Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: GgdNMCvGT8cbrUS/mGLucAg3nPeA6OXpf/zAv7qvdgo=
Subject key identifier: CB:BB:3B:1D:C5:68:6B:C1:D0:00:19:B0:AB:F1:32:66:D8:48:5B:22
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 0194BD853EA53AB7602EA557E2015586EC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: 2BxSUvMGWoagh0Vlp78VB0cTcigjSmWTJ8Ni4C+z+qs=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3e:a5:3a:b7:60:2e:a5:57:e2:01:55:86:ec:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=cbbb3b1dc5686bc1d00019b0abf13266d8485b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:6a:92:56:34:f9:dd:bc:e4:7c:45:36:3c:
b9:dc:b3:80:0f:be:1c:cc:b2:0a:6d:d8:ac:cb:1e:
dd:d2:af:be:86:91:ec:25:60:a6:99:f5:f1:11:d3:
f7:e3:f6:46:07:46:49:eb:b7:11:8d:c4:69:09:ba:
cd:12:0c:34:c7:6f:48:79:89:31:64:70:23:39:cc:
57:d4:2a:eb:d6:b5:2d:6b:5a:5e:29:c1:07:a9:c9:
39:7a:7d:14:d3:2d:eb:e7:f2:80:0b:8a:ce:cf:a2:
85:59:8f:8c:1f:8d:fb:8d:72:5b:ec:6d:37:60:47:
e4:05:c7:af:48:75:72:c0:2d:57:da:75:0b:7a:bb:
4c:de:4c:c5:6e:18:d2:d2:19:3c:28:4c:66:93:5b:
22:33:9b:11:9e:21:e1:b6:12:87:d7:39:63:2a:95:
e7:28:c3:2b:df:c9:29:67:bf:15:01:8e:39:17:d7:
df:e3:86:3e:af:06:aa:17:84:98:c5:e3:8d:41:bb:
27:7f:9d:8c:b1:eb:a5:be:fc:ac:a7:9b:2f:e6:05:
07:84:30:95:68:a7:0e:30:a3:66:3b:8a:4e:59:ab:
22:f8:9c:56:21:2e:1a:9d:8e:61:65:8a:8a:4e:5b:
ff:83:75:13:9b:ea:5c:4a:26:84:88:eb:5b:7f:0c:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:3B:1D:C5:68:6B:C1:D0:00:19:B0:AB:F1:32:66:D8:48:5B:22
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ed:7b:d2:29:05:62:37:61:3c:7a:2e:b0:69:b9:60:91:03:
1d:fa:bc:51:28:2c:ba:5f:21:57:9b:6b:7f:17:9a:a9:f3:f3:
fc:e8:41:36:60:3f:a9:8e:b2:c2:a1:5d:04:e8:e4:23:ce:eb:
22:b1:94:a8:50:48:b6:24:77:e7:a9:8a:76:b9:4f:e5:3a:3b:
e1:e4:1d:77:36:e8:56:92:6a:62:67:dc:5d:26:55:cc:03:2e:
7a:81:d7:ca:c6:e5:45:dc:76:48:2c:e5:7e:67:fc:b6:c1:ad:
04:53:fb:88:36:50:e1:53:68:18:5e:7d:40:ba:87:45:6b:45:
4a:81:bf:8a:a9:f9:a4:3e:be:e8:65:e1:53:6c:32:0f:91:af:
4f:7f:fe:f2:06:f5:75:9c:a5:11:ba:c5:bb:41:ff:66:a1:9e:
76:07:55:67:2f:7c:6e:54:69:31:9d:63:77:c9:35:73:f6:9e:
76:73:91:fa:b3:1d:49:f6:7c:d4:3c:97:62:ca:9e:43:45:fd:
c7:53:16:3d:b5:1c:ea:b1:fc:a3:d6:64:ff:c7:5d:f6:29:d8:
64:fd:2b:72:da:33:64:98:fd:d4:ed:9b:b8:47:7c:91:06:bf:
b8:70:06:85:e1:0e:67:67:8e:33:90:ef:e3:0f:af:5c:ad:64:
74:0f:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client