Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: AyGUOKLC8EYB2R0qsauZHVV3cHqO04w8H2IxPsavGXc=
Subject key identifier: 70:65:CC:5B:21:82:67:67:EB:8B:DE:9D:BE:F8:40:FB:B5:96:C7:3F
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 0194BBCEB7342FB015E2E66CFB3926D9D8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0BA1
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: Jj8Pw/JIxi5TblZMv5Xlpv2AFL47TIGNGImqwzW5tDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b7:34:2f:b0:15:e2:e6:6c:fb:39:26:d9:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=7065cc5b21826767eb8bde9dbef840fbb596c73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:03:97:aa:66:d5:98:8c:6d:7d:58:d1:14:
f0:75:ba:d9:13:36:cb:73:33:db:d8:b9:8c:d0:79:
92:26:63:b7:c7:f5:6e:2a:c4:26:14:e5:d6:f1:b7:
30:6a:bc:e5:39:1f:5b:c1:5f:f8:31:b4:b2:94:96:
cb:cd:eb:47:1b:57:95:81:25:f7:07:cf:bd:7d:3f:
4c:92:ab:e0:13:f9:04:7e:13:6e:72:4e:64:84:9c:
2c:f4:16:24:14:fd:01:61:17:5e:c7:d3:a4:a1:a5:
21:e7:0a:0f:5a:b3:ab:da:bc:c6:73:4a:4c:af:39:
f3:7c:8e:9b:5f:82:fd:9b:45:03:f2:f9:d5:3c:be:
78:2f:45:c2:11:ec:12:cf:99:66:45:7f:ca:7a:cd:
ab:f3:10:c3:af:74:7e:64:57:a1:9a:5e:8e:3f:8e:
dd:9f:6f:a7:a4:4b:0a:d8:5c:2c:9f:b3:e9:84:20:
8d:56:85:78:c7:b2:ed:57:b0:44:e6:ec:f4:ea:5f:
eb:33:2f:05:11:58:bb:72:5e:2e:b0:97:1b:7b:96:
db:d5:6d:5d:40:36:28:a5:af:98:f2:74:f7:d6:17:
d5:ba:eb:9b:3e:06:c1:66:c8:79:44:c6:52:55:be:
dd:5c:bc:4e:81:79:3a:87:40:36:73:a3:34:9c:f3:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:CC:5B:21:82:67:67:EB:8B:DE:9D:BE:F8:40:FB:B5:96:C7:3F
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1d:ad:a4:8c:ec:89:e5:72:eb:2e:c0:9a:35:fb:37:ba:46:
34:91:62:e3:57:de:53:13:3b:8b:05:a5:70:d2:d3:3a:40:50:
d8:6e:5a:62:d8:97:df:22:56:c3:b4:26:3a:0a:7a:13:4d:0e:
c3:85:b7:b4:f2:25:29:c4:f4:d8:25:ee:e2:a4:fb:61:a7:d6:
de:02:d8:da:a3:58:2f:fe:ee:db:ac:55:8a:e9:61:6c:97:e4:
db:11:b3:3f:ef:4e:77:42:e9:3a:44:c0:99:fc:b8:49:96:0c:
9e:d1:7e:41:75:6d:9b:0c:bd:6e:75:dd:41:64:70:e9:77:55:
ad:e8:d0:ca:35:06:24:6c:ec:ac:16:75:61:77:60:18:5c:78:
24:16:d7:58:78:6d:05:c7:3c:b3:5e:ef:81:9f:f2:58:3d:d5:
a9:99:2d:6d:a3:4e:e6:0f:a9:74:4c:c8:2b:9b:6e:67:e3:c0:
03:73:fd:8e:d3:f3:80:19:50:8e:39:ff:eb:1d:d9:99:8f:f6:
8f:94:76:e9:3f:f2:37:c2:31:26:c9:40:c4:ef:37:27:98:bc:
5d:db:2f:0e:5e:b2:01:70:01:9b:74:98:8a:b9:dd:7d:5c:8b:
bf:ff:80:5f:0f:65:35:e5:79:0e:2d:28:4a:b6:ee:ac:1a:2c:
69:0b:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:45 2025 by rpki-client