Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
File: n3Zvv-bZVxAAITgLsFVeCjum2OM.mft (raw, json)
Hash identifier: vfRtGtaQV90leesyRVR5dbngnbpTs4UGMKLe+IHl628=
Subject key identifier: 7C:F8:39:E7:B4:16:9F:13:C8:E8:28:44:E8:07:18:B5:A2:39:E6:90
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial: 0194BBCEE97669E1DF8D1E0B5B54A99FA1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: ONK87mida4LXX87gailCfoI1b8Y.roa (hash: QBCu5PF0VO/SVm73/KPj9NbrgIJuILrNgThOrk+l2bw=)
2: n3Zvv-bZVxAAITgLsFVeCjum2OM.crl (hash: R8SOkx3H5OgiA3OVUP2jMWZ0465wvWjJbGVv51dGgWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:76:69:e1:df:8d:1e:0b:5b:54:a9:9f:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=7cf839e7b4169f13c8e82844e80718b5a239e690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:8b:dd:a8:f6:0a:6e:ca:0b:39:1d:dc:cd:
a9:d1:a6:a4:1a:d3:f0:14:3e:e3:1a:af:d8:ef:35:
2d:80:f1:ec:18:0a:20:b3:59:13:12:fe:25:5d:9b:
56:27:15:9b:ca:ef:77:67:cd:bf:9f:56:8a:ac:8e:
ca:c1:e1:bd:0f:d8:a1:e4:a3:99:6e:d1:84:c7:ef:
2f:87:ad:fb:c8:29:9b:01:ce:4a:6d:39:45:7a:f7:
a2:58:98:46:c6:d8:df:14:6f:0f:2e:8f:1b:39:4e:
f1:8e:ae:9c:bc:18:a4:9d:05:7d:2b:fe:e4:6a:77:
7a:f7:4a:25:da:4e:ec:cb:76:11:48:c9:05:b1:eb:
00:1d:0c:2a:2e:c9:f6:96:c4:6d:1e:d1:5d:7b:19:
bf:64:aa:67:4b:ac:3b:52:45:bd:37:b8:14:4e:84:
6a:f7:e9:b1:d9:b0:3a:17:e0:cb:7a:e2:71:22:1d:
be:ff:05:26:b9:e4:b0:3b:48:78:8f:04:e8:3e:4f:
b6:ec:e4:47:56:de:d8:e3:01:bd:f9:8b:81:9e:f9:
73:8e:eb:a8:c9:ed:be:d6:4d:a9:7d:6d:68:ce:8f:
d1:54:99:72:ff:73:e0:33:b2:b6:80:9d:98:6f:09:
8b:66:95:d4:c2:fe:62:ae:36:86:8a:46:79:02:5a:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:39:E7:B4:16:9F:13:C8:E8:28:44:E8:07:18:B5:A2:39:E6:90
X509v3 Authority Key Identifier:
keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:c2:62:05:f1:43:03:ac:f4:f5:47:fb:0b:6e:16:c6:f8:
44:04:a8:da:46:a1:09:a3:cd:66:49:bf:53:0e:91:7c:85:77:
64:02:4f:7d:a0:12:78:b8:30:31:98:88:ed:d4:cd:f8:96:61:
69:86:9e:86:06:92:71:dc:17:71:e7:49:06:5f:12:5b:81:08:
2f:e8:00:6b:c0:b9:46:b8:8c:ff:85:3b:e0:0c:7e:c2:4a:65:
45:9f:ed:87:02:75:79:56:31:c9:0e:fd:09:dd:05:ae:ef:b1:
1e:c7:e9:ec:e1:d3:29:45:eb:12:e8:fe:57:6b:ac:8c:59:8f:
92:ee:9e:07:16:14:63:41:cb:30:59:7b:d5:80:f0:56:98:5d:
29:ff:91:de:a8:af:02:1d:79:ca:09:e0:7e:7d:96:7e:d6:3f:
2a:7f:d7:50:3f:8b:04:94:4f:c0:a2:b6:a7:27:c5:4b:62:49:
ba:27:65:f4:a9:a4:68:c2:44:6c:a1:0f:ba:11:c2:72:3d:9b:
ef:32:ab:c1:a4:36:41:53:bb:32:0b:32:9b:bc:23:f2:21:7f:
74:a1:e6:08:3c:3b:32:0a:89:75:f7:e8:56:84:7a:b6:55:73:
67:0f:52:50:f2:93:cf:02:60:fe:ba:06:26:a5:84:e2:5a:e0:
07:79:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:17 2025 by rpki-client