Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File: N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier: KisPv7Jpw0L4MfP4twjzh/tEunyuBkgFDuWR5RRaVgU=
Subject key identifier: 54:98:56:D7:FF:E3:39:F9:BC:FD:47:76:F8:BD:AE:D4:17:22:89:50
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 0194BD4E84B1C39893D98122CC3218BBB262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number: 0316
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (hash: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=)
2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: uiuuuD9rzsGLMPYOTqWpqVdJg19L8/Cs4GQC8i3U+A0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:b1:c3:98:93:d9:81:22:cc:32:18:bb:b2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=549856d7ffe339f9bcfd4776f8bdaed417228950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:0f:54:c4:7a:d6:33:24:3c:f1:77:4e:74:
c9:af:86:48:ce:f9:1b:13:1f:71:aa:da:2f:b7:8c:
5d:4f:cf:84:46:9c:4f:61:ec:e8:82:40:f5:0e:f1:
0b:53:9d:46:0b:a3:ab:f6:e3:01:c1:3d:b3:7e:9d:
f2:33:21:1a:a1:90:b3:eb:74:82:55:18:79:cb:e6:
df:98:75:22:de:48:f9:e3:7e:ab:b4:f3:47:07:03:
7d:48:c7:92:bc:db:dc:9d:54:2c:1b:07:56:5e:e0:
6a:ba:e2:b5:dc:0c:02:4a:88:6b:23:40:04:d2:66:
78:82:f4:e6:5e:f5:af:43:a0:e7:17:bc:16:52:99:
19:8a:4b:56:48:1e:7d:2b:17:c5:c5:dc:a6:de:7a:
02:b3:0c:fd:25:c0:ff:db:48:dd:f9:ea:18:ee:1a:
92:54:cc:49:9b:f5:d8:f6:15:4c:d2:76:6e:9a:aa:
20:05:47:a1:99:3d:ca:0b:dd:94:a2:7c:e1:6c:b5:
17:8a:89:52:70:9d:d3:26:3c:4d:15:ae:05:a4:54:
e9:b1:bf:99:09:dc:ad:28:6b:4f:ce:1d:07:08:f5:
27:bd:24:99:2f:17:e3:b0:fa:c5:3e:df:e9:3a:bb:
98:56:12:d3:27:ef:9e:66:f8:f8:f9:f1:96:14:ed:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:56:D7:FF:E3:39:F9:BC:FD:47:76:F8:BD:AE:D4:17:22:89:50
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:9a:39:df:6a:69:4c:8e:04:26:65:e2:16:47:01:e3:f1:
83:03:09:5c:7b:4a:6b:c4:b2:53:2c:2c:b2:ed:75:a6:9a:77:
8c:e3:8b:0c:b3:81:93:b6:9c:20:11:20:48:09:88:09:c8:42:
14:94:f2:41:cb:3f:e6:26:9e:61:24:0c:9e:8d:31:52:a8:3e:
1c:e0:b9:5b:09:f8:df:17:20:18:0d:60:0d:73:28:4e:39:03:
1e:11:b4:91:cd:85:b3:0d:11:8a:6d:98:c2:33:d4:31:9c:7f:
59:f8:c4:05:c2:7c:15:95:fd:01:8e:cf:a5:50:6e:ec:bc:3b:
72:84:5a:a5:c5:d1:82:63:62:4e:d5:1c:9e:c1:86:31:a1:24:
70:40:52:69:2c:67:1a:c2:19:14:a0:69:2a:57:12:5d:69:9b:
5b:16:1f:80:c6:c8:ee:12:e9:9b:09:67:80:db:bd:36:77:6c:
94:09:cf:25:2a:cb:ec:ee:25:16:1d:69:5a:55:69:86:e2:01:
22:d3:0e:d0:b2:66:f5:9d:e0:d1:2d:04:b1:6e:3f:3c:a6:c7:
6e:ef:31:58:1c:1b:cc:0a:51:b0:17:7f:ee:62:f8:f1:bb:d0:
2b:14:1e:fe:b1:89:22:7a:2a:00:56:2d:47:13:9e:8c:92:f3:
63:40:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:02 2025 by rpki-client