Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: Rk0X2/QPpMV79DVIToE0X9a5JTSORxnoSvcMPBFlSaE=
Subject key identifier: 72:7B:37:57:22:79:08:68:36:93:9F:29:00:EA:4B:CB:A5:82:A7:09
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 0194BD179CE3B814364127EEE1AFB1F47D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: D9bpEg0lGOMiwfc3vCR8Ev74vAGFrQ4qkzdZYzbK7dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9c:e3:b8:14:36:41:27:ee:e1:af:b1:f4:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=727b37572279086836939f2900ea4bcba582a709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:cd:33:ad:ce:b4:a7:d2:de:3c:7d:a1:62:
7b:3d:43:fc:01:78:cf:28:e0:da:0f:8a:94:9b:4a:
de:30:df:e1:35:04:9b:3d:71:c0:d7:78:70:cf:45:
c7:08:0a:b6:2b:63:dc:35:24:25:1a:70:12:76:2b:
3b:0c:ab:b4:c0:ea:cf:1c:a7:9f:49:f8:2a:62:93:
15:dc:78:fe:5f:bc:d2:84:29:e8:6d:e6:ff:f7:28:
f6:81:f8:93:67:40:84:ef:fe:c5:2f:db:1e:46:e6:
1e:c5:1b:ca:1f:e6:28:df:9b:41:f8:bc:d0:e3:63:
e1:38:5d:1e:b4:9e:56:e9:7f:be:2d:64:de:67:39:
e6:1e:1c:41:07:21:64:c0:28:ee:11:68:82:fb:0c:
88:46:77:1b:d0:82:bd:ec:21:0a:96:a4:ef:3f:5f:
6b:f8:7d:33:ff:f6:1c:a6:e7:90:00:10:5c:be:e9:
77:25:bc:06:f5:38:bb:0a:bd:64:1c:30:89:7f:83:
a5:f9:0a:37:b0:06:ac:ff:44:ab:b4:5d:45:96:da:
72:89:64:cf:11:01:e2:81:72:4d:bd:34:f1:b8:cc:
18:6d:b5:e1:e7:dd:a0:c6:3b:59:68:4a:65:ad:f7:
7a:e5:08:ba:3d:b7:47:dc:5a:f2:b2:2b:89:18:f7:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:37:57:22:79:08:68:36:93:9F:29:00:EA:4B:CB:A5:82:A7:09
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:63:4a:1f:43:8c:29:bb:35:8f:78:a7:22:27:17:99:55:26:
f9:52:31:52:01:b7:cf:11:be:5c:07:89:4b:1e:93:9a:cd:2e:
27:2c:aa:4d:22:96:8f:7d:8f:69:13:08:80:e5:49:4b:61:b3:
17:96:ac:6f:87:4d:88:43:ed:d1:ec:5e:98:40:35:80:da:a6:
5e:b4:b8:01:cc:50:28:e8:9e:3c:7e:89:5f:af:fe:7c:50:de:
15:fa:6d:98:00:75:4c:c5:3c:b6:71:5f:b2:1a:59:b1:19:b5:
84:97:09:48:24:7b:03:32:0e:39:56:6f:f7:92:55:14:2e:f2:
e9:2c:70:f9:5a:dc:e3:c6:f9:fb:45:20:39:af:65:26:74:c7:
e4:7d:8c:6e:2d:df:22:bd:90:64:2e:43:0b:22:d7:cd:41:c8:
ea:e9:92:5f:a0:bd:4d:ec:fe:42:ef:98:e4:65:d5:37:e9:8b:
a7:2b:b6:5f:67:65:a4:71:ea:6d:cb:4c:31:a4:84:77:c9:b7:
1c:17:4c:a8:e1:13:8f:d9:b4:4a:c8:a3:82:1b:a4:c0:85:83:
fb:91:77:dd:fa:fc:d4:83:04:7e:05:1c:de:cb:ac:95:df:93:
39:b3:10:8c:9d:23:ae:e8:cb:d6:5e:34:43:59:91:90:56:da:
c9:69:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:53 2025 by rpki-client