Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: b8VGsd15qcLzg3Iz6S4jtAhYBTus0W0pbqW1jwnPBBY=
Subject key identifier: E7:AF:62:9E:A3:B4:0E:9D:5A:2E:A9:6D:DA:30:A8:73:8E:43:1F:79
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 0194BC3C70AFFD1693D89676379FC6DA48BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 09F6
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: X+jmPSqWi1EtPZGLGrJH5AwyNg2+pJnWARl6BUEyTrk=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:af:fd:16:93:d8:96:76:37:9f:c6:da:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=e7af629ea3b40e9d5a2ea96dda30a8738e431f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:5a:21:42:f9:ac:ea:ea:7b:da:52:7a:da:
f9:77:5b:8d:0c:2f:e3:75:6c:e8:d1:c4:c3:fc:49:
ae:9c:09:8f:d7:5f:0a:62:0c:0e:38:ed:0f:48:60:
9c:19:2c:e4:54:00:5e:f6:94:d2:ff:66:de:d1:ae:
68:2a:36:9f:78:56:0c:f8:ed:e3:4b:8c:dd:8d:24:
94:0e:7f:f1:a2:9c:3e:0d:bd:d3:2b:dd:34:11:53:
69:fd:08:2e:fd:1c:6c:0d:39:ec:3d:88:82:29:4f:
e8:d2:67:51:da:d3:cf:6f:bd:96:44:5a:db:7c:9e:
7a:28:c5:81:45:0d:21:95:23:7b:be:f9:88:8f:7a:
f4:8a:d4:d4:b9:5c:52:71:45:26:10:7e:03:cc:f5:
3d:a8:59:e0:cc:96:83:ac:c6:19:70:65:d1:cc:2c:
37:73:79:b7:91:b6:28:9c:9d:42:24:86:37:68:a4:
e1:3f:46:8a:6a:9c:dc:3e:aa:c6:c1:24:68:c7:f2:
a8:68:74:29:13:5e:af:e2:9d:60:d3:c4:c9:20:c5:
99:da:8f:17:79:d3:c9:a1:94:6f:04:d0:0c:b5:5c:
11:2e:60:36:2e:cd:55:0d:ed:c9:5c:fe:4c:23:e2:
37:f7:01:8d:c6:f3:70:70:d1:73:33:46:8e:c0:eb:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AF:62:9E:A3:B4:0E:9D:5A:2E:A9:6D:DA:30:A8:73:8E:43:1F:79
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:73:87:b3:7d:60:8f:2b:93:e3:7e:a7:88:7d:75:46:4f:23:
bd:22:65:7d:90:8e:e2:86:7d:01:05:0d:0d:45:dd:6b:9b:eb:
18:ba:e9:4d:07:bd:90:75:78:37:a2:e3:64:65:ca:43:7d:54:
77:d5:e4:19:f7:c6:8d:c7:cc:32:ad:27:2b:3f:2c:54:cb:fc:
f8:d5:ed:ef:7f:60:e9:a1:c3:0c:a8:ce:4d:22:26:ae:74:18:
ca:03:65:51:6d:84:2f:58:ff:e2:f0:2f:88:33:ea:17:70:1d:
81:34:61:07:db:e7:23:bd:c8:22:c5:76:4d:8f:5c:96:df:7a:
a9:21:cf:90:88:db:f8:9f:18:7f:64:d6:64:21:f0:7a:96:41:
66:76:c6:1c:85:05:83:b5:1f:1e:c7:e1:4f:3b:60:5e:c8:87:
4a:61:10:24:87:6b:63:23:c2:e8:fa:1b:7b:1f:cd:c5:e3:dd:
b8:f2:19:cd:0c:c6:21:c1:f9:89:b8:1f:c0:d8:a6:1f:77:9f:
8f:41:7a:dd:97:33:58:3d:e7:d8:e9:59:41:37:1b:f0:bc:fd:
18:c5:be:b7:48:0d:55:21:0c:c5:9b:08:4a:68:2f:0d:33:c0:
53:f4:f9:73:4c:ad:0c:37:03:d3:c2:05:ad:7f:79:63:b5:fd:
69:d4:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client