Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: T25lC0txu9crzn3L/tM6CeVhphjHUXcgvj8Q2q8sAMk=
Subject key identifier: 06:01:CC:A9:21:EB:A4:A7:3B:1A:AC:0C:20:38:D2:EF:16:63:18:88
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0194BC3BDFB69D47D73F7213C1508FACD15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: Gho56eTvzbEuiy3k48zz4MWpAi8jbsmrrcurMoZdm7w=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:b6:9d:47:d7:3f:72:13:c1:50:8f:ac:d1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=0601cca921eba4a73b1aac0c2038d2ef16631888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:13:d0:e5:f7:51:53:2a:77:7a:f2:d5:3b:
ad:3c:f3:82:dc:b4:69:1f:85:d8:98:b6:18:fc:53:
36:bf:e9:2f:a0:98:c8:79:bf:28:e4:97:93:43:19:
30:f1:55:46:e9:e8:c3:68:06:dc:f3:90:a2:9d:24:
24:0e:3f:cf:ff:88:83:cb:a1:09:49:af:5c:f3:32:
32:1b:d6:58:8d:da:e1:42:5a:46:e1:c0:03:75:d6:
b0:b7:be:e4:90:c8:5c:58:37:f8:68:37:e0:13:84:
fe:b6:8b:fe:52:f0:45:b5:24:7c:fc:bb:c3:db:8c:
a7:05:63:78:f5:bb:b2:ca:d2:95:a5:31:2a:30:20:
c1:19:26:74:55:dd:7e:2c:c2:97:9f:55:fa:f4:3e:
81:49:0b:0f:fa:08:f9:98:30:8f:6a:0d:8e:a5:51:
1f:be:9f:6d:f5:6b:40:e4:a1:c7:64:a5:83:4b:c0:
34:24:a2:d2:66:b1:85:6a:8c:ea:21:93:61:07:22:
b2:8c:36:e6:97:5b:c5:1d:5d:ef:4b:b6:6c:74:7a:
98:8d:f9:cd:b4:7d:b5:88:e4:4e:f8:f2:5a:bd:cc:
90:0c:bd:f0:44:c6:a4:b3:c7:c4:a9:63:58:b0:94:
c7:86:f0:45:3f:0d:71:f3:ef:0f:39:d9:f4:9d:bc:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:CC:A9:21:EB:A4:A7:3B:1A:AC:0C:20:38:D2:EF:16:63:18:88
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bb:69:26:6d:66:10:f5:73:83:f1:1a:98:e7:c0:f7:e6:cb:
6e:e6:6d:1c:cb:33:08:34:4d:9a:28:6e:10:6b:74:dd:76:f1:
cb:f1:18:1b:34:b7:6b:89:e1:97:c1:20:d2:a4:c9:2f:d2:5f:
9a:20:3c:97:b2:25:6f:33:b4:f6:ab:a7:70:87:12:c5:05:da:
36:77:dc:0d:2a:5d:86:5a:d2:4e:83:71:29:1e:21:af:22:bf:
76:20:e9:2a:c1:cf:21:20:58:6a:72:c9:35:fe:78:c5:75:03:
b4:55:8f:64:bf:ac:e1:6c:d9:37:87:93:25:cc:1b:e9:b3:56:
30:9c:31:4f:5f:17:80:58:a4:88:a1:6c:df:52:42:cc:57:bd:
48:be:14:d0:2f:fc:b4:58:4f:96:e3:f6:00:39:40:34:e1:c1:
b4:e6:f4:97:d0:81:55:e3:35:e6:41:28:25:23:46:ad:62:47:
83:de:b4:78:4c:7c:e0:e1:d8:dc:22:73:be:3a:69:1e:f1:5f:
0a:d0:29:62:02:e5:6f:a1:3e:56:26:04:5b:5e:ac:1b:ef:34:
96:45:c3:60:d0:69:9b:f8:de:79:93:5d:32:75:35:9e:24:ef:
77:61:f8:6d:5b:de:81:10:27:15:47:5c:92:f4:74:61:ce:38:
b5:86:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client