Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: KaRu8ST1n/nQexy3NwjLSJAhVad5XQXwn3LfU39mW68=
Subject key identifier: B0:92:7D:DC:59:D0:B2:E2:DD:7B:41:BF:00:68:B5:78:B8:C9:7A:FE
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 0194BD4E450EF210D9E343598D7747768C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 113A
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: LTRrQHleNC+T3n9cI0mFj0q/Y9PmEvWqxPb9rl70kfQ=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:45:0e:f2:10:d9:e3:43:59:8d:77:47:76:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=b0927ddc59d0b2e2dd7b41bf0068b578b8c97afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:66:c9:17:66:c9:67:c4:14:b9:e9:a3:f1:
9d:c4:ae:92:4d:23:9c:d4:75:38:6c:98:4f:4e:74:
e5:ff:a8:a4:a2:11:15:11:25:a1:b3:e3:91:a5:af:
e7:9b:43:d6:6d:68:25:fe:6c:15:2f:11:7f:ae:c9:
45:6d:0f:99:91:32:5e:1c:bd:c1:77:68:fa:34:a1:
d9:23:4a:dc:c3:6b:57:06:6c:ab:51:95:a8:9b:d1:
f5:0f:25:2b:be:0f:32:bc:e6:03:d3:3f:ca:4e:a6:
da:20:6d:a9:dd:cb:f8:f2:c9:29:d9:09:71:f7:21:
94:e9:8b:e5:03:4e:27:06:55:f4:37:69:c8:35:a2:
48:e7:1a:00:07:4d:57:09:b4:e6:9d:43:42:dd:24:
cf:b5:ed:a3:81:53:03:47:8b:0e:6b:44:22:ff:f9:
57:d9:aa:57:ad:d8:8c:c1:ce:cc:1c:95:26:d4:9f:
19:93:fa:db:f1:37:f0:f4:55:f2:a9:d8:91:9f:b9:
6c:ac:89:1c:f0:98:38:f3:ad:19:0a:d3:73:c2:be:
57:24:b4:e3:2d:43:bc:2e:be:82:9f:3c:0a:6f:a3:
6c:4e:02:7c:85:40:d4:f2:63:c1:fe:96:0a:e8:61:
fd:c4:ba:ed:32:10:ea:cb:e5:8a:12:47:aa:4a:ff:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:7D:DC:59:D0:B2:E2:DD:7B:41:BF:00:68:B5:78:B8:C9:7A:FE
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:37:3e:b7:e8:c4:63:d0:44:6f:1f:94:64:99:be:79:d0:
95:c2:bd:43:fb:f4:1a:72:6f:87:98:a4:fb:0b:68:28:57:fa:
00:d1:8a:2a:3d:92:68:93:91:e6:8e:b9:97:60:b7:5f:37:4b:
4b:fe:6b:24:8e:5c:03:17:bb:4e:4d:f9:fe:08:86:ae:1d:9d:
4c:f6:19:14:ab:7f:c5:f4:f5:2f:52:7c:06:7d:b3:d1:1d:2e:
35:93:18:cb:07:9d:bb:9c:62:1a:a7:c1:21:ba:9d:e1:1f:9e:
22:8a:b2:21:9b:f3:8e:fb:a4:00:08:ce:4e:4b:28:2b:dc:ef:
26:f0:a6:52:f2:0b:51:dd:35:93:34:39:59:cb:dc:46:63:8c:
5c:79:86:70:c2:df:e8:fc:66:a0:e3:82:eb:4f:4c:0b:8c:67:
fc:34:a3:90:02:61:ce:f1:ac:17:0d:67:a1:cc:6e:60:c0:57:
9f:d9:af:73:bb:0d:bb:51:e5:7c:4e:44:2f:e0:a6:5b:6c:62:
55:a6:aa:ba:05:19:1b:1a:2e:b2:03:68:e6:03:01:75:55:e1:
45:5c:73:28:1f:f7:97:37:53:a4:91:ca:94:d3:9d:91:8e:1e:
c2:5a:dc:98:5b:7b:fe:d5:4f:e3:81:95:1d:f0:9e:36:99:a5:
af:3a:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:46 2025 by rpki-client