Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: vKZvVg/cmUtY2PFUmo05kc9Y3hv0xkmmDUo5ZmFO0sw=
Subject key identifier: CD:42:ED:28:D2:18:16:12:6E:56:65:F8:53:67:62:CA:D8:74:B5:2F
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 0194BC72A14F3033595E6F945103B3CC1D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 06DD
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: egM_lo5hkg5KA7_uP-5h7pmD4BM.roa (hash: LWEk9cOjEXdGtew0n3bgwHhe3Zn8McfotK81AHI+3M0=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: MnlbaD+MA3R9VZdBYKHJ7swKFE3YGdP0WbdFTLi5jIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:4f:30:33:59:5e:6f:94:51:03:b3:cc:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=cd42ed28d21816126e5665f8536762cad874b52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:f1:1e:19:f0:fd:a9:17:bc:d0:98:55:c4:
a7:f4:0c:fe:ae:15:98:5e:be:4e:7d:a3:d6:a2:51:
86:a4:5a:ec:60:43:67:12:64:98:84:dd:0b:3f:c6:
73:c8:da:54:57:a7:cc:42:83:7d:df:ff:a8:a5:4f:
62:b4:53:16:e9:4a:2a:bc:07:0d:3c:34:39:84:e6:
da:1b:6e:5a:b2:0a:46:79:29:89:7e:ae:da:f8:99:
d5:27:98:2f:8a:38:72:00:43:68:a8:a9:e5:da:8d:
d4:c9:bb:c9:33:0a:0a:a2:c5:bb:85:19:cf:0b:6c:
7d:d2:5e:42:83:b6:b9:a9:2a:50:96:1c:55:dc:4d:
b4:6b:6a:f7:6d:48:35:ff:cf:40:a5:72:75:76:01:
cc:9b:cf:8d:d8:cf:bc:55:51:f5:bc:3e:0d:2f:e2:
a8:f5:39:4f:63:72:4f:a4:d7:69:df:e1:3a:a7:5f:
5d:fa:a6:1c:c3:c8:4f:b6:57:27:70:e0:c7:f4:04:
67:e9:f7:62:ca:6b:e8:0c:02:09:ad:36:a5:d1:91:
f9:97:c6:7c:3f:75:ce:74:9c:b6:01:61:97:d0:ae:
d2:22:66:95:f4:10:08:18:df:a2:96:d9:99:74:aa:
dc:95:a7:ec:e2:bd:3c:6d:75:dd:c2:08:45:86:59:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:ED:28:D2:18:16:12:6E:56:65:F8:53:67:62:CA:D8:74:B5:2F
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:f8:a2:b7:3b:43:70:56:fa:dd:1c:1e:32:31:af:8a:17:
01:25:e7:09:59:b5:ff:06:35:b0:22:e2:b2:6c:7f:82:d2:e5:
a9:d7:e3:bb:0a:c1:87:b1:90:bc:92:d7:9a:e9:d8:c5:fd:0d:
02:47:ff:9e:cd:c5:dd:3a:dc:66:d1:10:92:61:81:09:a0:cc:
2a:9c:76:3c:3a:10:53:43:d4:ba:a2:8c:9f:ac:82:13:d9:f2:
d1:13:9c:8e:a2:b3:0c:21:cd:aa:02:c8:e9:0c:0b:3a:43:c8:
5d:06:bb:de:1a:96:fd:db:b1:74:61:a3:88:35:54:6b:cc:90:
99:fc:d1:65:b2:f4:35:25:f4:e4:5b:4d:45:4b:cc:0d:85:31:
e0:dc:81:e5:ac:9f:ab:b9:9b:52:e0:c9:ee:e5:a7:42:30:61:
f7:8a:b1:ee:c8:47:a7:43:99:45:a3:b7:da:77:e8:73:91:6b:
93:b2:1f:a8:f3:2f:29:5e:c2:07:47:d6:37:a7:12:7e:af:05:
80:02:54:d0:da:7c:10:5f:62:bd:bc:5a:44:63:3e:ad:d3:c6:
e7:4d:b7:3f:30:8f:de:23:00:c5:25:f9:11:c9:98:36:bd:bd:
72:22:95:a2:b3:09:8a:19:fe:16:92:d7:c0:8a:a9:00:4c:2c:
75:b1:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:35 2025 by rpki-client