Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: +QBSfVGHq38zhGx+uTEKkS2fhQHxDft7AY7+MoOGfhs=
Subject key identifier: 86:E5:6E:00:49:32:C2:37:6D:DC:D5:B2:85:83:30:89:2B:FD:CC:53
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0194BD4E79922CF0D6CBD6A18EAAD8F6DC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 1D
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: XxkGyc36/auoHjw/1y5X+UmAlS+//Zd4O1iDFkuypi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:92:2c:f0:d6:cb:d6:a1:8e:aa:d8:f6:dc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=86e56e004932c2376ddcd5b2858330892bfdcc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:d0:d7:38:7a:21:50:9d:d3:e2:66:b7:11:
e5:d6:f2:64:22:66:15:5e:67:8a:b5:18:4f:d7:f2:
20:e4:69:43:0e:ee:6a:a6:7c:21:89:e1:58:0f:0e:
71:0b:f0:28:82:07:c2:89:a4:ec:dd:00:71:d4:00:
ba:2a:d5:82:b9:dd:6b:d9:81:9c:fd:57:99:dd:9f:
89:d8:d0:19:95:7f:02:34:6d:e3:14:3e:4e:20:66:
35:dd:5e:f8:0f:e2:98:63:b6:e0:1b:5a:25:c5:9d:
35:55:49:09:dd:90:74:ae:a1:ae:4f:f9:af:63:6e:
90:f5:05:73:e2:b1:4a:42:f5:58:38:e6:37:6f:01:
04:32:eb:60:b3:49:28:b9:ca:c4:81:db:a7:d4:53:
7c:fa:84:30:ae:f9:c6:40:33:14:b0:62:ce:72:60:
f0:29:ac:19:a7:42:2e:ec:43:fa:2c:a8:f4:07:d5:
57:30:2f:2d:6c:1c:3c:0f:8b:c3:41:a6:5d:d4:22:
4e:a4:23:2e:1d:3f:38:f1:96:55:30:c8:78:5b:ee:
a2:77:95:0b:74:51:b9:9c:f2:95:05:36:67:df:fa:
98:60:f8:d3:f1:ec:e6:ff:50:6c:46:ca:ab:83:7a:
9f:64:ef:f9:aa:39:0a:5d:ce:4c:8a:df:6f:14:f5:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:6E:00:49:32:C2:37:6D:DC:D5:B2:85:83:30:89:2B:FD:CC:53
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:97:e7:bb:5d:6d:33:e8:09:80:b4:3e:6b:33:95:61:9b:03:
a3:bc:89:01:e4:49:62:bf:7a:39:ba:7d:d1:39:59:3c:97:cf:
83:f8:f1:e1:f4:8a:bb:09:63:a1:d8:04:f3:fe:25:07:49:33:
ae:aa:9f:cc:97:56:91:75:29:38:87:53:04:1e:78:40:db:03:
26:82:31:f0:7f:0c:46:51:d8:da:3f:e2:1d:b1:03:0d:01:cc:
a1:e9:7c:b3:db:2d:ec:f0:39:a9:22:5a:4d:7a:62:26:84:52:
85:aa:10:f3:83:e4:7c:39:12:84:10:3b:9f:64:d6:ac:a0:13:
ae:78:f1:5b:9c:46:c5:e1:c9:7f:bd:3d:4a:e0:c8:15:3b:48:
cb:bd:2c:59:26:56:cb:a9:52:98:dc:d8:b6:17:7f:e9:04:b4:
eb:f9:64:4f:bd:b9:10:2d:67:57:67:61:c6:22:f9:bf:da:ec:
42:1f:e6:52:f4:48:44:58:c6:12:3e:16:79:17:9b:8e:b3:a3:
71:c0:50:8a:ad:54:3c:4e:a3:12:60:ff:2d:6c:6b:4d:51:71:
9e:d1:85:ac:b2:34:8f:e1:64:fc:d2:ff:22:73:00:63:94:f7:
dd:7c:11:0a:67:d5:95:c8:c2:08:90:64:08:f7:ec:f3:a9:7a:
83:a4:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:52 2025 by rpki-client