Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier: bfyw9WW7QfmtN/G1gAs0QvzQYjWE5yaIBIPNybbdCnI=
Subject key identifier: 52:7F:FE:91:4A:0E:48:37:EA:34:D1:7C:ED:DC:9C:81:A0:DF:0D:F5
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 0194BD4E9D96FD3C0B2D1381FB8178B9807E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: 8KafSlecggRm7E7Yo3Z3S6aX4gz3O/Ejpyo5Z9zsPtI=)
2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9d:96:fd:3c:0b:2d:13:81:fb:81:78:b9:80:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=527ffe914a0e4837ea34d17ceddc9c81a0df0df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:e0:6b:01:5c:e3:f5:1e:d4:99:01:d0:b4:
3f:bf:cb:80:d4:18:5f:98:61:e0:40:59:c4:ca:47:
4d:47:fd:f5:5e:56:69:61:e3:38:96:e1:ae:b9:4b:
ad:32:42:06:d0:d5:7a:c3:e0:05:9c:55:ad:21:52:
3f:b6:26:11:c4:c9:ec:b8:21:f1:c5:97:aa:ad:0f:
b8:be:f8:55:d2:67:ac:a5:98:94:08:d2:19:d2:a7:
b3:0c:f0:13:11:51:8e:92:79:5b:56:03:ed:da:56:
4a:1d:a9:6a:c4:81:e3:5f:7c:6b:8c:46:2d:f1:a3:
77:5e:9e:99:57:1d:3a:26:5c:94:e6:56:c9:54:c0:
4c:c8:72:0e:4f:1f:33:64:2f:cc:8b:00:65:6a:94:
5b:a4:de:bc:59:cc:69:b5:7b:e2:fc:ff:0c:00:08:
fb:da:a8:41:c2:9b:3c:94:99:f9:28:56:be:2e:80:
b0:95:c3:8e:fb:80:39:24:a8:2e:63:26:95:3a:f7:
8b:49:66:b7:39:d9:45:a3:f3:c8:1b:6e:e2:76:f2:
08:04:3c:fd:5c:49:88:aa:90:c5:ce:89:c5:8d:95:
8a:a7:79:94:a8:23:dc:cb:d6:7e:9e:09:74:49:e6:
02:d5:95:c0:2c:71:41:29:92:8c:5e:46:5b:7c:12:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:FE:91:4A:0E:48:37:EA:34:D1:7C:ED:DC:9C:81:A0:DF:0D:F5
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:07:cf:7a:52:d7:5f:94:f3:14:01:69:cf:45:32:dd:fe:f6:
95:19:f7:13:f7:76:d0:ac:5a:16:09:c5:ae:9f:c8:a5:2a:8c:
e1:9e:b4:74:1b:df:03:21:f3:f4:df:3d:d1:2d:a2:6a:83:9e:
fa:0f:03:90:98:4c:3b:b2:03:f4:a0:68:86:50:f8:42:96:08:
ac:ac:f6:02:66:db:2b:d1:36:f3:26:df:03:fe:4f:76:9a:7d:
fc:8b:d4:9a:55:a4:2b:5d:46:0d:a5:40:28:1a:bb:3d:7b:03:
eb:7a:34:0e:d0:66:e3:7a:6e:c4:a3:74:c2:d6:0b:28:48:78:
2b:8e:f3:c0:83:06:88:ea:1e:d0:ec:d4:48:68:53:3d:cd:50:
8d:cb:d1:27:af:0b:ce:5d:64:6b:ec:31:9e:c8:15:7a:3f:5e:
32:8f:51:57:ec:c9:fb:29:a4:78:a7:fe:a6:a1:6b:8b:a6:33:
66:aa:db:fa:9c:12:8b:91:e6:15:99:1c:d3:ad:69:12:b0:d5:
77:ee:54:fc:d0:3c:af:0a:7f:d7:3f:75:3d:02:71:83:40:9e:
dc:24:e9:e9:72:de:48:ed:cd:10:fd:a9:42:16:7c:de:b3:26:
86:bb:5a:bb:d6:7f:27:6f:52:6b:6a:55:58:ec:6b:7b:a5:34:
94:bb:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:16 2025 by rpki-client