Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: kdtiGaRIeCqgu/LDkBO1gQO9L7kaRgUkHWdUWUCLSMU=
Subject key identifier: 1F:5B:43:9D:7B:97:F9:6E:4D:64:69:04:75:DF:2F:F9:5B:EF:D2:F5
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 0194BD85385614D07FEF29395B8D74055516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: Ls9rofPTJCcld4WBA1du86FlcuNtv14+Zliqnsww/Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:56:14:d0:7f:ef:29:39:5b:8d:74:05:55:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=1f5b439d7b97f96e4d64690475df2ff95befd2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:44:60:07:f6:75:3b:c8:e3:d4:8f:cf:e5:
dd:6b:10:87:5d:f7:f2:6b:07:b4:7c:1b:2c:49:31:
17:8c:63:95:44:22:58:a8:3a:ae:44:c7:d0:b7:54:
eb:34:8c:60:30:b2:11:6a:00:ed:26:e9:54:89:f2:
0e:79:2c:bb:7d:eb:bc:3d:9d:80:19:33:72:d0:9c:
3e:27:08:8f:a1:56:67:b5:3e:53:5b:f8:40:ea:4e:
d1:96:e3:23:17:9c:30:ad:db:46:88:e5:bb:68:a5:
9a:fb:9a:04:75:fe:db:13:e8:3b:fc:b0:04:a5:2c:
41:08:cb:6a:37:0e:19:fc:05:c6:d8:70:c6:07:25:
45:fc:ea:fd:bb:a6:66:26:3f:b8:0b:cb:5a:68:c6:
f5:94:a0:2e:6f:49:97:a2:09:3e:ca:1c:1f:49:55:
10:cd:48:e1:2e:0a:31:52:c1:f2:05:9e:57:a2:23:
3a:99:84:58:95:0c:2d:18:fa:07:6b:66:c3:96:bb:
80:0a:75:45:05:a3:32:22:79:c9:6b:10:6e:e9:7e:
e1:92:24:55:05:5e:34:eb:dd:3b:f9:f0:53:8d:99:
6e:1a:79:79:1d:b4:84:46:af:43:7b:2f:0c:f6:36:
6c:8b:46:e2:1e:97:fb:db:bc:b7:ea:dd:4d:f3:7a:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:43:9D:7B:97:F9:6E:4D:64:69:04:75:DF:2F:F9:5B:EF:D2:F5
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fb:0e:9e:c1:67:9c:76:51:7c:0e:a9:b5:b2:05:09:e9:2f:
ae:73:d7:c5:60:bf:a3:b7:c7:cb:97:f3:42:91:a8:14:af:cc:
d2:f0:e4:a8:96:3f:24:5d:01:00:57:9b:8e:54:64:84:3a:48:
ef:cd:c9:70:60:8c:3b:9f:ae:5a:ec:04:7c:f3:c0:21:6f:ae:
93:84:a4:f6:08:66:b4:98:15:71:d0:9c:ea:4a:03:0a:b4:6c:
64:c3:8d:ca:ae:1f:3a:53:92:c6:c5:9a:f1:41:d4:b4:f7:ec:
4b:f2:b5:c1:b8:8e:c8:18:10:a3:a6:a3:70:49:6d:79:ca:5a:
18:94:d4:c7:5b:4e:d5:fd:01:de:bd:7a:36:6f:93:c0:8d:7f:
06:01:9e:5e:90:31:10:c5:3f:3e:db:34:24:c3:a9:30:f0:73:
f3:95:12:68:4e:00:8f:69:f0:b1:7c:a7:76:84:c8:6b:27:bc:
72:ef:07:dd:6f:74:1a:51:30:18:34:5b:3d:4b:f4:1d:79:2a:
0e:7d:f6:84:4c:00:87:3b:f3:19:ab:fd:c6:38:91:73:97:4e:
6d:8c:90:a9:e7:77:d5:81:b2:3f:37:68:e8:dc:ff:a1:36:b6:
82:a7:53:f7:88:d8:29:47:a5:82:a4:ad:ea:e0:b4:26:61:de:
d8:38:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:30 2025 by rpki-client