Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: H5d2F/y8+0Xb94LfUyZNwqSxzIZ2/x5DVvdr+GCud00=
Subject key identifier: C2:9C:62:7A:14:A8:94:DD:C0:42:62:09:78:29:BB:07:19:D6:37:3D
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 0194BD855C91CE03A91D2E8BC41931648731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: GR8gVnr6yz01TTMM58c3w0MecaYvzhf5PjmLt9a/sUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5c:91:ce:03:a9:1d:2e:8b:c4:19:31:64:87:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=c29c627a14a894ddc04262097829bb0719d6373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:5e:a3:dc:5a:05:e7:82:72:f6:ad:17:5c:
e3:fc:74:db:fd:bd:82:95:4d:18:14:75:e4:fd:2c:
cb:c0:ab:13:ad:39:59:9b:88:99:2c:c9:e2:49:e7:
cd:3d:14:52:f5:f1:b6:1f:7b:dc:04:e9:2f:16:bb:
ed:38:4c:41:3e:da:f0:08:d9:80:b2:ef:e3:a0:69:
b0:b8:bf:a0:03:d9:32:08:28:c4:2a:79:6d:fa:9c:
04:9c:3b:31:f1:48:98:63:48:d2:5d:99:db:1d:0d:
16:52:d9:5f:2a:5e:50:ca:26:ea:db:d7:a5:3a:43:
9a:73:58:15:09:e7:07:6e:9a:20:19:10:6d:92:32:
e5:b1:2d:a0:34:73:b6:ef:98:15:85:40:67:56:7d:
70:6f:28:43:a6:ff:92:1f:53:81:b5:cd:c7:de:2f:
2b:6f:35:cf:d2:b8:35:7c:ff:25:26:67:f9:bb:fa:
1f:85:0d:ec:78:95:d8:c3:f6:eb:20:ab:12:e7:6d:
6f:bd:01:83:31:93:55:35:38:85:e4:0c:5f:c2:5a:
3e:fc:ce:cd:13:5c:7f:d3:b5:25:9f:12:37:65:2f:
17:2e:2d:b1:f7:9c:3d:5f:ee:00:51:90:36:74:de:
29:02:6d:04:2a:42:0b:10:7b:59:ce:40:a6:04:f7:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:62:7A:14:A8:94:DD:C0:42:62:09:78:29:BB:07:19:D6:37:3D
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:a5:17:b2:7c:0f:78:fe:7c:97:ed:41:ea:07:ed:5c:43:
61:07:bd:cb:8b:ec:f0:25:59:ac:46:8d:4e:6e:69:36:e3:78:
bb:06:7c:fb:01:98:68:2d:6f:b4:f6:52:98:18:c1:57:80:1b:
71:97:e5:9f:02:78:1f:96:17:b5:c6:1d:e0:3e:80:e9:0c:45:
80:c5:45:3f:d2:f6:e3:99:e5:3a:f7:86:c5:74:3c:ae:69:08:
cb:62:7e:17:02:2a:ec:64:28:be:e4:e6:1e:87:87:24:3c:dd:
dc:2a:90:14:a0:38:e9:4e:af:62:2d:11:ea:db:ca:5c:8f:53:
53:74:be:0a:e7:b6:ac:57:61:46:12:66:bc:0c:ec:4b:04:ca:
d0:e5:fd:b4:aa:1d:9c:ab:f7:f6:38:64:c6:4c:e5:b7:9c:60:
e9:02:26:dd:54:3c:57:47:65:4c:67:83:f2:f5:df:73:f8:08:
65:24:8c:4d:2d:49:20:78:4a:1e:80:75:19:c9:ef:a8:1e:8f:
ae:49:f7:fc:03:4f:94:cb:25:2a:98:76:05:70:29:ba:f2:20:
83:83:e6:c2:b4:5c:c3:32:df:eb:4a:ee:01:d8:71:10:e8:11:
04:b5:8e:3e:b9:93:46:c2:7c:c8:fe:aa:18:ce:6c:08:62:96:
0e:05:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:21 2025 by rpki-client