Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: 560M2UkcYO7CocxJ2ofgkQITmqhUsve8RRVbiLE8gP0=
Subject key identifier: 80:2F:FB:94:61:F5:E6:FD:4C:7C:D0:77:77:27:82:30:73:35:02:E7
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 0194BCE0E583087335EC8463A630896DE076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0449
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: 8cYpDoT/Fax9KdTRZEjG+sVDRwPDWv1yO06Di17A7kM=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e5:83:08:73:35:ec:84:63:a6:30:89:6d:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=802ffb9461f5e6fd4c7cd07777278230733502e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:fd:17:e7:5a:75:35:9e:6e:8c:a4:ed:04:
1f:ac:5e:1f:94:a0:55:9a:b3:fb:fa:09:54:21:15:
9b:3f:85:13:00:8a:99:2d:94:de:4c:ff:1d:23:a9:
f5:be:55:94:db:39:7e:bf:c8:cf:1a:18:9f:d1:4b:
78:49:73:61:60:7d:99:6e:f3:a6:a8:22:55:e3:4e:
45:a0:45:df:d4:27:a7:86:98:24:cf:eb:9f:2d:88:
fc:59:c3:9a:43:c4:14:bd:a1:12:e9:68:3c:6d:f7:
e9:3e:db:f9:41:b9:2d:4a:f0:dc:48:1a:1d:6c:df:
45:76:de:2b:a1:c5:f3:c9:ae:df:40:f8:38:af:b5:
9b:ca:cf:4c:f5:69:4c:e9:ed:22:4d:aa:6d:1a:a6:
4b:b2:7a:92:ce:61:4e:bb:d1:d5:15:81:d8:59:8e:
46:35:7f:52:74:a4:50:6a:47:a5:b3:f7:51:ba:86:
45:da:16:f8:5f:d0:a8:9b:93:2d:db:8b:b0:f0:f4:
97:3e:24:1d:fa:bb:e1:3f:0a:c4:65:0a:14:b8:01:
d3:a5:0a:6d:dd:b3:2f:33:7f:d4:49:cd:70:5a:e2:
e5:81:c6:ac:e9:9a:81:83:4e:31:c9:25:07:ae:ae:
52:a6:ba:95:0c:27:2a:b8:75:a9:10:5c:8b:b9:90:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:FB:94:61:F5:E6:FD:4C:7C:D0:77:77:27:82:30:73:35:02:E7
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c4:9c:05:b5:e9:23:54:9a:da:ed:6d:fe:e1:88:de:50:13:
a3:94:a1:3e:cf:35:f1:d8:52:a6:6c:1d:0c:f3:68:24:a9:11:
3a:e3:dd:78:b1:ae:0f:01:7e:69:05:29:a1:7f:bb:21:20:1d:
33:4c:fb:b7:8e:6a:64:9a:81:3b:9f:f1:36:53:46:c5:fa:d2:
c9:5b:53:16:85:a0:5d:40:d4:d3:7e:e1:d3:6b:02:20:11:fb:
d5:4d:fa:66:c6:9a:2b:c0:cb:7c:f1:0b:af:84:8b:96:5e:7f:
31:cd:97:d4:f6:d0:ce:06:6d:d5:9d:07:a1:19:6e:29:a8:1a:
8d:7c:b6:df:ac:1f:6a:80:bb:97:a4:44:06:70:48:a4:0d:1e:
ae:24:82:69:4a:a5:00:59:d3:a9:88:db:38:db:2d:32:23:08:
9d:30:49:80:bf:91:78:5e:34:f9:58:04:f2:93:e5:0b:64:5d:
40:d9:6f:33:7f:f1:47:19:9c:60:df:2b:f1:68:8c:b6:a3:42:
c4:39:17:bf:c0:2a:0c:0f:d8:4a:66:28:97:67:53:b1:e8:5a:
b3:93:ce:ff:49:a8:28:bb:02:c2:35:72:8d:20:c2:26:70:b9:
8e:50:6c:e2:f3:6c:66:7c:86:7e:0f:85:e7:59:f2:fd:6a:47:
0f:9d:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:45 2025 by rpki-client