Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: 23OssuHQtA8LhU7T4xwahV3hXv9IkfMXeGG2SQjUdZ8=
Subject key identifier: 82:25:08:A4:D3:C2:30:CE:B7:71:A1:BD:94:A4:87:59:06:E8:F2:C4
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 0194BCA96C31AA693DFB3301D10575F151D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0AC6
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: 8AfGM8FvB07cuMJogrQK41o+1hxKZ3QmmKRzGsyWWtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6c:31:aa:69:3d:fb:33:01:d1:05:75:f1:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=822508a4d3c230ceb771a1bd94a4875906e8f2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:54:72:77:2a:5a:7c:4d:4e:4b:43:02:20:
a0:ce:93:1a:cf:31:5a:f7:ac:ab:42:7b:1f:82:3a:
ff:20:2a:b7:a0:c3:e9:0c:7f:69:e5:b0:50:99:3d:
7f:ee:f1:43:b0:7b:ad:16:52:1e:fa:c5:bb:39:c9:
d2:88:5f:6b:d1:7e:ca:c3:7c:fa:1c:75:30:db:b3:
f5:5e:82:da:7d:a5:c9:5d:28:a0:4c:d0:eb:ea:08:
17:01:b1:96:a2:f6:70:ad:61:29:c2:4d:89:49:4c:
54:a4:94:5c:b0:0a:88:e3:cd:23:eb:4e:30:93:e8:
a4:46:06:22:bb:af:d7:fb:5d:e0:80:e1:36:64:e8:
be:07:9f:29:3d:2d:38:f4:9e:eb:c0:b9:ee:31:cd:
20:ff:99:b2:49:8a:d8:ba:35:91:f8:06:11:fd:83:
09:e6:de:18:80:ed:f3:b3:57:d2:d0:60:ff:c0:1f:
4b:e7:13:48:3f:11:57:3b:5c:bf:4d:32:ce:ca:b4:
1b:d4:d7:b3:37:d3:3a:17:83:10:21:b2:35:66:72:
3b:af:d5:e3:d0:0a:27:b1:56:06:59:15:58:21:e7:
76:d0:e4:e8:4a:b9:5e:fd:48:3b:27:9e:19:d0:2c:
5c:6e:a4:fd:09:df:82:a9:9d:9c:e4:50:0b:48:8a:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:08:A4:D3:C2:30:CE:B7:71:A1:BD:94:A4:87:59:06:E8:F2:C4
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:80:94:45:0d:ca:2a:4c:8a:3c:48:74:ad:d9:ac:5a:c9:bd:
f5:7c:6d:59:18:0f:ce:33:da:5e:60:ff:2a:11:81:7e:c5:cd:
c8:cd:28:6f:9c:70:7c:d8:8d:3c:90:fb:6b:8f:bd:ed:f3:e2:
9e:83:66:6e:96:fe:25:dd:5e:90:36:02:e1:42:36:44:7a:2a:
1c:2b:d8:99:fe:1e:69:a5:85:42:d9:2f:6f:12:d4:6c:19:0e:
39:c2:7a:f7:86:a2:a5:31:1e:7e:34:3e:b9:8f:46:d9:8e:de:
20:71:ab:4e:2b:7d:07:68:d0:d8:fc:08:bd:b1:82:6e:04:35:
51:3c:59:e8:a9:1e:02:12:63:de:4d:8b:0a:80:6a:c1:5d:e4:
7f:50:fe:c3:d3:e4:11:25:9e:58:12:9e:e3:c1:f4:b0:b1:55:
83:db:1a:36:f2:19:7f:85:38:7c:3a:18:79:0d:0f:e1:65:c4:
1a:73:56:6d:1b:67:20:0a:9a:96:3d:49:2e:87:fe:21:61:71:
86:f3:6e:53:c5:c8:0e:9f:a3:6a:f0:17:32:c6:02:84:a7:f9:
f7:0a:76:c4:5a:87:84:85:0a:8e:62:8d:55:8a:3b:48:6e:1b:
ca:dc:47:42:76:15:75:a2:fe:f4:09:13:c8:97:46:78:8a:ec:
ff:bf:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:49 2025 by rpki-client