Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: 1PTFjDMp9n1rcoJWV6g/C9besQkEYwv78RgLWJIJ0dA=
Subject key identifier: AD:11:F9:29:7E:63:35:73:16:F5:E3:F4:6D:DC:21:D1:81:82:06:D7
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 0194BD8595D7532C0F7AEF68948FD4728BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0BBE
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: gVKw+GY+Eb7zDZVmv4GcTxU9qWWqg+FvvC4NL9ncHhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:95:d7:53:2c:0f:7a:ef:68:94:8f:d4:72:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=ad11f9297e63357316f5e3f46ddc21d1818206d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:1a:87:f5:6f:0c:ad:86:21:42:d0:4f:bf:
78:6a:57:5a:fd:b6:1b:c5:9c:69:b5:b1:28:ac:30:
a4:39:ce:b9:79:8b:82:d4:4e:03:4b:47:58:b0:6c:
46:e1:ad:8f:05:1b:07:95:23:b5:74:0a:3e:b8:7d:
cf:0c:76:a2:55:9e:7d:83:66:27:e0:19:7f:87:af:
06:a6:8f:5d:6f:fd:39:07:5d:46:98:95:c1:e3:a6:
3e:08:bc:60:57:4a:f9:6f:31:41:84:bf:bd:47:cf:
d6:e8:b5:31:96:63:c7:2e:9f:f6:39:4b:19:85:dd:
c3:2e:34:b0:f2:47:c3:3f:37:c2:bc:69:bc:df:6d:
a6:24:1a:ca:04:35:bb:67:5e:bc:20:c6:05:45:05:
92:aa:b8:2c:6d:af:43:cc:70:b4:f5:c3:04:b1:62:
6a:28:51:a3:01:92:7a:36:c3:4d:58:48:4c:1d:bc:
2f:c1:17:fb:55:d5:f6:b5:fa:dd:89:16:f6:eb:d0:
24:6c:72:64:76:82:9e:18:6a:4e:bf:99:73:fc:a0:
3a:88:a6:92:6f:c0:08:e3:4d:44:9d:66:13:a8:12:
73:cb:86:23:dc:cb:62:fe:d9:89:00:dd:bb:ba:d2:
cb:b9:3f:de:0c:6e:de:83:94:27:f1:93:80:5c:05:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:F9:29:7E:63:35:73:16:F5:E3:F4:6D:DC:21:D1:81:82:06:D7
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bd:4d:1f:5d:00:b9:6f:99:1f:ad:13:90:8d:88:d3:13:24:
c7:0f:b0:df:49:0a:62:6f:5f:b7:3e:df:62:aa:9a:ec:28:a9:
20:3a:9b:96:0c:ec:93:fa:82:43:f3:f0:95:47:dd:00:fe:30:
ee:01:54:bb:37:85:8b:7f:1e:af:2f:ad:b7:f2:8e:9d:4f:96:
4f:0d:79:44:80:dc:00:52:9e:33:a5:54:16:e1:34:49:32:e0:
93:9b:77:8b:f1:51:2f:d8:f3:be:0a:18:e4:79:80:24:e2:e8:
b4:a7:bb:c9:42:bd:15:b0:53:b8:60:1c:5b:eb:09:80:01:0a:
38:fa:65:d1:67:6b:a3:49:57:27:fc:6f:06:5f:e1:bd:2f:82:
b4:fa:cf:dd:8d:6c:ae:9a:1c:87:9a:aa:9b:75:2c:71:d1:dc:
d6:b8:8f:d6:58:03:77:35:73:9b:2a:e7:22:bb:32:d0:db:8b:
68:ee:e3:1f:65:77:a2:36:b4:b0:49:76:6a:d8:74:07:31:13:
4b:eb:51:ac:0d:97:eb:2e:10:90:3d:4a:44:99:29:77:c8:25:
c7:52:50:21:24:7a:ac:42:60:15:b0:2d:74:00:89:53:cd:33:
a8:b8:89:d6:01:7c:b0:a3:08:4d:54:d0:73:b2:58:0d:cd:7c:
25:ec:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:43:40 2025 by rpki-client