Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: E6LRSLSsHnudwez5FtI4kcRDj4Ahz8Tar+9p6I9Trqw=
Subject key identifier: 3C:D7:97:69:B4:80:07:52:C9:65:C8:6A:15:2A:AC:F9:33:52:28:F6
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 0194BCA9B80C6C3451426548C08DC376BDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 075D
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: YEx8vWn0AEzjvhF8UhIopIjxG04K9H5XgEKKPHRCW50=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b8:0c:6c:34:51:42:65:48:c0:8d:c3:76:bd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=3cd79769b4800752c965c86a152aacf9335228f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:e9:8f:d5:b9:11:ef:7d:23:a5:62:97:36:
9a:93:18:f1:33:e2:6a:1e:49:23:f4:03:4f:fd:c0:
2c:87:5d:2e:3b:e4:33:1b:53:5f:27:ef:7a:e8:8c:
aa:66:38:51:d2:f7:58:2d:a2:08:8c:0c:21:4f:94:
8d:c9:b0:37:6a:79:a2:42:7e:ac:a2:97:f0:75:0f:
9e:b0:97:f6:6b:fb:1c:30:c3:db:75:8e:08:78:db:
f8:3f:c3:1a:8f:16:bb:f4:a5:74:1c:7f:ce:c6:73:
26:40:d5:2b:28:fe:3e:a3:ee:28:08:e0:a5:0e:6b:
86:90:0c:78:b7:19:4c:1b:7d:f9:1c:e8:b0:02:3c:
28:e3:d8:b8:5d:a2:a6:57:f5:65:a9:c2:3a:12:06:
07:d8:f4:f1:40:39:7e:3f:67:a2:63:b1:4e:30:a8:
29:86:03:15:16:c7:59:df:f1:b8:2e:5c:d9:6d:b7:
61:0e:4d:75:9c:b6:c2:e2:2d:cd:93:22:e2:7a:2a:
0e:63:92:10:ef:25:a2:14:e6:d3:21:e8:78:81:02:
30:1c:b5:6e:e6:9f:8a:cc:71:f7:98:5c:31:8b:16:
56:be:cd:7c:a5:0e:69:d2:b5:c9:73:88:3f:75:ba:
91:34:9c:87:77:74:7a:a8:5b:47:46:2c:c7:68:49:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D7:97:69:B4:80:07:52:C9:65:C8:6A:15:2A:AC:F9:33:52:28:F6
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0f:3b:52:74:14:d7:1b:32:03:f7:cc:92:c9:6e:ab:bf:c4:
5d:78:87:a2:02:38:06:97:ba:4d:55:d8:a0:0a:d3:e9:82:9d:
4b:20:cc:26:82:02:df:b4:21:60:29:fd:53:da:7c:ce:fd:c7:
b8:b7:b9:20:85:88:23:dc:45:f8:2d:b2:c2:ac:4d:b5:22:12:
40:5c:c5:e8:01:59:9a:28:13:76:f2:a4:dc:ec:17:3e:de:05:
13:2a:84:a6:a2:d4:46:e4:f6:75:72:39:9c:ac:00:bd:3b:86:
08:fb:af:c9:57:19:c4:90:d6:1e:f3:01:0e:b8:54:0e:83:f1:
7b:49:dd:b5:8e:fe:06:ff:55:13:3c:1b:98:36:de:f0:d3:e4:
a2:85:35:24:69:c0:09:64:fd:c6:48:b3:f2:03:3e:a9:0f:fc:
94:e1:48:c9:d2:da:70:f2:3a:1b:6e:aa:23:c0:5e:9a:ea:8f:
27:83:a1:88:92:ad:38:bf:45:df:d3:85:3c:94:74:0f:29:1f:
66:9c:45:4b:0a:0e:72:1e:b0:ba:d1:77:27:e8:6a:f8:cd:be:
88:ad:df:56:1d:9d:f9:61:af:ba:1c:35:a1:4a:68:e6:e0:bb:
27:ea:4d:93:2e:4b:0a:80:93:50:94:9e:78:e5:f6:b5:b4:3c:
8c:f6:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:03 2025 by rpki-client