Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
File: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json)
Hash identifier: baBOm4dwi66SnNko79X7n/VJBdBSNl+os6XIjSnPhrI=
Subject key identifier: 42:B7:21:0E:3E:9B:A4:6E:4E:FD:D9:3F:15:C3:8E:7E:B9:75:2A:E3
Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
Certificate issuer: /CN=9e193d6f48067ffb8732cc432697542313dc6783
Certificate serial: 0194BBCE1306532D718A0AB20D2532BA9C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
Manifest number: 8E
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: R2xkcaIuSObqFTe/baoO1F5FOL6RLeCXgHYlacoZsJ8=)
2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:13:06:53:2d:71:8a:0a:b2:0d:25:32:ba:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=42b7210e3e9ba46e4efdd93f15c38e7eb9752ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:5f:3c:94:2a:55:76:ae:97:e5:22:b7:94:
1d:9a:5b:65:99:ff:4d:06:4d:70:f8:1d:09:3f:4b:
48:f2:00:77:df:4c:43:f7:42:d9:a7:bd:5b:12:b3:
ce:37:eb:c5:29:16:d0:bf:36:f3:9e:f7:2f:57:56:
78:6c:9b:cd:20:43:3d:48:60:80:fc:89:a0:34:e1:
fd:b8:08:40:93:ae:3a:ef:1e:8d:40:e4:9d:e2:de:
b2:e5:a2:ff:76:cb:e4:13:75:ff:f9:cd:80:ef:6e:
ce:54:ad:5f:77:be:d5:5b:6e:b8:be:1b:ed:67:a1:
6e:06:bb:ce:6d:46:91:9a:4e:1a:e3:38:18:fc:f6:
37:7d:f9:8f:02:e3:27:4a:34:e0:b1:9e:b4:1f:05:
9e:64:da:29:b7:4d:34:39:a9:84:a4:e3:3c:8c:83:
ec:ca:9a:fd:d9:d7:c0:71:0f:8b:3f:7d:31:b8:55:
bb:28:59:bf:b3:bf:2d:48:2a:89:95:4d:65:f3:b2:
b7:73:a6:06:09:cf:43:7b:0a:09:a3:d7:dc:32:76:
84:44:b6:2a:d7:e3:a2:b4:98:c5:f4:2f:4b:19:85:
e7:09:75:5f:c2:4d:45:28:bc:b6:9c:8c:c7:be:f6:
16:49:95:4e:03:69:dd:5d:a1:ae:5f:b0:99:7f:83:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B7:21:0E:3E:9B:A4:6E:4E:FD:D9:3F:15:C3:8E:7E:B9:75:2A:E3
X509v3 Authority Key Identifier:
keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:ca:7e:b8:3a:ca:14:f7:4c:f6:f3:50:82:de:3a:e9:a1:
8d:7a:fc:b4:4d:7b:88:4b:5a:0a:bd:30:2d:e4:35:0a:bc:f5:
4e:06:25:de:a8:69:70:83:09:e3:e3:72:55:d8:9a:46:3d:ba:
2c:77:f7:b9:dd:48:97:c1:25:5d:fb:30:42:06:9b:30:19:bf:
58:90:10:9d:94:1a:11:80:d3:9e:73:20:52:9b:91:7a:10:44:
e0:86:cc:12:30:06:c8:cd:21:52:ed:3e:db:66:6b:23:8a:60:
22:0a:8f:90:55:a8:d6:2d:74:3d:c1:97:e9:81:b3:a5:88:36:
bd:75:38:df:c3:57:0f:87:63:49:05:c9:f6:ee:18:cb:d7:5e:
86:9c:92:28:69:6a:07:bc:36:45:ee:ff:9b:43:6d:80:7c:1f:
2c:d6:c5:a6:63:3c:6a:a9:cf:70:9a:3e:19:0e:d0:ba:28:ce:
76:a6:a1:bb:71:e0:55:39:cf:19:83:ad:2b:c2:7d:32:21:4b:
f4:fc:64:f8:b0:34:62:c8:07:a9:1a:1f:e5:b9:d5:e7:3b:e1:
8f:b0:3f:9c:aa:29:72:fd:b2:af:c6:5d:f3:61:7c:c9:b1:da:
ab:59:df:b3:29:84:37:99:ef:d1:ce:9f:1d:20:78:a1:5a:0b:
a6:85:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:48 2025 by rpki-client