Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: Xq91cX1xeNK2zOT8I4VRTU4FmIFiVMV/RJFYPnr0HQM=
Subject key identifier: A1:0E:FA:E2:24:47:43:50:AB:80:BF:0F:D4:D1:EE:AB:91:0F:1B:1C
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0194BBCDC5F47362AD43C5AEE025A520D9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0BA1
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: sLOojmdbKXCaFWbnoz0KxGPsas93d1ii/be9ITxQLZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c5:f4:73:62:ad:43:c5:ae:e0:25:a5:20:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=a10efae224474350ab80bf0fd4d1eeab910f1b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:d7:1d:8c:4a:8f:80:34:71:d4:39:90:68:
b6:bc:54:42:75:dc:3d:85:5e:47:32:96:29:cf:a5:
fc:c3:9c:09:a4:b6:0b:c7:69:51:fc:ac:6d:33:e1:
0e:5e:c5:45:67:5d:9f:36:4e:a7:c4:33:dc:c9:30:
88:7b:5f:02:07:1e:cf:0c:4a:09:5a:2c:82:27:e5:
0a:70:42:15:59:94:e9:1e:83:22:84:ce:6c:3c:87:
83:bf:60:ec:e4:cf:c1:5b:2c:2d:fc:b7:fa:b3:72:
49:32:e0:76:dd:b0:b6:3f:b4:b8:9e:4e:9f:01:af:
30:4b:cb:36:91:2a:4e:71:fd:22:95:c9:7f:8c:f1:
b0:3f:62:83:a6:0f:d2:9b:0d:cb:b9:2c:72:c0:05:
79:57:de:c0:33:c7:94:af:6d:5d:4f:d0:7f:59:7d:
59:d5:53:5d:43:a6:86:ab:83:f4:df:17:4b:c4:e5:
97:f1:e2:c9:1c:e1:e3:5b:7b:61:89:36:a8:12:13:
90:f5:a7:4d:45:60:71:1e:e5:2c:07:4a:8c:aa:c4:
30:49:6a:a9:59:5c:25:9f:27:3a:34:c5:74:b9:3e:
ea:0e:1e:6b:ff:c8:1a:a6:11:ba:de:77:81:00:03:
5c:17:e7:bf:11:d2:56:b2:23:59:93:01:cb:4c:1c:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:FA:E2:24:47:43:50:AB:80:BF:0F:D4:D1:EE:AB:91:0F:1B:1C
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:24:f1:32:e3:2f:ec:e4:45:1f:ef:d6:5a:51:26:8a:07:
24:d1:39:2e:a1:82:00:3c:8c:a1:3c:93:c2:c7:13:9a:cd:23:
a1:76:3a:87:43:e1:85:d8:52:88:c7:c6:65:8f:5c:b1:13:39:
b7:f9:71:27:a1:a2:cd:c3:5e:e1:ed:ad:29:d0:d1:cb:94:bd:
87:3e:61:ce:f6:d3:15:15:fb:78:83:ed:bf:12:fc:56:b7:b9:
6d:8a:3d:a1:56:eb:d9:71:2d:b5:9c:08:c1:3a:f3:1c:11:d1:
88:87:11:87:cc:7a:c9:9a:42:c2:7f:73:b1:fc:e5:fb:24:91:
c1:1f:8f:b8:b3:a3:0c:8f:be:ae:7c:98:4f:56:4b:95:95:3f:
4a:42:6a:91:04:86:fd:0b:fb:98:00:e0:7c:16:62:59:5d:ad:
b9:b3:1f:19:52:eb:90:bf:ce:dc:4e:65:f5:29:d0:b0:34:89:
f2:f3:ca:22:4e:ab:72:49:45:32:93:3f:ef:cb:56:68:8a:c3:
93:32:ab:40:f7:26:28:61:15:f6:eb:63:9e:8b:05:51:16:2f:
5d:e0:37:3d:b2:89:27:96:51:07:1c:9e:7e:3c:3f:30:4a:52:
b9:51:02:05:79:4f:4e:26:f3:be:41:97:26:5e:17:1f:0f:ed:
5f:2c:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:16 2025 by rpki-client