Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier: zMG2SYEmV20bV7TzPw5CnFGkTtAEVG9SbCG58B6QLoY=
Subject key identifier: 34:7D:20:4A:DB:9D:5D:D4:C5:FB:6E:A4:25:A0:CC:A7:52:79:B8:E1
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 0194BC3C4EFB44A758B49A7038C7AE85B43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number: 1447
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: 9+2lEhjIg845QZfFkBJGDCFkRGfaTN7m046rMPcgZ8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:fb:44:a7:58:b4:9a:70:38:c7:ae:85:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=347d204adb9d5dd4c5fb6ea425a0cca75279b8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:c6:b0:cb:be:b4:22:a2:e7:a7:e0:96:25:
e0:d0:1a:34:5c:2e:d2:2d:f3:e0:b3:d2:97:d6:14:
c9:ef:4f:88:af:0b:6e:41:c7:0b:45:a2:51:d5:77:
ae:1b:45:1d:29:25:8c:c0:9c:e5:02:ae:e4:9a:4d:
84:47:71:c8:81:10:f3:39:6d:73:ab:1d:b8:d1:b2:
d5:33:60:c2:5a:22:c5:69:3d:f5:40:10:41:9a:20:
fb:ef:97:47:a1:6b:33:34:48:e5:ff:d5:68:a8:d8:
cb:f0:93:16:b3:d7:1e:92:68:f6:d8:46:01:52:90:
4c:1e:5d:8c:c0:57:57:2d:62:ea:7a:07:2a:5a:aa:
2b:33:4b:c7:bd:e6:23:58:2d:8c:46:05:cc:bb:a5:
e7:47:bb:4e:49:31:37:cc:b4:82:ad:c2:c3:1c:57:
c8:31:2d:5b:9e:a9:48:58:00:df:4b:59:8d:01:8d:
57:e4:13:c1:e1:2f:03:86:21:cc:ac:5f:53:05:f0:
a7:48:0e:c8:ee:db:f5:5e:de:ac:8a:27:ad:aa:9d:
dc:c3:4c:6c:ed:b8:42:cf:ae:51:90:ff:be:06:4d:
c9:b5:13:6a:63:8d:8b:2d:67:a7:aa:7a:29:51:2e:
72:27:8c:ce:95:80:c1:d1:94:d4:6e:05:7f:7d:82:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:20:4A:DB:9D:5D:D4:C5:FB:6E:A4:25:A0:CC:A7:52:79:B8:E1
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:fa:ea:20:29:b7:0d:e3:a6:46:e4:32:cb:c2:9b:56:c6:
7e:99:3b:f0:0c:a1:b2:b9:2b:15:3b:65:4a:0a:9f:8e:11:04:
4c:bf:90:48:37:34:71:7e:a8:8e:0d:52:5c:c3:5d:95:85:59:
82:d9:6e:38:58:4b:29:c5:02:f7:de:43:00:05:7f:c3:69:54:
62:56:fd:9d:f8:44:90:43:d8:ce:e5:e0:a9:5a:8f:42:07:d1:
85:48:c8:bf:cd:e3:67:15:c6:87:f1:c4:99:49:f9:06:76:2b:
70:b9:e6:5c:a5:dc:0d:fd:3a:35:80:45:08:51:52:05:66:92:
1f:06:e1:39:39:6d:df:99:a8:d8:5e:77:8e:d4:0d:e8:fd:8b:
1e:90:04:8a:4f:ec:55:42:12:69:32:77:ea:86:fc:b6:92:ad:
3a:92:24:0f:dc:7d:51:1e:40:98:e3:5a:4a:1d:69:0b:85:f3:
cd:71:a0:8a:fc:d7:2e:48:35:f3:16:01:48:68:47:69:90:98:
5f:75:f2:8d:85:7d:c0:dd:be:15:90:db:19:f1:e0:c6:73:d5:
4f:85:da:bd:cf:d0:2d:34:43:f9:21:b9:59:e0:35:9a:fc:2a:
9e:d8:ea:3d:65:03:ea:78:f0:22:46:0f:44:43:cc:69:e6:ab:
cf:44:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:18 2025 by rpki-client