Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: L4dYUy1wLUNlNa6pMeijYuQl9rY/3D7f1q8RavdnT6s=
Subject key identifier: CD:E2:11:AA:A6:15:3A:4E:36:CB:EB:F0:28:20:92:AC:98:B3:4B:08
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 0194BD17E8B25E5C49363CBF6F7613CF939F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 121F
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: BRr/anlCqgH0xYOc4Ia5680FIkK0boFYjq5pUQG0Nm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:b2:5e:5c:49:36:3c:bf:6f:76:13:cf:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=cde211aaa6153a4e36cbebf0282092ac98b34b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:78:3d:fa:ed:e3:4e:e0:b9:f6:ad:97:fa:
87:d4:47:0d:5b:5a:1a:01:b0:cc:74:d0:14:d4:9d:
5a:73:cd:52:b2:d7:2d:a3:97:7b:ae:a5:81:d7:02:
e4:43:01:89:65:c2:99:8f:d7:bb:0a:9b:c4:a8:44:
c3:b9:43:74:05:ed:9f:07:ea:1f:72:6c:f4:b9:19:
5d:81:ca:8f:83:38:22:57:3e:0f:7e:17:a6:ff:71:
8d:ec:25:9b:a2:00:ce:01:28:8b:4c:4d:bf:28:f5:
f2:61:41:66:cd:aa:3c:d7:bc:1e:d5:38:90:fb:16:
df:68:23:0c:84:c9:da:8a:9c:74:e6:b4:c6:9b:1e:
cd:de:e2:80:c2:dc:bf:8c:ba:49:af:fe:21:46:58:
c1:06:3b:6c:28:4f:7c:17:4e:bb:74:0a:0d:c2:18:
98:d6:ad:0a:ba:93:c6:0e:9d:65:f6:c4:a8:39:44:
5f:23:1e:7b:f3:a3:39:c7:e7:ed:8c:ec:7e:35:08:
b5:ab:39:81:4e:ad:0c:7e:22:12:07:6f:66:f4:89:
30:63:de:ac:83:0b:fe:b3:86:b6:1a:18:fa:40:95:
9c:1c:a8:94:96:f3:f0:b9:33:a4:a2:49:b9:a0:8b:
c0:17:fa:63:fe:c2:c9:fb:29:e2:32:b1:87:0f:bb:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:11:AA:A6:15:3A:4E:36:CB:EB:F0:28:20:92:AC:98:B3:4B:08
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ec:e0:a6:a3:74:0d:eb:32:27:27:22:8b:69:b2:8a:35:5a:
71:5f:c4:f3:29:3b:48:84:93:0a:19:f3:48:14:9e:93:b1:c6:
57:e6:61:89:d9:44:a4:f7:37:95:b8:31:e8:0a:b0:96:2e:13:
53:8e:d0:9e:62:24:bb:2e:6e:8e:58:e3:03:3f:02:92:bf:65:
25:24:28:2b:c6:56:97:c2:d9:04:c2:a8:da:b7:fe:3f:06:7e:
83:06:4d:3f:b2:81:5d:fa:d1:57:f7:e6:41:3b:22:95:d7:45:
ad:72:55:ef:81:a6:a7:f7:7d:a5:74:d5:b0:24:a4:08:fb:44:
43:ba:d6:4a:a7:7a:5d:a5:91:a0:6a:9b:0e:db:49:16:73:86:
14:18:8c:82:0e:28:55:9f:52:cd:9f:f9:91:1d:7d:89:c0:ae:
5b:ed:18:68:3e:76:90:24:d4:36:00:05:74:8a:0b:64:20:e3:
eb:c2:63:26:71:7e:4e:0b:ed:2a:ef:22:e8:32:8a:dc:62:8b:
ff:ac:2a:ac:4c:de:9c:18:e2:a6:f7:ff:dd:f3:87:3e:bb:a3:
ed:f8:25:94:4b:7a:df:bc:ca:9f:b1:99:0f:5d:cf:57:7f:40:
08:cc:c1:4b:0b:09:43:93:d3:36:7c:67:30:fd:4d:1c:91:f8:
07:9d:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:41:58 2025 by rpki-client