Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: 7vxeWR7jpr7ZtA3egcyeoAYi+hMDo+UmdycpxfwuALI=
Subject key identifier: D1:5B:BD:76:31:1C:C0:48:49:A6:96:23:35:87:7F:57:D4:04:76:28
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 0194BBCDF4C4DF259EA6205961223FB5BEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 03CF
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: HUPj7t99Vik7tXOzGNeTWYKboaE.roa (hash: eK2aWky1Rv0YN39wuq/IIPctqDaziXaujwaNtYnTwmM=)
2: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: 4FnxWyxmHuazynKL0WDsR8kif7SHtnB2MYPds0wFWpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:c4:df:25:9e:a6:20:59:61:22:3f:b5:be:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=d15bbd76311cc04849a6962335877f57d4047628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:3b:12:b5:50:cd:4b:fa:e7:19:ab:a7:02:
f5:b4:75:cf:92:b0:c0:a2:77:5f:4c:eb:d9:40:6f:
37:ac:0d:a1:07:81:24:42:c9:33:ef:43:3b:45:59:
8e:7c:a3:ae:9a:d6:a8:0b:6e:12:07:dd:6a:98:d5:
c3:f0:b2:a9:0c:0a:e6:ab:4b:6f:64:b8:93:f4:b5:
fe:bc:91:e2:23:21:f6:30:42:b0:68:c8:4e:a6:fa:
20:3e:3e:d9:4a:3f:d7:37:bf:51:fb:2d:f7:b5:1b:
01:65:4a:ce:05:de:3d:3c:82:2d:83:14:b5:58:ac:
bc:ac:0b:74:e5:39:07:d6:b1:6a:87:ca:5e:05:51:
43:08:8f:93:64:57:fc:4d:36:1c:f5:72:55:60:5f:
cd:d9:c4:84:2d:12:b8:62:27:1b:46:5a:cd:d4:26:
18:17:ac:ab:b9:f6:48:c2:c9:60:c9:82:74:41:e0:
40:f3:5f:fe:cf:9f:b4:46:29:08:34:f7:a3:e3:83:
e4:30:c3:a6:b3:54:3d:d0:bb:df:06:17:0e:81:11:
96:0e:41:1b:b5:ae:91:f3:c8:38:b1:43:82:c6:cf:
83:09:69:3c:79:8b:07:75:cc:9f:1a:1b:fb:19:0f:
7e:9a:6c:70:91:51:fe:88:d8:6d:4a:25:aa:ef:d7:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:BD:76:31:1C:C0:48:49:A6:96:23:35:87:7F:57:D4:04:76:28
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d6:f1:e4:27:13:ce:56:1d:7e:f3:83:e7:d2:79:6a:1f:6f:
28:7b:c2:9b:df:9e:a8:c7:73:74:46:be:2c:72:ba:d0:6d:86:
87:6b:96:ee:d4:de:6b:d5:e3:74:dc:67:33:d5:ed:10:08:a2:
f3:10:78:e2:06:51:bb:e4:b8:9c:12:4d:16:fa:23:34:18:b9:
db:b4:a8:d5:2d:09:a2:1b:51:6b:24:e3:07:33:6c:97:44:0a:
2e:6d:ad:f8:a2:bd:cd:7b:25:6b:a6:48:13:b6:c3:97:59:56:
1a:3c:36:b0:33:0c:fa:9b:31:58:13:96:7b:94:b3:83:42:b1:
97:3c:13:aa:7a:66:aa:65:ad:bb:ed:aa:5a:c3:f6:4d:d1:a7:
be:cd:28:11:d2:51:eb:21:a1:84:cd:87:36:ac:c4:f9:f6:a2:
31:91:b0:df:37:9a:d0:14:bf:4d:9e:06:7b:35:11:de:27:a2:
f6:11:ef:96:ee:5b:85:31:48:71:ee:d7:51:68:61:a4:5b:db:
0b:2c:ae:5a:a8:32:7c:92:bf:ba:86:57:60:74:a2:79:6b:66:
97:c6:50:11:36:2a:f2:70:21:f0:49:49:db:14:8f:6c:2c:19:
cf:c2:73:86:6f:bb:5e:a9:a0:97:9a:e1:a1:5f:46:93:fd:be:
f3:68:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:59 2025 by rpki-client