Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: ituLHtbz98m4Pf8ym84RaHOWKIwKPfbed7kXUxRatvk=
Subject key identifier: D9:A2:0A:53:63:5B:1E:41:9E:C1:B0:D6:BE:7D:CF:83:B5:92:5B:4D
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0194BD4E9B45B5C2E4148D68F7B62A08E13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 1321
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: qy1guJ5pC85d1/D+gr+HOe21pxHZF9ans5ggpNwlHto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:45:b5:c2:e4:14:8d:68:f7:b6:2a:08:e1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=d9a20a53635b1e419ec1b0d6be7dcf83b5925b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:05:29:dc:56:59:48:50:fa:73:53:21:5f:
67:3c:a2:cb:33:bb:99:14:d1:c1:5b:1a:d9:6e:79:
06:9f:11:f3:de:fa:20:3a:b9:8d:1a:c4:d9:bc:a2:
05:b3:33:f0:1f:5f:23:25:af:5f:31:75:25:0f:cc:
7c:9f:f8:fd:9d:0b:b8:ee:7a:fc:e5:f3:13:df:a7:
1d:d0:21:5d:b4:3c:c5:7a:e8:1c:cb:14:99:24:29:
c3:08:79:97:b2:65:45:e4:8c:6d:b0:04:dc:d9:dd:
8f:20:b1:ba:f3:12:40:d8:6d:f0:70:3b:6b:72:31:
8d:82:80:04:56:88:e0:05:d4:50:92:9d:cf:93:7e:
90:30:ff:24:cc:14:2a:c8:c1:1c:fe:f2:60:0d:cd:
ac:08:8b:4d:3a:7d:d2:29:12:e6:d4:90:ec:a1:59:
b9:1e:8f:32:d3:4d:85:f0:b6:34:fd:15:cc:26:7e:
e8:af:5c:87:e8:98:f2:ff:5a:cf:aa:b6:49:de:ac:
a3:f8:01:8d:0a:9e:d8:a1:19:0c:9e:5f:fa:72:fe:
aa:50:bf:95:2a:1b:d7:7c:dc:f1:04:e0:6a:f3:e1:
39:38:51:0d:8a:ea:a1:1b:82:56:09:e9:e5:2d:04:
5c:f9:f1:8a:51:23:cf:fb:b8:1a:f7:7f:ba:f2:53:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A2:0A:53:63:5B:1E:41:9E:C1:B0:D6:BE:7D:CF:83:B5:92:5B:4D
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9b:0d:ff:06:4e:c1:9a:98:c0:a7:b8:d7:34:7f:bc:5a:d8:
b4:e8:6f:a0:12:83:8f:0f:a6:fb:aa:64:cc:33:ab:ab:9e:70:
29:e0:ee:d7:b5:d5:d7:c4:1b:fe:97:eb:b1:c2:d9:f9:78:d8:
d4:b6:13:4e:5f:23:5c:a7:eb:8f:2b:eb:84:41:98:78:07:2a:
78:32:16:ef:d9:f1:dc:01:b3:dc:87:c1:f6:59:22:87:0a:45:
f9:78:ac:f6:8a:f6:a3:af:ac:c9:d5:7e:a0:dd:05:3a:cb:d5:
5c:d9:68:cc:ba:92:d2:e5:77:bd:ed:db:f8:52:0c:a5:8e:88:
b5:20:ee:0e:b7:e2:ee:59:0f:ae:74:0c:2b:c0:e6:0e:ba:98:
0d:aa:65:34:2f:e1:d0:89:5b:54:23:fe:da:59:99:07:d5:d8:
c0:ff:4d:02:02:0e:30:b3:ab:74:22:fb:d1:c1:d8:d5:8d:eb:
ea:55:b1:c6:2d:46:72:5d:06:85:74:9e:62:42:41:2f:1d:76:
70:72:3c:42:9e:21:d2:35:84:64:52:d3:39:3d:d9:1e:39:ad:
d3:b9:b3:2c:91:53:63:49:df:1f:ab:98:20:f8:b8:86:a2:55:
75:81:2d:af:e5:2c:eb:9b:e6:fc:30:8a:3a:b3:43:34:fc:1f:
e0:19:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:32 2025 by rpki-client