Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: Yu9XnxOnCkjuHHjHt9kipEMUc4D/uXeliVUwt3SZhvo=
Subject key identifier: E7:79:5E:9B:27:34:C5:31:ED:CC:DC:6C:E1:73:F4:BD:41:8E:C8:A8
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 0194BC72FFB83AF7E41D6F005273D1901068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 104C
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: jXh+lY7D14kN+UZiyAeGa3s26JJHZk1FbQfCjh2Jgg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:b8:3a:f7:e4:1d:6f:00:52:73:d1:90:10:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=e7795e9b2734c531edccdc6ce173f4bd418ec8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:c2:35:e0:de:4d:6a:51:11:22:27:d1:b1:
e6:2e:01:ed:3d:2a:17:73:e6:27:41:b9:e9:f5:14:
09:c1:3d:33:53:10:0e:63:71:f1:49:be:fd:c8:8c:
9e:74:7b:6c:b0:08:b7:d8:9c:15:1c:8b:08:17:06:
20:f9:d6:78:94:8e:42:0f:cb:04:d5:c4:ee:9f:97:
94:b2:3f:97:15:c9:dd:3d:6e:4c:f3:aa:1f:7a:87:
1b:9d:c3:97:97:51:8d:60:ca:95:fc:93:fe:24:d4:
15:01:b4:f4:af:64:61:e8:b3:54:51:4d:7d:89:1e:
b3:d6:d7:b5:90:a2:64:e9:71:b4:2d:d3:6e:a4:47:
50:57:7a:f0:9f:fd:cb:28:ad:e3:1a:b1:58:03:04:
a0:7a:d4:11:06:6f:4b:eb:b1:04:22:1f:42:6f:8a:
d3:70:83:a9:07:34:89:53:12:8d:a2:1a:42:8b:c2:
9b:5d:3b:b4:c6:39:a6:35:24:48:60:83:0b:e0:21:
86:ea:77:cf:16:82:5d:87:41:c8:22:3e:c8:2d:6f:
70:5f:6c:36:85:79:f7:e9:46:03:dc:eb:fd:6d:ad:
07:90:c1:c6:b2:6a:42:0e:0c:7e:3c:c3:73:8a:62:
1f:c8:54:64:40:0c:9d:9b:01:b2:b9:42:0f:40:ab:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:5E:9B:27:34:C5:31:ED:CC:DC:6C:E1:73:F4:BD:41:8E:C8:A8
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:17:a5:d6:56:e2:5f:0a:be:c9:ea:28:3b:1e:ab:26:4f:
ae:90:ed:19:56:32:e5:6e:b3:2a:24:29:b9:30:2d:e4:2c:dc:
aa:aa:8e:a9:68:dc:d0:c6:8b:38:7f:5c:3f:fa:cd:bc:d9:16:
25:46:da:49:e1:36:a8:4a:00:2e:13:c1:99:b3:ca:f6:66:15:
c8:e6:1c:88:1d:80:1e:3e:47:dc:35:c0:b9:c4:23:2a:8b:fb:
27:a6:2a:bc:da:a5:75:ad:8e:c2:3d:63:fb:c1:38:59:c9:33:
e1:f1:9e:04:7e:93:1a:df:5f:29:fb:d6:1a:77:67:96:50:34:
4e:63:87:e6:92:ab:26:42:d9:cf:0e:d2:e8:b1:c8:d9:e2:59:
e2:bc:69:43:bd:72:51:05:ca:8f:ce:23:7d:82:93:d0:51:24:
47:e6:f6:ad:ca:a3:46:57:08:a8:90:41:bf:44:4b:1f:51:56:
ee:a0:3a:dd:81:a9:8f:b5:3f:0f:94:99:0c:b6:5d:48:b4:22:
67:a4:b4:9a:dc:6c:d5:92:5c:9c:e4:7e:1f:11:df:6c:94:4a:
54:5b:bc:ed:41:6b:ed:a2:85:b6:fa:b3:7a:17:17:71:c1:1f:
a9:e7:6d:94:98:94:17:6d:8e:b7:cc:42:f9:bf:ae:a2:51:58:
20:db:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:46 2025 by rpki-client