Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: 3dWb9zN6r5rEAuCrc5QNOdy/OP5nZJQ0Nc5Fn+s/e8w=
Subject key identifier: 07:13:18:FB:DC:B2:2E:A5:D8:F9:1D:2F:C1:F3:26:C5:4B:56:A6:DF
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 0194BD8577E55811CBB5B35902454813E8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 0572
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: 3KKLpS/G1keBh88v6mFgHapytTjwfoha1H4gPY17u5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:77:e5:58:11:cb:b5:b3:59:02:45:48:13:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=071318fbdcb22ea5d8f91d2fc1f326c54b56a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:28:79:d1:a7:53:f3:84:95:e9:f7:8c:f5:
43:d5:82:d5:75:8a:85:5f:88:fb:7e:56:48:b6:82:
e4:68:6b:e3:c6:6d:e5:ad:d1:0c:18:01:88:56:b5:
a6:e6:2f:24:5b:e4:8e:5a:21:6f:38:ad:2a:ca:71:
61:ff:e9:82:95:0a:c7:18:43:ef:39:d8:ce:63:26:
18:9e:cf:96:06:55:e8:c0:71:e0:47:d9:b0:6f:d5:
46:84:d5:f3:a0:46:14:d7:8c:ea:8b:13:75:b5:e0:
2c:33:d9:35:79:b0:71:3c:73:43:46:a8:4f:0b:04:
56:44:1e:f2:29:12:ee:60:0c:a6:6f:f4:72:60:79:
91:fc:89:a2:4f:09:ff:42:bf:cf:c4:db:90:4a:4b:
3a:b8:60:2b:26:0d:d4:32:71:05:34:c4:1f:88:9a:
14:37:d2:0c:2d:5d:ed:63:8c:29:a3:ec:fe:bf:d7:
37:7f:7c:0a:20:91:13:30:02:2e:cb:67:ca:22:56:
0b:58:ec:21:5b:c1:d8:b2:fd:08:91:19:8d:8b:98:
f7:ca:e4:22:0d:37:ad:c7:c8:08:75:5d:51:95:e2:
d5:63:f8:de:71:b2:7d:45:4b:00:ec:9c:1d:a1:41:
ec:73:7b:76:6d:28:f7:32:78:e0:0d:3a:be:02:67:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:13:18:FB:DC:B2:2E:A5:D8:F9:1D:2F:C1:F3:26:C5:4B:56:A6:DF
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:80:89:5a:37:bb:7e:58:16:b6:29:44:c6:ad:e1:10:c7:
2c:26:1f:61:ca:97:4e:4d:7a:34:1c:f3:94:63:16:b0:a7:87:
35:6a:96:27:e5:3e:fa:56:03:55:2a:ef:99:92:3b:9d:b9:53:
73:25:ff:0e:40:51:59:65:65:25:0e:32:52:ac:e2:9c:9d:02:
31:9a:69:8d:23:d7:15:de:25:7d:12:a3:a3:8a:f8:a0:59:4d:
f4:a2:27:06:9d:9b:0b:3e:41:a4:0a:ee:60:a3:28:33:c9:97:
42:10:72:e4:0b:e2:51:ac:bf:fb:03:f0:a2:8d:a4:a5:f4:1e:
3e:f9:f0:1e:35:57:14:e6:2d:bd:fc:7f:79:b0:b8:eb:42:e4:
8f:37:9b:b5:87:ec:58:4d:43:32:2f:46:0a:83:b6:65:9a:1e:
13:ba:c8:38:1a:c4:10:72:58:c2:ab:8c:14:c0:46:9c:76:79:
41:0f:64:d1:d1:fa:fd:a6:64:05:4c:53:a4:ff:ea:80:72:56:
76:7b:6f:35:a8:3c:01:6d:2e:58:28:0f:ce:c0:a5:ba:eb:b8:
32:77:39:72:fa:20:54:b2:97:c8:f9:13:44:d9:6a:ff:ee:59:
46:86:19:b1:3e:2b:44:b9:a8:e3:e8:ea:71:c8:70:88:2b:bb:
a1:39:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:37 2025 by rpki-client