Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: NEUK+rSAD20VRhs28hcEiUE8W3DOhyQqwf8XyNSQgvA=
Subject key identifier: 4C:35:46:63:00:79:79:AD:61:91:A0:5C:E1:B5:7E:B1:83:F3:92:89
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 0194BC3C23399872E470676CBFCC2ADDC5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 024E
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (hash: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: 6XMRwcMvhLEWTHXFcIUiGW5W2gIZCZvLxQ+YioRcLy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:39:98:72:e4:70:67:6c:bf:cc:2a:dd:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=4c354663007979ad6191a05ce1b57eb183f39289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:87:a2:44:81:ba:88:04:f7:18:ee:c6:64:
01:ac:49:38:f4:90:1d:9a:b5:6c:59:73:63:97:ff:
ba:ce:7b:cd:ed:97:f8:eb:d8:84:3a:7c:05:aa:5c:
99:ad:26:ac:ca:62:88:88:3a:1a:cf:e2:a3:cd:65:
91:07:82:38:51:08:a6:4d:f6:43:9b:12:b2:58:39:
b6:48:c8:56:06:33:97:f8:cb:1a:22:df:85:d7:d7:
4b:9c:f3:5e:97:28:38:f7:b0:6a:5a:e5:59:14:62:
58:b1:aa:2f:77:cb:96:ae:55:5d:ac:b8:82:cb:b4:
2e:31:d4:1a:e6:57:a6:15:87:ed:67:10:74:0b:83:
d8:57:58:66:11:81:1a:b4:82:24:d9:72:60:90:15:
43:71:f9:ab:10:68:67:c1:d8:76:39:92:f4:db:77:
69:24:a8:3b:e7:d2:10:00:12:a0:1c:54:52:7d:54:
eb:ac:ec:11:8c:14:aa:bc:ba:01:c3:b4:8a:2d:45:
5d:dc:42:84:50:b9:f9:d7:c7:0a:d6:9e:2c:80:b0:
73:fa:65:97:07:85:ed:e5:01:35:ef:a4:bf:ef:50:
7b:b0:f1:b7:80:34:39:6a:9f:42:43:b3:ba:4a:67:
47:47:bd:bd:3a:a3:ee:54:87:89:53:d1:f6:3b:0e:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:46:63:00:79:79:AD:61:91:A0:5C:E1:B5:7E:B1:83:F3:92:89
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2e:de:b1:ba:a0:27:50:98:0d:ea:ec:c7:38:58:f4:c2:d1:
e6:cd:f5:34:22:cb:b2:fd:86:3e:49:23:5b:99:99:54:86:34:
bf:fa:0c:93:da:64:ea:43:e4:39:f2:25:ca:42:3a:43:e1:ac:
a5:01:88:cd:08:d6:db:b8:d1:fb:a3:5e:00:eb:f1:f3:75:c2:
45:f0:4d:8a:53:b9:24:ab:0c:4c:b7:8d:8e:3a:b0:6c:c2:4f:
46:ec:48:e8:29:2c:31:34:9a:4e:3a:c3:51:c6:eb:ef:8d:a4:
a9:62:b3:f7:05:12:4d:fb:6c:3f:d5:d0:8b:51:e7:20:c9:a6:
1c:51:f8:11:63:0b:55:fa:a9:60:af:c0:4f:8b:98:90:c8:94:
0a:f5:bc:4a:f2:e6:7c:92:40:34:0f:45:66:25:8d:19:96:41:
87:41:da:65:fa:d5:89:4d:41:a8:00:87:67:64:0c:8d:ae:e4:
99:5d:c8:f9:34:06:f6:c3:f8:b9:cd:77:6c:a1:7f:33:9b:41:
de:42:51:7d:89:bc:f0:82:1e:3f:20:d0:6f:cd:ac:40:0d:49:
9e:51:66:d9:cf:e1:08:b6:0e:3c:2a:72:2e:a1:58:e5:84:a7:
10:6d:f4:32:ee:11:c5:34:00:2f:d6:8d:99:84:e2:af:62:7a:
ea:97:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:14 2025 by rpki-client