Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: TPA2JXtyv+AfjqsezNleRAEn9z7VA0kvFQCJ47lhPqk=
Subject key identifier: 2A:51:D1:2E:87:89:8B:A3:2E:69:88:82:A0:AC:91:3F:EC:1C:B8:57
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 0194BD4EA64D2B89ADAA44D02B0AF8829905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0A26
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: 8zhFosqX8Uvcrmgi+bgQyeD3R3W5AclNk6T7uytSgoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:4d:2b:89:ad:aa:44:d0:2b:0a:f8:82:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=2a51d12e87898ba32e698882a0ac913fec1cb857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:5b:1e:90:46:7e:18:b9:75:67:3c:07:fa:
30:cd:9d:7e:ad:f2:37:52:8c:0e:47:4f:de:7f:d0:
e2:9e:5b:40:50:ab:6e:f7:52:55:22:e9:5c:0b:5d:
2c:15:3b:62:08:c5:b7:93:69:74:bc:be:a0:93:46:
16:e8:71:7a:df:25:5e:42:0d:50:d4:15:ef:7e:31:
e1:41:e6:52:5a:23:18:1f:af:e2:ef:77:4a:2f:67:
b8:32:37:27:50:32:63:64:e6:e6:bb:fa:7c:df:4f:
a9:d1:7b:ae:7b:ea:eb:ec:5f:9b:f1:a3:d9:aa:2e:
10:33:f3:12:2d:d4:df:a7:7b:42:b1:4f:77:5e:15:
10:c5:f5:f3:1b:c5:72:46:f7:b0:21:5a:2c:1f:85:
5f:56:30:97:d5:e1:1f:45:53:ae:50:e7:13:33:6e:
6e:15:6f:d7:ef:50:32:5b:17:81:92:16:4d:9a:06:
1a:f7:d2:41:47:8d:46:91:96:f5:b6:e9:70:f6:4b:
81:c3:5d:ef:ad:f2:52:97:05:85:13:39:e6:08:ef:
a2:a7:d3:f3:44:e1:7d:7f:ce:58:59:9e:0f:42:37:
0f:54:53:f5:1d:8a:8c:8d:e8:5b:11:4f:40:5f:1d:
03:fc:53:02:bc:d3:16:df:1b:20:68:fe:e1:94:65:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:D1:2E:87:89:8B:A3:2E:69:88:82:A0:AC:91:3F:EC:1C:B8:57
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c5:16:82:c3:54:ef:7e:3a:bc:4c:1e:28:c9:5d:88:77:b4:
2c:76:32:71:e5:88:6f:8d:01:d7:07:3d:63:19:a9:a9:48:0d:
21:d9:91:9a:15:41:ca:d2:35:5f:fd:b9:15:ca:f1:22:72:6b:
49:a3:d2:d0:08:a9:eb:a5:e7:4a:79:8a:fe:d2:08:0c:4d:05:
db:4b:f7:9c:c5:d2:ce:c2:97:cb:b2:2d:97:35:7e:a3:55:67:
16:47:78:a3:43:c0:56:e2:6b:cb:95:fc:d0:0b:22:fc:ab:68:
0b:8f:92:0a:0e:02:84:03:10:97:99:60:be:07:f5:8e:dc:1d:
80:4f:a9:3a:93:dd:18:d2:5b:db:86:23:e3:bd:37:a7:8d:19:
4e:ac:15:f5:84:8b:16:2d:d0:2c:00:e8:9c:bd:c2:ea:12:41:
94:3d:91:dc:b7:f0:84:3e:1f:77:af:0d:d3:b2:8b:04:26:5c:
4d:49:f4:1b:9b:34:56:39:0e:00:3e:bf:39:16:11:82:96:ca:
13:24:d6:f8:1e:99:e2:af:c1:70:9b:29:ed:f1:1e:8a:27:6e:
a3:78:0d:81:a3:56:63:09:f3:53:f5:e3:87:39:b0:d2:d4:d0:
2b:e7:89:7f:9a:20:97:ea:ed:28:5d:5a:67:c4:3f:10:f3:2c:
e8:75:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:25 2025 by rpki-client