Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: KqYH1f3rqUPUsgT3h8aSqaMdiFMB3wV/AacYvCp0prI=
Subject key identifier: 2F:CD:16:8C:48:C4:40:FC:5C:44:70:5A:4C:D7:6A:74:68:40:1F:D9
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 0194BC0519A1B8DD8430121A8883E48917C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 0E34
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: SVw74GY41xzUWgKkYJch+4AxCz1nGYSoFfQtBsFnaT0=)
2: qztp8oOkrsOnZQZ-AVesJkd8gBA.roa (hash: w8j5kLnBBDJA6YAxwk7yr2iHlxdseJ2t5FGwhKWuj0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:19:a1:b8:dd:84:30:12:1a:88:83:e4:89:17:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=2fcd168c48c440fc5c44705a4cd76a7468401fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:9a:b7:a5:bc:a3:af:6f:81:cb:37:80:df:
16:81:57:31:8c:af:62:83:f5:76:10:e2:b5:8d:c2:
c8:e4:85:0c:a6:5d:00:46:36:70:88:6b:20:87:12:
80:2a:c0:14:e6:e2:ab:77:87:6c:bc:08:c5:23:b7:
b7:62:e6:70:43:5d:44:16:79:f3:8b:b7:42:0c:8e:
01:6b:e4:ec:7f:c9:cc:1b:f7:aa:b5:42:55:48:2a:
a0:b3:44:b4:e7:18:b7:58:1f:c3:43:4e:e5:6d:46:
b6:9d:59:e2:8d:f5:ae:74:6d:06:0d:ef:09:b0:ce:
f2:61:b7:6a:5a:5d:99:28:a7:c6:af:af:88:fe:aa:
3a:f4:bc:da:78:f3:d9:48:63:68:11:f1:d5:32:50:
7a:bd:a6:bb:e4:3e:7d:ff:a6:fc:ab:2f:dc:14:4b:
ac:9f:aa:75:8b:dc:ab:01:ff:6a:eb:e4:81:f9:8b:
46:a5:3e:63:7c:a3:5b:0b:9b:7b:45:ee:2c:3a:bc:
3d:a3:e3:7e:6c:57:b0:7a:07:25:a0:0b:d2:8d:ad:
b7:c2:f4:9b:60:c0:51:0e:b5:64:3f:54:82:ec:19:
2e:96:8e:07:34:9f:e1:38:b0:80:16:ba:38:55:99:
ac:f9:23:8c:ed:80:33:12:97:81:07:99:57:67:77:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CD:16:8C:48:C4:40:FC:5C:44:70:5A:4C:D7:6A:74:68:40:1F:D9
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:59:c9:7a:92:eb:ae:df:c5:8e:65:aa:1e:46:ca:c5:1f:b0:
fd:8e:69:fd:30:c8:3d:4e:9a:7b:d1:5c:4c:f2:ee:ec:38:5b:
b5:f1:1e:a8:52:af:c7:e1:1c:4a:37:37:ca:ea:d0:45:62:11:
ce:57:87:14:04:b9:ae:25:11:64:12:86:05:41:88:8c:f9:76:
22:9d:ce:23:7d:43:cb:7d:f7:a0:6c:df:96:75:34:ab:5f:64:
c9:42:01:01:0e:84:4e:7f:d5:d7:12:2e:8a:61:7f:54:6d:8d:
49:9c:93:4c:17:10:c0:26:60:9c:09:05:29:cb:f1:f5:82:ea:
92:16:9e:56:43:42:4f:3d:74:02:68:26:77:91:18:e7:b2:52:
b2:ce:c4:2c:76:4d:16:97:62:6c:9e:e2:22:29:40:ec:78:e5:
d3:c5:83:4f:35:28:e2:15:27:4d:3d:b7:dc:87:9c:6b:6f:79:
54:d8:3e:3e:a1:21:7b:50:3e:89:d0:8a:b4:19:ae:f8:6b:03:
0d:6f:1b:72:18:ee:90:72:64:48:79:29:9f:c8:72:06:e5:46:
68:87:d0:80:92:c7:3f:86:f1:1c:2f:69:56:0f:3e:1c:96:1f:
7c:1e:2c:24:80:40:ef:c8:e0:e5:df:37:a2:d2:69:df:4d:5b:
83:5c:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:58 2025 by rpki-client