Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: cjMKMevgssrzY5/up3RHaIkFwa4R++fsn+W0+FDCJvQ=
Subject key identifier: BB:69:0F:13:99:02:A0:B7:8F:64:1D:90:F6:01:65:D8:4B:4C:F8:2E
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 0194BD85A91B33F37BED7FB4A671ABFDE744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 04F1
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: FA48AlrXjzfkuxkvGrwCmqqn8YVazZ75TMQnG6xB8HI=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:1b:33:f3:7b:ed:7f:b4:a6:71:ab:fd:e7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=bb690f139902a0b78f641d90f60165d84b4cf82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:b1:f5:e6:2a:e6:31:40:53:39:cc:2e:19:
3c:22:92:dd:80:64:22:8d:7f:46:e2:24:1d:8a:93:
92:1e:01:80:19:92:41:10:8b:ab:ed:5d:e7:ca:e3:
fa:1c:42:ac:7d:b8:46:6d:12:dd:bf:0f:40:15:f3:
01:b8:a7:e7:ac:de:7f:a4:7e:e6:2c:b9:46:89:39:
03:5c:34:43:6d:ab:21:c4:bc:51:53:e5:8a:aa:8d:
db:86:0a:f0:96:14:a2:94:8f:cb:7f:73:f7:f8:ce:
a4:4c:02:53:58:5d:f1:3c:37:70:ef:21:f3:76:61:
df:41:51:11:e3:da:5b:3e:36:8b:e4:a2:8e:78:23:
19:b5:91:9c:81:b9:01:8f:72:33:68:44:a1:04:c7:
5f:40:c7:2c:1d:81:67:9e:ed:1e:da:72:f2:48:1d:
c2:09:92:c6:70:05:13:a8:fb:92:ba:ae:8c:15:d9:
59:8b:26:ee:3c:a9:c6:32:dc:15:4c:d6:8a:4a:a4:
9d:d7:f4:2c:cc:52:5c:d3:b1:19:95:d8:fc:fd:72:
23:dd:7c:5e:b9:ef:5b:de:1d:e1:7d:49:93:64:0e:
7b:fb:f1:8a:cb:48:3c:e9:16:1b:f6:d8:9f:5a:42:
bd:88:02:bb:b3:e1:39:95:5a:6a:e6:0b:0f:0f:55:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:0F:13:99:02:A0:B7:8F:64:1D:90:F6:01:65:D8:4B:4C:F8:2E
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:72:8c:0c:70:67:be:0e:73:4d:fc:6f:13:cd:4c:05:7a:3a:
6c:38:9e:f7:a8:35:ed:a7:11:73:30:13:e9:fe:1c:95:13:38:
6c:9a:9b:d9:99:f3:5e:b2:b1:ba:0f:23:35:64:31:9b:4a:22:
f6:64:bf:59:bc:84:9f:04:d4:5e:bc:77:cf:8e:37:1f:31:8c:
85:9b:a6:81:17:78:c9:ae:56:a3:e2:ea:bf:12:08:bf:82:28:
2d:4a:50:4a:1e:78:21:ec:be:bd:85:9c:9c:c1:80:0f:67:99:
30:56:b0:ab:e0:5d:db:0d:0f:22:d2:41:42:00:35:87:74:2c:
84:4d:6c:be:cf:00:a8:9f:0b:b7:a6:c9:10:1d:c1:7d:90:b6:
04:81:c4:af:35:37:88:d8:09:af:e5:28:bf:60:1c:6f:be:65:
42:1e:5a:4e:f2:51:bd:03:8f:0f:f0:6b:ca:d2:6e:b2:f6:7f:
63:9d:6e:00:0a:db:59:e3:42:75:be:e2:fb:01:0c:13:3c:e4:
4d:bf:00:45:11:58:a2:cc:af:66:ff:6d:d8:48:fe:b4:80:b8:
18:d4:19:6f:c6:40:c0:f0:84:31:68:6d:7a:ef:70:f0:a0:78:
66:29:6e:7c:50:c0:ee:50:9e:16:3a:24:8a:ec:85:44:b3:e0:
42:23:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:45 2025 by rpki-client