Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: Syecl8Be6HeQKQkWzJcCF1IDQg+nYiRUfPBe2PbaRiM=
Subject key identifier: 99:01:3C:B6:E3:39:32:42:8A:B3:AF:B7:BF:78:12:97:98:52:19:B0
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0194BD8571596D58733DF876C923E5CF0C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0A7E
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: ORqIMNGYuwFuClCLVbQUT+zaBzcaOVxTPwVmjf20W2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:71:59:6d:58:73:3d:f8:76:c9:23:e5:cf:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=99013cb6e33932428ab3afb7bf781297985219b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:cb:f7:f0:b0:7d:de:d4:a5:40:bb:a0:d9:
dc:0a:a2:5c:e7:56:a8:ab:c9:75:29:1f:87:a1:4a:
f9:0b:3d:e0:a0:cc:df:74:89:19:38:a6:36:3a:d4:
8e:8a:8f:e7:e0:9d:f1:2f:76:9a:a5:42:00:43:7e:
79:e6:3c:bb:48:d5:80:47:5d:cd:d9:bd:67:53:3a:
68:1c:d6:2a:04:ad:a3:13:c2:51:b3:3d:a9:0c:d2:
2e:d7:ef:94:9b:59:f3:00:8f:45:0e:f7:4a:5d:ea:
1f:5a:ea:5b:06:c3:e5:a3:3a:08:8f:aa:b2:9a:7b:
24:cc:33:2b:96:e0:e9:08:c2:ff:8b:1c:1f:ab:ad:
61:5e:44:1c:99:54:4b:a7:b5:da:7c:af:3c:64:90:
67:0f:c4:93:82:e5:95:ef:f1:52:52:b6:b8:0d:de:
ba:62:3f:a2:35:67:6f:42:bc:54:4e:9e:52:fe:eb:
07:ab:82:5e:ac:15:1a:27:10:81:70:65:82:ff:2a:
82:6b:06:ce:14:06:f6:f8:83:fb:4f:49:90:00:81:
68:7d:c4:0e:2e:df:14:9c:f1:5c:54:7a:5f:12:ad:
43:37:75:11:e6:59:69:91:4b:5e:e3:ff:57:ef:09:
45:a9:33:b8:e1:1d:86:38:a4:78:32:bc:c6:bf:ac:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:01:3C:B6:E3:39:32:42:8A:B3:AF:B7:BF:78:12:97:98:52:19:B0
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5f:33:75:ca:ba:38:9e:45:af:dd:f6:1e:b5:84:4d:ef:a7:
9a:59:1b:dd:81:d6:6a:3c:43:0d:e9:04:27:92:94:10:d3:2f:
c5:43:10:aa:ea:e8:9b:d7:56:2f:6f:fa:da:16:a9:a2:25:29:
7c:cc:5d:54:a8:a7:c8:a2:19:7e:e9:fc:fb:51:0c:71:e0:8f:
2a:13:af:9f:e8:2c:8c:f7:6e:84:50:49:cf:32:6f:f3:41:c2:
4a:a0:5f:fb:ca:25:bb:df:93:35:31:6c:20:9f:e5:a1:9e:c3:
df:42:fd:ea:20:7d:f4:a0:54:63:27:1d:84:fe:b1:90:bc:20:
aa:0d:48:0d:d2:0e:c6:e6:d8:08:fb:9e:12:39:89:11:cc:b5:
46:12:c1:f2:d0:8f:d6:97:3e:94:2c:19:d4:58:66:0c:f5:2b:
b1:d1:19:18:c4:c5:26:24:f5:ea:51:8e:b3:29:6c:06:51:11:
54:a9:f6:e2:23:06:2d:d8:f3:42:22:c3:41:5a:b9:d9:2c:4b:
4b:1a:8b:83:f5:d7:13:65:c7:9e:dc:a3:0f:5a:ae:fa:28:70:
dc:b5:2c:a9:9d:2a:b6:c5:b6:73:31:10:a1:5b:be:76:bd:ec:
9f:0f:79:71:8e:15:e6:77:fb:66:3c:f4:47:84:bd:dd:c7:ab:
5a:5c:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:38 2025 by rpki-client