Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: EHhkadLe+iM4qTiau4X8pl5vw7THk/58zCITRfLMUw4=
Subject key identifier: 4D:9B:45:69:3C:11:7A:C7:4C:6E:9D:A7:04:50:B3:0C:55:9F:93:B4
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 0194BD4EA817778A8D162BCA47478950C8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 047C
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: Ei9J5isgXxPELyZ7x4/qyKAjOhz1dHZN+kpD2hg31w4=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a8:17:77:8a:8d:16:2b:ca:47:47:89:50:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=4d9b45693c117ac74c6e9da70450b30c559f93b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:4c:fc:19:26:fb:87:0a:da:30:0b:a6:82:
96:bb:fe:57:7e:16:99:86:4e:06:44:13:78:cd:c5:
7a:4c:f6:14:49:a7:4a:04:32:b7:1f:fa:d3:a7:b7:
56:04:bc:78:dc:c3:a7:9d:bc:76:16:4b:69:de:93:
50:6f:f5:d3:93:5b:ac:06:d3:de:94:c6:6a:75:d6:
17:f1:e3:bc:0f:c3:32:34:5b:41:0a:f1:c8:b2:75:
0c:3b:4a:5c:cd:ec:9a:1a:06:33:f6:c6:12:0a:c5:
74:a9:d1:a2:3f:69:bc:d0:f9:08:5b:f8:41:2f:97:
1a:d4:47:fe:d3:8d:6f:4b:93:27:7c:f5:92:68:a6:
39:be:a7:02:52:ac:74:8c:ce:bb:68:3a:d4:de:f0:
15:46:57:41:2b:68:7d:8b:b6:6e:16:0e:1f:bd:2f:
2c:8f:3c:87:26:2c:8d:28:3c:0a:fa:6d:3c:fb:48:
de:27:62:49:01:ea:8d:51:d8:07:54:17:29:bb:a7:
13:98:3e:93:38:2a:86:36:c4:3c:4c:a1:5c:2a:ac:
54:01:de:bf:06:4d:07:db:72:18:b6:4b:f1:53:06:
93:39:8d:fc:96:fb:5b:a7:de:16:60:cc:02:69:bc:
25:c9:38:16:73:cf:a5:b7:22:13:a8:78:ba:e9:93:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:45:69:3C:11:7A:C7:4C:6E:9D:A7:04:50:B3:0C:55:9F:93:B4
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:62:17:5e:00:15:48:12:ee:80:f7:4e:80:7e:0c:f3:a2:
dd:b3:4a:29:33:3c:d3:04:e5:39:63:f4:d9:eb:8d:55:ef:8d:
be:0b:78:d2:07:25:59:c6:7f:11:a8:50:20:fd:09:d8:f5:72:
6d:35:3d:db:20:c6:4c:41:07:31:a3:a1:31:37:ac:a4:63:ac:
63:c0:f3:49:eb:6b:4b:a2:0b:10:8f:22:c2:e0:ba:0f:f9:1e:
b7:10:7e:e1:28:53:23:a6:a0:d3:34:7d:05:6e:71:1f:b9:56:
73:ef:6b:9b:b7:ec:af:f8:49:50:f4:b2:91:7d:29:87:4c:79:
07:3f:d4:99:39:86:e3:1c:9d:5a:5b:b4:46:53:a6:e3:12:16:
89:72:b1:48:32:a3:fb:31:0f:4c:79:31:e8:12:72:ef:b9:57:
f5:a8:6f:e0:1e:e9:d6:e7:9f:12:9d:e4:4d:7b:ab:ac:be:3d:
5e:d8:ed:77:67:fc:90:96:3e:71:57:c8:58:b5:98:a8:a3:5d:
e9:86:d1:3f:a2:8b:f7:11:0b:a6:d3:51:8c:fd:ec:86:fc:e2:
35:d1:89:72:40:df:70:6a:40:18:01:1d:ca:a7:cb:c9:73:d6:
4d:7e:8c:97:ae:fc:6e:a2:cd:c7:c7:54:30:50:06:90:ca:7a:
23:63:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:57 2025 by rpki-client