Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: VjJDlSwN4z/rdbo1DzDeSuuTjNCWwx9T4pFTqmGVaSs=
Subject key identifier: B6:A9:CD:D1:6D:FE:E3:CE:7A:84:37:D6:AC:B3:6E:E0:7E:EF:45:3A
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 0194BC04D05F962659A371EB73474CB89345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: xGd5pIORwWRsHgT+4mRabGIa+Wt77mwVWK+vxkbFulk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:5f:96:26:59:a3:71:eb:73:47:4c:b8:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=b6a9cdd16dfee3ce7a8437d6acb36ee07eef453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:98:e7:05:07:95:b1:cf:ce:2b:73:27:7f:
e4:de:4b:02:18:92:87:d6:0a:92:5d:8c:20:d9:ea:
ba:2b:65:95:3b:13:03:94:04:64:53:c2:fe:46:bf:
9e:21:34:eb:41:df:ec:e7:d7:c8:03:14:b9:2b:2c:
43:0e:2d:eb:b9:e7:97:8c:d8:27:62:e8:14:f0:fa:
d9:ed:21:f4:10:3a:37:ce:b2:60:0a:ba:9f:31:1b:
06:5a:0a:7f:12:72:1b:1c:65:46:bb:e5:e2:de:16:
2b:0b:d4:3f:75:34:11:1a:35:41:10:94:c3:26:cd:
0e:e2:8a:f5:1a:a8:e6:53:12:73:db:4d:cd:10:88:
95:54:b8:02:64:4c:f6:ce:06:3f:70:5e:a3:ea:d2:
7b:75:06:85:09:02:65:74:20:72:6a:56:92:86:84:
f0:aa:e6:a6:f3:13:27:4e:1c:4a:d9:b7:d8:41:48:
f3:ed:b4:ef:ef:0a:8b:4e:cb:24:32:08:41:5d:46:
e7:cd:b9:6b:c3:17:0b:a8:b3:f1:45:48:ca:92:6a:
17:90:89:df:f5:49:fa:e9:66:f9:c3:bf:47:cc:0e:
83:d3:7c:44:5e:07:4e:6a:75:18:5b:a4:c5:36:9b:
9f:91:46:d8:b7:c6:0a:6f:28:c2:47:75:85:bc:24:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:CD:D1:6D:FE:E3:CE:7A:84:37:D6:AC:B3:6E:E0:7E:EF:45:3A
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f8:d5:2e:b4:31:d1:62:18:00:7f:e6:d0:46:08:0a:56:3a:
77:01:7d:be:35:8c:5b:5e:fd:c2:30:28:6b:73:14:e1:33:9b:
b1:f9:e5:49:32:fe:9a:d4:1f:6e:3d:3e:c6:6d:3c:e4:50:69:
b7:dc:27:0b:c5:51:20:ad:06:6e:77:54:09:5e:b8:da:4e:05:
44:71:91:a7:cf:02:1a:4e:9d:13:2f:f9:3e:e7:d8:1f:c4:e7:
0f:7e:91:c0:e2:d8:bb:76:c5:29:01:32:88:c0:8e:17:2f:1b:
76:f6:7d:da:da:19:c9:1b:a3:b8:16:54:af:11:e0:9b:c3:a8:
2d:69:d9:2b:99:51:76:cd:c5:fd:05:c1:5f:ed:ce:8f:6e:9f:
72:7e:75:18:ba:0b:fc:ea:28:85:a4:57:5f:27:2f:a0:03:22:
b3:c8:a2:43:6c:b3:b2:42:14:28:8b:da:d5:3d:05:53:ae:29:
30:04:24:6f:eb:68:81:b8:f5:7b:94:7d:35:b4:14:5b:21:d1:
9a:99:74:de:b1:25:5b:b2:72:25:84:d5:10:06:7b:14:b6:6a:
5f:99:b7:21:52:ca:d9:a9:5e:6d:d0:ff:c8:d8:1a:bc:ba:a8:
b5:03:31:f8:59:da:92:00:4d:05:18:f2:46:d4:74:4d:4b:80:
15:1b:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:55:02 2025 by rpki-client