Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: dg10ySQ8YHYftcH88BVSg9xvPBhEkOAnAO0PxLWiQiY=
Subject key identifier: 4D:72:4C:94:7B:21:94:71:C9:AC:93:53:57:12:C0:DA:68:BB:48:69
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 0194BCE0BDE20D33B6909C07C44FF715C71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0756
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: iu6/B65Nuuwdg6Ef0BUIaXBfHL+fYUwvbEmu3Z4nifs=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:e2:0d:33:b6:90:9c:07:c4:4f:f7:15:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=4d724c947b219471c9ac93535712c0da68bb4869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:c4:da:5e:dc:da:eb:b3:9f:88:d4:ea:a0:
bc:26:4b:80:22:f9:57:63:27:db:d0:fd:0d:a3:1f:
23:30:2d:a4:46:f2:3f:09:56:1b:3d:3b:63:f7:db:
c7:ee:e4:77:d3:7c:0a:18:15:58:97:f5:2d:2d:83:
53:8b:5f:a3:e4:91:e7:d4:9d:28:f7:27:99:fe:de:
b3:1a:6d:8c:84:06:47:0f:e7:ab:1d:a3:59:6f:6c:
88:5f:e6:08:b4:31:95:78:e5:53:86:b4:de:f5:d6:
91:41:e0:4f:d0:fd:da:ac:d5:19:15:92:75:18:cf:
d0:b8:fb:cc:83:9f:9f:fc:c9:c2:7b:48:36:9b:b8:
1f:a0:d3:8b:15:8f:af:99:3c:04:cc:71:0b:f0:75:
01:e8:eb:21:ec:35:0c:72:1f:0f:7b:c9:0b:5b:71:
c3:14:6e:9a:93:ab:be:d9:80:a9:a8:a3:e6:25:ef:
d7:76:61:3d:b9:16:7f:d9:15:ee:40:27:56:67:99:
3b:26:4c:3d:1b:c6:d0:d8:b9:2e:ba:aa:42:14:b6:
05:3a:a4:ca:16:61:63:be:2f:78:c3:fb:07:fc:c0:
98:ab:f2:03:2b:6d:58:be:f1:fc:15:40:c1:ed:82:
54:44:ac:77:44:e4:12:06:50:b3:1c:21:5f:22:71:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:4C:94:7B:21:94:71:C9:AC:93:53:57:12:C0:DA:68:BB:48:69
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a0:c5:f1:76:88:bf:4c:83:94:04:51:6c:91:7b:be:32:92:
70:bd:2b:d4:70:29:eb:7c:ad:7d:3a:a1:d6:2f:05:4b:f7:c5:
c5:ef:3c:e9:22:f5:71:30:fc:02:f9:d6:67:e4:a4:4d:5d:1b:
fa:e9:d9:fa:56:2e:94:8a:b8:67:9d:17:bf:dd:87:47:b5:46:
44:23:f4:8f:f2:2d:33:72:c7:5f:64:5e:76:e7:1d:ba:86:19:
d3:55:d9:45:da:a1:5e:fa:6c:4c:98:f2:d7:d3:f0:b1:e6:8c:
2b:1c:9c:4e:31:2a:63:9d:c0:36:c4:67:f0:39:5a:24:7b:ad:
ea:54:e7:ac:b1:b8:ca:89:3d:4e:cf:15:c3:a7:9c:85:ab:30:
b5:ae:fa:08:92:28:eb:df:a1:48:25:c1:d4:6b:96:42:7d:d6:
8b:21:83:ae:26:5a:9d:c0:96:e6:68:39:ec:37:98:ba:db:e0:
07:84:b5:b4:7b:1a:96:f8:7f:42:5f:6a:88:b8:85:6e:b0:e7:
dd:3c:27:44:6e:d3:ca:ef:55:97:c6:17:6e:ac:fe:e1:12:a9:
3f:f8:3a:33:52:f3:7c:9c:1c:85:4c:c2:eb:d4:11:6e:2c:f0:
dd:cf:f0:91:d2:a2:e1:06:8d:02:6f:10:ff:fe:26:e4:4f:54:
9e:2a:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:05 2025 by rpki-client