Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: Z/0Jydb7uXuz2dQAMs6mNfSpkZGJ+G19hT8SC4UVILM=
Subject key identifier: E1:7A:A9:F8:32:5D:EA:17:AC:D2:A7:18:19:D1:06:47:C3:72:8B:C3
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0194BCE0C753A877C5ACC1A73FB4A54732C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: tO75xbVvh6l1cEeZzpqDzWx+2GGg+y48KTWRM6BeZgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c7:53:a8:77:c5:ac:c1:a7:3f:b4:a5:47:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=e17aa9f8325dea17acd2a71819d10647c3728bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:b5:cd:39:0e:7d:70:75:8b:98:df:a5:f2:
80:ac:0a:e0:88:84:7d:a3:a1:6b:e8:17:db:36:4a:
e1:5e:73:4b:5e:fc:d6:f2:ef:32:0a:ea:4f:1c:0c:
8a:54:98:73:c5:0f:8e:3a:a7:88:fc:e8:13:6e:27:
70:72:11:0d:94:7c:3f:eb:33:cb:28:ed:e2:6c:16:
1c:23:6c:9a:4e:5f:a8:c8:9d:3e:2b:1e:f3:92:37:
d4:b5:be:a7:8b:80:90:71:07:0d:c6:bf:ef:03:ae:
8d:23:02:87:6f:28:80:47:b7:ff:9b:b2:a8:55:0e:
10:2f:0a:11:dc:54:e3:86:0f:75:83:19:11:0e:9c:
a5:53:f0:ea:b3:53:5c:78:c8:93:07:5a:77:c9:a9:
66:14:0b:60:61:34:99:ab:c0:f1:a3:d6:1d:b6:b6:
3b:a4:fb:5b:c7:ff:a8:70:e1:1d:e0:bb:75:46:99:
be:a2:6b:1b:9b:0a:af:1a:ea:12:d9:a6:23:3d:aa:
9f:90:89:45:fa:fb:a3:67:76:fc:3a:b2:26:ce:bd:
e5:b4:18:2d:7b:22:75:c7:58:cc:92:45:36:58:37:
98:c8:78:c3:c6:8a:46:a9:02:82:73:d9:94:18:54:
29:f8:cd:28:86:12:f7:48:62:f4:44:50:8b:c4:8e:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:A9:F8:32:5D:EA:17:AC:D2:A7:18:19:D1:06:47:C3:72:8B:C3
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fc:d2:cf:e2:1f:d0:d6:8b:90:f3:2e:09:ae:00:04:31:ff:
2f:f5:94:e9:6b:86:b4:59:ed:b9:21:fd:50:bd:1a:9e:52:c6:
6e:84:29:0e:d9:8a:4f:74:d8:07:de:6d:6e:8c:e4:61:c0:ab:
86:23:78:aa:d4:ac:ba:9d:5a:95:93:dd:0f:35:82:2f:b3:52:
05:5a:1f:9c:51:c0:e3:79:83:ce:78:2a:db:f3:5f:40:96:6f:
d9:2e:4b:52:09:79:74:a9:88:ac:10:89:17:53:ae:8e:d3:84:
82:d4:c9:ca:9d:80:99:d3:a2:1a:9e:36:85:f9:04:99:08:79:
01:6b:c1:94:40:97:2d:76:d7:d8:81:b1:89:11:33:df:62:da:
81:33:70:c0:ae:62:80:bf:3f:3d:c1:aa:ff:98:9e:d5:9b:7f:
6b:e6:aa:c5:db:83:81:bc:e2:d5:4f:e6:64:61:5a:ec:2a:f5:
5a:6d:15:ba:b3:89:41:b7:ee:f6:a6:c5:9c:31:15:68:04:10:
24:b5:a0:ed:18:39:6d:c6:23:36:1b:5e:b0:fe:a5:99:3e:f8:
68:d3:c5:90:e9:b0:7c:ec:63:8c:03:ed:f7:7b:d3:4c:b3:f7:
63:30:f4:16:0a:73:82:1c:f2:2c:c0:6d:2a:34:96:cb:c6:3a:
4c:b0:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:23 2025 by rpki-client