Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: c3Vbn3J9PXZtNfYDJAI+oyihWfMvhaFPstfbizww5T8=
Subject key identifier: A7:03:B4:3D:96:AB:DC:E3:E5:8A:48:40:D4:A4:86:21:7D:6E:37:CA
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0194BCE097CD94AE74F17B27BF03E5CEE7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0721
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: MbGSU/KjqeYTAXPyJ9Si24mVkCQruQlNpFvspFmzG0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:cd:94:ae:74:f1:7b:27:bf:03:e5:ce:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=a703b43d96abdce3e58a4840d4a486217d6e37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:60:6b:a1:03:1e:32:91:90:be:d2:56:bb:
e2:1a:ab:d0:ef:bd:ea:cf:60:6b:b8:25:59:d6:7c:
7d:1e:c7:27:23:9d:7d:67:f7:38:98:10:8a:3f:97:
03:58:39:b0:fa:91:7e:73:d3:ea:e4:0b:de:58:61:
da:bf:64:95:78:96:bd:9e:2f:67:57:a2:ad:cd:27:
e8:50:a7:23:34:5c:97:ee:37:cc:db:c2:12:c6:5a:
1d:29:fb:b7:86:33:ca:8f:3f:06:04:12:43:8b:89:
9c:c7:56:2d:11:4c:e8:3b:42:f1:29:23:06:f1:86:
63:b4:d2:92:ae:85:2a:8d:96:27:32:5a:c7:e8:fa:
08:36:b9:e9:97:ea:75:5c:ea:9d:e6:5f:e9:35:dc:
bb:fc:37:22:46:0f:09:f6:14:2c:fa:70:82:de:d6:
6a:47:9d:41:93:05:5c:f9:6d:c7:59:e0:0f:b5:d1:
46:33:93:7a:60:65:e9:ba:70:3a:00:44:fd:9b:24:
10:03:32:5b:03:a8:2a:ef:8e:99:99:16:91:4c:16:
a2:95:98:66:91:14:16:ff:5e:5a:28:14:3b:5b:fe:
e8:d7:ab:33:16:06:63:b6:7c:97:37:ec:5f:7a:02:
84:af:46:aa:5d:4a:1e:75:ba:85:e2:66:b0:56:c7:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:03:B4:3D:96:AB:DC:E3:E5:8A:48:40:D4:A4:86:21:7D:6E:37:CA
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:d5:a7:1e:f5:e2:3a:ec:5d:1b:82:66:51:cb:eb:fb:cc:
73:a7:84:31:61:15:6e:fb:6d:fb:0e:2f:30:36:67:1d:f1:1f:
fd:3b:26:50:f2:24:7b:a8:b6:9f:d4:59:96:db:aa:24:d0:9a:
f4:95:98:ae:b3:82:a5:e0:77:40:73:15:5e:6a:95:55:f7:12:
07:03:03:ad:27:a7:82:4f:6c:24:3c:a2:d5:4b:1a:42:05:07:
6f:10:d3:88:46:88:f0:a3:cd:bf:2c:4b:3d:9f:59:48:ac:84:
6f:14:90:c9:7a:65:19:d9:26:c5:2b:17:81:ab:3f:96:d0:96:
e0:70:73:a5:a8:76:ed:36:24:d7:81:72:25:3d:41:fe:4f:62:
b1:06:9c:db:a4:1d:0e:8b:c8:88:63:f6:1e:9a:94:2a:5a:27:
c8:db:a3:f0:25:ad:c5:55:b4:dd:58:f8:d8:14:cc:d0:4e:cd:
20:24:47:81:d3:d6:3b:63:4b:bb:f3:de:dc:ff:f8:14:d2:cb:
81:72:44:c2:7e:49:ee:2a:83:99:66:ca:eb:9f:f5:59:e0:ab:
0f:78:e2:a3:b2:be:9c:c2:a9:93:39:f0:21:ce:9d:7f:36:7f:
e0:cc:72:79:58:4f:81:a5:2d:71:d0:83:58:4b:13:df:28:f8:
c0:80:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:02 2025 by rpki-client