Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: 69ytxe8+SkYJoJysuCZRa17mR9z5WwX8+gnC3AgYzUM=
Subject key identifier: 7C:95:ED:4C:BA:82:8E:B7:BE:69:59:8A:93:40:B2:6A:EC:BC:38:D5
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 0194BC7284F80DA7616E5B5C94E8CC21B08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 045A
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: 218BuIUH5ljO95nuKrKFBGA9M/Hkjy3XHroe74w9F9A=)
2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:84:f8:0d:a7:61:6e:5b:5c:94:e8:cc:21:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=7c95ed4cba828eb7be69598a9340b26aecbc38d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:20:e5:63:95:99:2e:13:fe:38:3f:07:cc:
07:3d:0e:3c:10:0e:ef:d3:71:ce:cd:25:03:75:e0:
0d:69:cd:6f:ac:cc:37:54:07:7a:20:ed:3a:32:f6:
e5:b9:aa:94:06:25:2a:40:0e:02:b8:f9:20:ed:86:
87:45:79:0b:74:06:02:a4:93:ac:c4:f0:2a:76:fc:
62:8a:15:ed:5f:c9:80:bb:9a:28:60:d6:8f:b0:58:
7c:83:82:e7:cc:6c:60:ba:57:ba:53:47:c1:97:7b:
46:60:7c:c7:64:fe:df:31:05:d6:bb:8c:b4:aa:0a:
80:c6:d1:f3:bd:ac:82:99:9d:02:bd:0e:64:7d:23:
df:8d:cb:6c:04:5b:3c:53:e3:a2:ad:0e:20:38:a6:
d9:4a:28:8d:52:2a:3d:9d:24:94:05:78:ba:72:5b:
7c:39:51:f2:b6:17:7a:de:2c:03:b8:ae:0d:ef:76:
5d:6e:93:ba:16:dc:32:33:2a:ef:24:f3:fd:86:ef:
3a:33:b4:2a:50:cb:04:e7:90:e9:1e:a1:dc:c8:22:
30:2b:b2:72:6d:e9:9c:eb:00:9b:0f:96:27:09:de:
ba:34:41:b7:c3:27:4a:e8:37:61:c9:c3:a9:42:1d:
5c:1c:0b:c3:34:45:4a:13:1e:5b:d3:88:66:a3:fd:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:ED:4C:BA:82:8E:B7:BE:69:59:8A:93:40:B2:6A:EC:BC:38:D5
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:f5:f4:fa:d7:82:fa:c3:a4:95:5f:b6:bb:98:0f:7a:a5:
13:3f:c6:72:8e:1a:93:9b:8d:48:b3:20:55:16:01:ea:26:5f:
ae:df:dc:44:ba:58:10:41:55:00:02:fd:3c:09:e7:01:fd:2c:
76:1d:69:5b:18:26:e6:34:ac:f8:a7:ca:ce:b7:ef:76:f4:45:
c4:20:a4:9e:a0:fa:14:df:d9:42:7a:60:46:48:06:d5:36:9c:
e4:54:4d:c0:09:a1:1e:b9:18:46:9d:5f:cb:14:8e:a9:dd:f3:
a8:c9:f1:4a:42:6b:5c:4e:d0:bf:6f:96:51:e7:ec:e6:ff:f6:
39:d0:1e:1c:9d:e0:cb:2f:18:0b:6e:7c:21:3f:d1:4b:17:71:
c8:7e:f2:7d:a8:1e:bc:6b:10:a0:6d:b6:4a:a6:0e:0c:7e:41:
f9:17:08:4c:88:33:a5:50:13:be:7e:d6:2e:55:60:49:ba:2f:
48:64:1f:e6:23:5c:a1:c0:d7:5c:5d:97:da:85:7e:ea:a9:c3:
cc:be:4f:33:0d:98:99:55:56:85:31:0e:42:0f:90:3a:22:36:
56:72:0e:59:6f:ee:9c:8d:ff:76:a9:b9:52:76:42:22:82:60:
f9:00:2a:37:ca:e0:90:af:4a:f2:e8:87:34:62:ec:f3:32:c3:
42:5c:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:12 2025 by rpki-client