Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: mIUkvHmHLZN70HbtfYKK4MgLohoMwWfp34GNAuHQuSs=
Subject key identifier: 87:FA:97:B8:C6:75:52:E7:28:6E:2B:B8:20:73:FB:A2:5F:2B:F4:53
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 0194BD855971C909AD3C532092BE9574A862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0ABD
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: BuHv4EOQKXS9tjwssKC12Kb+Qjy5GBxLkAJ/qVP9yYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:71:c9:09:ad:3c:53:20:92:be:95:74:a8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=87fa97b8c67552e7286e2bb82073fba25f2bf453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:01:fa:19:f2:ab:32:55:dc:de:13:98:80:
66:a6:6e:03:af:56:57:3e:88:2b:a7:6d:32:13:7a:
d8:da:6f:0a:7b:60:a8:2e:6e:39:96:06:ba:ae:00:
8a:50:01:fc:7e:57:ec:a3:41:02:2c:a2:13:6d:dd:
9f:d6:d4:c3:04:bb:94:90:7f:b1:43:3f:c8:95:9b:
5f:6d:14:74:dd:89:7a:d3:b7:93:dd:01:6f:7e:3e:
3a:22:b8:83:d9:1f:30:19:0e:87:41:61:7c:fe:9f:
11:f8:59:f1:8c:76:84:69:5c:2c:d2:f6:65:ae:06:
58:52:7c:ca:4d:65:06:9b:0b:b5:50:b9:ee:c2:a5:
ec:2a:8a:e9:3b:2b:b5:a2:6a:53:28:99:7e:56:b4:
5c:81:2f:83:5f:41:7a:7e:7e:6d:68:d2:75:82:e8:
8c:dd:dc:bd:a3:e2:67:d3:aa:43:a9:45:c0:d3:b9:
c7:e9:3d:8c:1e:96:df:9f:53:22:be:6d:c8:b6:b3:
20:d0:43:89:c6:35:50:65:84:6c:57:92:43:ec:4f:
6b:79:bf:42:5b:17:96:95:43:71:83:5a:6a:a9:33:
c5:b5:26:eb:84:4c:3d:e2:c3:87:b8:17:1b:5f:ee:
9e:0d:c1:72:ea:51:e2:a8:3d:da:f4:23:9d:41:7c:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:97:B8:C6:75:52:E7:28:6E:2B:B8:20:73:FB:A2:5F:2B:F4:53
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:3f:8a:0c:88:8b:cb:13:d5:1e:6a:8f:f0:62:f8:8c:b5:
c2:fb:20:b4:4d:a9:a2:72:21:42:c1:04:97:d0:35:75:92:04:
97:c1:90:13:0e:d9:d1:44:d8:f0:ed:9c:51:0e:a7:80:a3:32:
a1:93:f5:30:3d:4a:de:e1:f7:b2:be:0a:8c:1d:e5:40:fd:5b:
96:aa:7f:e9:ad:0f:1c:e2:dc:4e:a4:e2:2d:e1:ba:65:37:1f:
a6:00:c2:5b:6d:63:63:87:6a:41:d1:5c:2d:14:d6:7f:fd:2f:
54:b4:28:b8:8b:1f:06:6d:e8:f8:7f:90:47:68:cd:93:93:18:
e7:2f:42:11:79:23:16:e7:00:27:83:a9:2e:50:b2:e8:31:c5:
27:59:aa:02:bc:00:75:c4:bc:16:d9:7a:53:6f:d5:05:4a:3f:
f5:fa:ac:69:9a:cf:f9:f5:e6:02:f5:85:4a:a4:e1:a5:1a:58:
7b:07:6f:21:06:ae:c7:78:7b:a0:d7:1d:cf:cd:d9:54:b3:1e:
a2:21:50:4f:4b:97:60:1e:79:05:34:7e:c3:f8:de:53:86:9c:
65:97:f1:9b:0f:93:2b:65:a7:35:06:bb:0f:f7:96:8e:4b:38:
2c:f0:3d:bd:50:75:32:72:71:06:c7:af:08:36:ea:df:3b:d3:
7c:b8:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:33:53 2025 by rpki-client