Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: deXzNsMHr9Q5ko6mKAUAOHScl0a1n29ztPc/HsJP/ZQ=
Subject key identifier: 26:0F:22:C3:80:6D:DE:74:E3:0F:7F:59:DF:5D:8A:4F:35:58:92:BA
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 0194BC732276A5EA2361A75CBD2326D98403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0CE9
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: GLPMgQIVlZhyQ3tEaGI6V4QBV4w.roa (hash: UwZ5yBoQpoWEB6zAEAseDQjOJbZzXKLpk4Jmnx9Fvco=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 3SCbU2lHhj5oy085VhmJd6Wj1T2RYFVpkoW8NG/JmLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:76:a5:ea:23:61:a7:5c:bd:23:26:d9:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=260f22c3806dde74e30f7f59df5d8a4f355892ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:32:fe:a8:a6:77:3b:7e:31:b6:66:1b:fb:
ef:3d:4d:06:f6:c9:fa:79:4e:87:b7:ec:34:be:8c:
88:44:60:1a:37:18:90:b2:a6:88:01:bd:85:b2:21:
a7:e3:b0:90:33:c0:e0:01:0b:97:69:b8:8f:cf:5c:
fb:e7:c9:a7:d6:2b:a3:d5:ad:5d:c0:85:37:0c:66:
2b:cf:1b:76:c3:a2:68:0b:b5:3b:72:3f:e1:b4:92:
30:0c:30:8d:4a:3b:c4:d7:1f:dd:af:4b:59:fa:70:
73:ad:e2:5a:8e:84:3f:8d:99:19:a1:d6:72:b0:bb:
e0:07:59:0f:00:1c:0f:12:2e:7d:5c:94:25:b8:bb:
ba:dc:5d:a0:4f:95:88:3b:56:25:12:3a:30:e8:d2:
c8:ea:b6:47:da:90:36:80:37:6c:fe:1b:bd:23:df:
6a:c6:3c:80:2f:3f:82:eb:07:e8:f2:1d:86:40:1f:
a5:56:9d:0b:08:0b:b2:7e:24:38:0d:86:d6:22:42:
a7:53:e5:86:51:ca:9e:8a:fb:d0:4b:03:aa:cc:c9:
4f:44:4c:5c:97:98:12:50:d3:37:d5:76:dd:77:4b:
0d:8f:01:e3:ac:a6:7c:72:ce:87:b1:a3:e2:2c:01:
cd:cd:f2:10:56:62:67:a2:ad:22:93:a3:79:7e:01:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:22:C3:80:6D:DE:74:E3:0F:7F:59:DF:5D:8A:4F:35:58:92:BA
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:72:fd:5d:78:b1:d2:ae:5c:93:45:5c:30:e4:f3:4a:d3:
91:91:87:fa:6e:90:b7:ec:d7:33:00:db:18:29:34:85:5c:96:
69:f8:1c:c7:a3:ae:26:9d:f1:66:0e:8d:97:04:95:22:41:4c:
04:71:69:9a:ec:04:6b:1f:2b:6b:02:e0:3f:a0:ba:42:44:c5:
d9:84:a6:06:5b:12:dc:75:ae:b5:d3:81:5e:7b:9b:60:38:ca:
09:7a:df:ad:34:7f:8b:71:20:bf:43:2f:3b:75:b6:f1:f1:f1:
81:50:9a:61:84:f5:1d:eb:95:00:fd:4a:ae:1f:e4:b0:3a:14:
c4:36:53:2a:d8:90:b0:b9:83:4a:f7:49:27:1b:a0:1f:d5:0a:
b1:65:2a:fc:e2:e7:96:5e:91:20:84:21:d8:18:da:8c:d9:0a:
52:8d:2f:2e:46:a3:a4:74:66:53:df:67:74:52:2c:7f:ff:7b:
c8:38:97:20:77:4f:60:15:03:f4:60:1b:38:00:db:c3:a1:ec:
31:f0:39:96:96:8d:42:52:24:2f:d7:77:b6:c0:bd:3a:6f:2d:
70:72:e4:52:53:b3:84:a1:f0:51:e7:00:55:7b:7c:f0:26:75:
26:f6:b3:30:2a:0e:fc:4e:df:36:d7:7e:4a:33:b5:c1:22:cc:
f1:8b:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client