Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: OcXdhJeaphJ5VlQjjV8fgsZmwkqPIke8bpr5l0f4+h4=
Subject key identifier: A3:81:CC:25:95:10:6D:1E:B8:33:92:A2:96:03:BD:22:25:F7:13:12
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 0194BC3C5830DC5FE93597A7EF0CAD8E70E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: es/HwhMln6n1qhpI2ls82F9q4tK2tz59JO4AMCBnHxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:30:dc:5f:e9:35:97:a7:ef:0c:ad:8e:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=a381cc2595106d1eb83392a29603bd2225f71312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:4e:60:f8:48:17:6c:c2:b6:fa:a2:2e:ab:
0c:13:5e:b5:60:a8:cc:ad:be:e2:39:a6:75:da:fc:
3b:f4:55:eb:2b:5b:f2:5b:e9:ba:f7:3e:09:92:95:
53:c6:47:4c:e6:01:a1:b1:ff:3d:20:b2:12:53:b8:
59:20:d2:83:15:b3:1f:97:8e:5f:aa:ae:11:15:93:
0c:20:35:7a:95:e5:46:3c:cd:13:8f:20:fd:3c:de:
e3:f1:77:15:d4:1e:0f:8b:19:7d:97:d5:01:b9:39:
d3:59:dd:f7:a1:7d:11:f3:20:32:93:e5:ab:f4:83:
71:09:80:22:63:f3:c7:c3:b0:b1:ca:c0:a8:70:05:
b5:77:63:d0:78:73:39:3e:cd:24:ba:e8:c3:13:a7:
97:9e:e1:be:b4:24:bd:99:77:64:3c:66:7e:2c:9e:
4d:1d:a4:ac:a0:e3:0a:a1:aa:85:74:06:41:c2:9a:
87:21:be:52:c5:ac:1b:95:98:ee:7e:db:90:27:87:
f9:75:7c:93:76:c9:a8:73:41:35:6f:fd:30:65:1d:
53:68:01:a1:83:02:3f:2d:0f:8b:d7:3b:e7:17:8a:
21:6a:35:6c:51:26:8e:00:17:62:b2:6d:26:8b:3d:
20:85:fa:c9:3f:cc:9b:56:8c:9a:bf:65:65:0a:2c:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:CC:25:95:10:6D:1E:B8:33:92:A2:96:03:BD:22:25:F7:13:12
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:df:55:2b:52:ed:72:1b:e6:3d:8b:52:7c:d7:da:66:59:76:
b2:67:13:ef:46:57:c6:63:8e:07:6b:83:69:78:c1:55:e5:64:
6d:13:57:51:12:7d:a8:09:6d:88:46:de:49:29:e6:ee:95:e3:
c1:d5:b9:60:25:8f:99:c5:ed:8d:06:df:7f:0f:ce:c7:58:2c:
62:a1:38:ad:c2:38:ec:3f:41:a7:ad:fb:0f:c2:76:9b:29:8d:
7c:3e:c0:31:0e:c9:be:26:01:21:b1:31:5d:d7:75:a3:f7:1a:
f9:ec:72:35:35:2a:a2:43:94:6e:d2:21:df:e9:c5:e5:41:3c:
65:e2:dd:13:62:7d:17:45:fa:ba:2f:9f:fe:fd:b0:25:d9:ae:
aa:5e:5d:fa:57:c4:92:61:cc:6a:3f:5d:06:04:a2:32:6c:c9:
08:fa:a2:1c:c2:03:3d:c0:14:97:6f:0c:42:e3:a3:09:bc:99:
19:cb:54:6a:36:2a:38:c4:44:49:07:a0:c5:7c:2b:c6:95:61:
f4:1c:ed:07:d7:99:3b:a1:af:01:19:dc:d0:46:69:76:b1:4a:
54:6c:2a:3f:e7:50:11:f6:96:59:aa:47:d4:72:52:1a:c2:b3:
9a:f9:de:bd:04:c1:ed:68:7d:d7:f3:2a:a0:e1:0f:5a:90:41:
7f:e6:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:00 2025 by rpki-client