Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
File: nEswhmFPR4OKPoCj5uBR09imkvk.mft (raw, json)
Hash identifier: dByspI1610SrE9o63WpiZUnysZ5MMelIsS+SFxhG6cE=
Subject key identifier: C8:8F:41:8C:26:CF:A3:91:4E:40:DE:30:6F:93:D7:A4:34:E7:DF:E0
Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Certificate serial: 0194BD8546D53D41281029FDE5D12D8D7367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
Manifest number: 0477
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa (hash: ix5ZmIac7PSSZ8cbH+U6PyHdhcxmOIX450xPjZ8S6o0=)
2: nEswhmFPR4OKPoCj5uBR09imkvk.crl (hash: RDsjBwW+nAw5FAFwPUOuJgGct5cMv+dsPuzqErxwSDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:d5:3d:41:28:10:29:fd:e5:d1:2d:8d:73:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=c88f418c26cfa3914e40de306f93d7a434e7dfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:2c:f8:6d:69:47:27:70:97:87:23:34:aa:
ee:f6:2e:5c:1d:8e:ae:54:9e:78:46:e7:e2:30:89:
fc:eb:66:50:13:b0:13:09:bb:93:01:1b:99:12:d8:
0f:64:ab:3a:bd:5f:26:a5:b9:9b:82:5d:9b:0f:8f:
7a:7e:a4:89:28:59:47:2c:9c:b0:5c:31:65:6c:e0:
15:66:43:c9:59:19:8a:5b:e8:ad:9c:b9:77:2f:44:
4e:04:25:b2:f2:27:31:d0:ad:26:28:d9:1e:f1:8b:
5b:e5:a1:bc:fa:58:bc:34:92:e5:88:47:26:e4:ef:
b9:20:ac:08:b2:00:b2:57:db:75:1e:95:f3:4d:c2:
3c:09:02:b3:4a:88:52:84:bd:c7:e6:dd:91:57:78:
65:40:a2:de:1d:60:46:8f:f7:48:ca:93:63:85:39:
83:ba:a4:d8:b1:94:c8:f3:ba:51:5c:ff:d6:86:be:
f0:80:68:c1:ff:31:29:23:dc:b2:9a:d4:9b:fc:b6:
b7:cd:a3:e5:a6:80:ce:93:d5:6e:a3:5e:77:e6:46:
09:b0:cd:be:73:98:52:dc:e8:65:5b:f9:f1:a1:5f:
66:9b:06:a8:79:c9:b2:32:92:80:17:d8:c6:e8:2b:
34:60:15:da:62:04:69:35:b3:f7:68:4b:d8:8e:c6:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:41:8C:26:CF:A3:91:4E:40:DE:30:6F:93:D7:A4:34:E7:DF:E0
X509v3 Authority Key Identifier:
keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:21:83:8a:bf:aa:04:85:40:d2:3b:8a:1e:17:f1:d5:30:
4a:66:6f:08:d6:8b:b6:d7:ba:a0:61:7e:1b:89:bc:9d:dc:05:
8c:ed:6e:77:4b:86:74:a1:62:d3:03:02:3e:1a:db:f8:b3:7a:
9a:29:4e:3a:cd:c2:31:ee:d6:09:9e:2b:c1:be:46:66:ad:5f:
3e:2a:5b:d5:45:82:08:28:8c:df:a8:cb:27:80:ec:56:25:f3:
6e:db:67:e4:d6:84:93:16:91:d4:63:6e:92:e8:b6:84:02:43:
7c:30:ee:07:13:0f:9f:d0:f1:a6:76:c6:70:b5:64:60:34:d2:
80:9e:83:d1:d8:af:29:5f:95:03:c6:3b:0a:af:a1:7c:ca:47:
43:00:d8:8c:5b:be:ea:ea:35:aa:e6:42:70:21:80:d7:14:d4:
68:c9:4b:c5:ad:e8:9c:36:e3:e8:0e:fc:b6:c4:8d:5d:24:f9:
15:27:b5:77:6d:a4:cc:24:53:fb:2f:45:f7:84:6a:84:ed:02:
80:61:f4:24:56:46:82:05:63:6c:4e:2f:b6:37:c8:85:1c:cd:
9f:22:ab:49:a5:ce:9d:51:f3:5a:f2:88:ed:bb:f0:81:59:f7:
53:f9:3f:89:52:12:d8:1f:4f:c2:e3:d6:5d:32:08:eb:92:b1:
d9:49:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:22 2025 by rpki-client