Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: /nRpcvutRCkY8/bBNzSPDld47z4RppaJVewn8L4DXOg=
Subject key identifier: 70:06:7E:CC:6D:E0:96:75:26:60:5A:9F:9B:62:B5:3A:56:7D:7B:EB
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 0194BBCE60FC5DF156EB19D7F11122C238B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0A0F
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: pbNR3mGE5mz02kyKADg8QUpR7ZopJ1iiTarTvRDE2lg=)
2: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (hash: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:fc:5d:f1:56:eb:19:d7:f1:11:22:c2:38:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=70067ecc6de0967526605a9f9b62b53a567d7beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:01:29:9c:b2:29:4b:63:bf:75:a7:df:22:
68:df:e3:39:47:4c:18:11:b7:e3:2c:91:66:01:a8:
bd:e1:dc:fa:24:70:6b:c6:cf:cb:84:65:4d:94:77:
4c:64:db:6b:8e:b4:cc:3b:55:e9:86:ad:de:5f:79:
41:0d:e2:71:a8:e6:3e:53:07:be:e9:45:b3:02:4a:
56:48:c5:60:10:a0:92:0c:0d:17:67:16:db:0b:cd:
dd:e9:96:c0:a6:e2:32:4e:39:d4:d1:7f:af:c4:d9:
2a:c7:6a:9a:da:ce:f6:26:d6:58:98:b5:5f:dd:3c:
6b:72:a2:fe:6d:81:71:0d:30:31:64:4d:2f:ef:47:
70:f3:85:2c:3b:9e:82:5d:0c:1c:02:2d:f0:b5:c6:
c4:4c:99:d9:d2:0f:24:ff:29:5f:37:b1:17:63:2f:
67:b2:f6:81:e5:14:2d:13:1d:c4:63:5b:e8:8a:5d:
98:bf:5b:c6:00:af:c0:0d:83:0a:9a:70:b3:61:fb:
9a:47:37:c2:9e:1a:9c:53:42:b4:be:37:de:dc:58:
58:66:16:43:0e:16:0a:1d:73:0d:bf:e0:72:06:cd:
58:0a:30:cc:ad:22:62:a4:79:ab:15:a5:04:fe:84:
d9:cc:a9:de:c7:8a:0b:82:ed:1e:d1:a9:b4:80:11:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:06:7E:CC:6D:E0:96:75:26:60:5A:9F:9B:62:B5:3A:56:7D:7B:EB
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:94:f1:39:76:5b:05:41:23:62:9e:58:88:dc:96:58:82:4e:
5e:2e:b6:99:4d:41:08:ce:bb:8c:53:24:b3:8a:d3:d8:a8:5f:
91:7a:fa:8b:17:e4:1b:06:c2:29:b8:26:3b:4e:ff:a9:b4:b6:
70:62:fe:6b:b6:47:c8:44:e4:12:8f:be:6a:7f:e8:c5:91:d9:
c9:f2:b9:f4:32:38:93:fa:f0:3c:40:2b:34:ac:64:94:f2:3d:
cf:4c:c3:83:0f:23:ea:43:a9:c1:2c:81:24:b1:07:47:73:cb:
cf:a9:ab:ce:80:3e:48:42:bd:67:43:56:64:99:f7:a6:6a:55:
9c:9d:ee:22:41:3c:37:2d:ba:8d:ad:51:e6:9e:31:32:e0:a7:
20:ef:38:9d:6e:04:52:cf:fa:ba:18:5a:5f:5e:2b:35:6a:54:
3b:bc:a3:d8:1f:c7:e6:56:f5:19:2e:03:80:77:e8:8b:c0:90:
74:8f:a4:82:38:73:10:37:43:31:b4:48:71:30:7b:64:f1:8e:
a0:9f:bc:5f:f0:17:ee:0c:8f:65:35:85:dd:73:00:3b:d7:7c:
ab:9a:22:3e:72:12:f0:e9:ba:64:ed:23:0c:4f:41:23:76:4c:
76:31:59:ae:a3:7e:f9:0a:ad:03:df:5e:c5:3b:6c:b5:17:61:
ae:7d:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:04 2025 by rpki-client