Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: ntyIZzz7aeXUnGs4ZQ0v6xGzS3VhlIvYQkHCreNRdNc=
Subject key identifier: EB:6B:FC:8F:82:D7:71:98:A2:8D:98:40:BE:75:D5:BE:40:E2:89:CD
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 0194BC3C8A0064D972E5038E6EFC29430E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 02FF
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: z8qONHgxU3FH0BQoEGgNkUy8LAQNWzFBl7bGHT3R9m4=)
2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:00:64:d9:72:e5:03:8e:6e:fc:29:43:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=eb6bfc8f82d77198a28d9840be75d5be40e289cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:e6:b6:47:4a:fd:4e:8d:cc:aa:c6:81:de:
26:e2:54:05:cc:0c:01:6b:78:bd:93:33:c1:d3:6a:
2e:cc:78:c9:8a:83:af:10:70:bb:b8:98:3d:92:fc:
32:bf:21:70:fc:0d:22:af:2d:ef:32:a4:30:25:f2:
ce:d8:ae:e2:42:d3:86:3f:ef:ca:99:21:00:d2:69:
04:52:d0:35:dc:e8:26:c7:7e:66:cb:b3:5c:32:a8:
73:88:8e:c3:03:43:af:4f:20:a7:9d:fc:ba:37:be:
39:27:a0:14:92:00:90:28:d2:f4:7e:75:a1:36:15:
ea:55:f4:27:39:09:24:98:2e:d7:ef:bf:28:76:5e:
b3:02:a8:c7:3c:f1:7a:6c:18:6e:fc:22:61:8a:38:
a8:43:b4:58:38:f1:0c:22:ee:be:b2:81:0d:2d:e4:
34:4f:63:e1:71:58:97:7c:ce:ee:06:81:11:36:f4:
b4:8d:c1:b2:6b:f4:4f:7d:55:80:74:7a:5c:7c:09:
e3:78:1c:07:0a:a4:10:05:f2:f9:33:f2:06:d7:07:
b0:1f:3d:28:2b:66:a7:2c:90:5f:82:f3:79:e1:9f:
c1:7c:61:f5:0b:27:b8:1a:1d:d3:d4:47:a3:cb:8b:
6f:24:b8:94:7c:2e:9b:59:27:35:b3:90:ab:10:58:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:FC:8F:82:D7:71:98:A2:8D:98:40:BE:75:D5:BE:40:E2:89:CD
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9e:4f:7e:82:c8:33:c6:d2:93:f7:93:71:ff:01:fa:f0:71:
8a:f3:9f:b6:bb:98:97:af:95:84:5b:08:4f:7e:be:6a:88:b8:
c1:7f:ef:72:25:97:84:05:93:27:f3:9b:6a:22:6b:0c:af:ab:
00:30:82:9d:98:d7:4b:cf:3a:a5:1b:d1:cf:c5:db:b5:f2:b7:
2e:93:11:a7:66:b9:cd:03:8c:4b:a7:68:f6:e2:35:2a:d6:d7:
e5:d2:b4:ec:eb:40:3c:ad:6f:b3:49:3a:fe:f3:ed:68:01:dc:
fc:32:fc:a9:e6:29:83:d9:d0:dc:19:7d:59:1c:ff:75:6a:e2:
64:8b:9d:aa:f5:9f:e8:fa:39:61:59:b9:24:fc:fa:b8:38:4e:
b9:f1:19:36:6c:b5:a9:5f:8c:65:10:a7:8f:80:35:67:e0:d1:
6c:8b:85:0f:29:f3:84:28:88:9c:70:bd:5a:b8:d2:57:d6:ca:
f3:7d:99:29:06:ca:86:9a:d0:b0:52:e9:af:a9:6b:e8:aa:dd:
a8:b2:3b:bd:64:0f:94:47:4d:6a:b4:6e:03:33:d3:26:a7:84:
4b:9a:4b:e9:10:c9:23:3f:59:bf:52:88:66:4c:87:f4:1d:8e:
db:48:68:29:1a:5a:ac:ec:c0:f8:b8:20:8d:56:5b:de:43:3a:
7e:f1:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:43 2025 by rpki-client