb:
25:2a:75:b8:9c:2d:58:c3:f2:8c:a8:6f:11:7a:8b:
5a:6b:d3:21:0b:6b:c6:4c:17:0f:b9:da:d3:cd:bc:
9a:ed:e0:39:f7:dc:c6:ad:18:45:7b:85:94:88:e5:
db:0c:18:84:6d:3e:43:68:b7:71:19:8f:ed:10:eb:
5d:87:8f:2e:cc:86:dd:8b:5f:d0:50:b7:81:66:64:
2e:c6:c1:4d:be:a3:44:bf:75:fe:32:11:5f:d9:8e:
69:5a:0a:f7:c2:c8:d2:1c:fc:5c:77:d5:d2:c2:5e:
81:91:3e:cb:54:11:4d:8b:88:03:5b:29:61:97:5f:
eb:2b:c7:c8:43:72:58:3a:7d:d5:35:4c:46:5a:0f:
eb:5e:87:b6:2a:1b:29:38:bd:65:69:b0:9f:68:aa:
06:95:03:17:77:07:8d:ea:c0:b4:ee:00:15:b8:d3:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:13:54:A4:78:7B:B1:C6:1C:DE:07:C4:E9:BB:20:AC:E9:51:C4
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:18:bd:6e:a0:46:91:0e:80:62:6a:64:ca:ba:33:8b:59:
76:34:23:df:c2:50:23:63:30:36:9d:8e:c3:71:1b:cd:49:ab:
76:8f:55:a2:d9:11:cb:d3:45:a9:12:7e:b6:6a:5b:7f:aa:12:
72:85:97:ad:da:bb:60:1c:3b:94:f9:c6:4f:d0:1b:3c:0b:ad:
8d:2c:8f:4b:7e:68:b1:83:2e:9b:ac:a0:fb:10:10:2b:a7:31:
8f:33:a0:fc:be:1c:3e:e1:f2:1c:4a:9c:57:3b:e6:6f:3b:69:
f1:09:23:80:22:ee:5c:71:a6:51:ec:b8:fd:45:d4:7a:81:a5:
09:e3:44:d1:78:06:a3:65:04:db:c0:20:c0:8b:26:6c:0f:e5:
ce:2f:ba:61:f8:52:e5:48:cd:a1:22:33:f0:4d:d8:47:f7:d8:
bc:cf:33:f7:9c:9c:ff:d1:e0:6c:90:db:bc:48:b8:e3:20:a0:
68:91:06:9c:56:47:73:50:97:fb:e5:8f:97:6c:f3:b0:7a:3b:
40:29:ac:11:12:6e:48:2e:a8:ca:61:c2:90:ce:ff:ac:a0:ab:
18:fa:bc:f7:33:7e:a1:83:d3:d1:c6:96:e3:e1:a2:75:91:d7:
92:0d:cf:83:9c:7c:a6:b8:af:af:12:f2:94:51:32:da:9f:23:
4c:9a:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:43 2025 by rpki-client