Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: 3wqqh4ttCfMtSqr41aKtQTlFgvcOfyrMPRZml7mSC/o=
Subject key identifier: EF:81:9E:CA:98:99:9A:AB:A4:63:E7:96:42:C8:C6:7F:41:98:A4:09
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 0194BCA9A71775CC27F7256E1E81851BAF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0BEC
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: RlEqJCo6PbfIUe6HOAJ+4oBhuFOOE0PYVexZXeHl8aI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:17:75:cc:27:f7:25:6e:1e:81:85:1b:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=ef819eca98999aaba463e79642c8c67f4198a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:5a:d0:ca:78:51:3b:19:a1:16:fc:3b:a5:
a7:76:ce:3a:3a:fc:95:9c:19:dd:3d:20:f8:56:ef:
79:7a:ca:95:dd:8c:7c:e7:40:e7:bd:f2:7c:88:10:
cc:90:91:e8:1a:a4:16:45:25:ae:4f:77:30:81:69:
b5:74:6e:18:f7:ae:eb:79:74:55:9f:3e:ec:8b:ec:
16:97:65:fd:fb:1c:c0:71:39:68:a7:a1:13:e9:11:
e7:86:8e:de:48:24:2e:65:5a:b4:d4:3b:8a:60:4d:
b3:2b:f5:4e:c6:20:bc:1f:03:6c:8c:58:18:c7:ec:
02:3b:3b:0d:cd:13:15:fb:b0:71:fe:c2:94:9e:fc:
1c:b0:41:56:2c:44:12:bd:6e:63:8d:ec:ae:fe:61:
c2:53:86:9d:bd:7b:b1:79:f8:b3:45:dc:6c:dd:62:
58:f5:47:65:8e:17:d9:31:1f:96:ea:d2:ed:f2:98:
39:7d:39:2f:c8:dd:88:00:e5:a5:76:5a:cc:34:39:
c0:61:3d:34:27:fd:f5:e0:f8:49:79:99:51:13:f2:
a2:ff:49:30:55:80:61:6e:82:0f:6e:75:54:bd:59:
7b:d0:5c:40:98:75:d6:d4:7e:c7:51:35:ec:7c:cf:
01:e6:63:85:0a:20:79:84:6d:ee:4d:b8:80:ff:74:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:9E:CA:98:99:9A:AB:A4:63:E7:96:42:C8:C6:7F:41:98:A4:09
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:84:b2:2c:c6:79:ed:d5:a6:02:45:0e:19:74:7d:4c:fa:
48:01:1c:2a:32:b5:7c:62:5e:7a:6c:ce:61:63:61:cf:4d:a3:
27:da:49:72:21:1b:88:e3:03:8f:8b:37:6f:f8:d6:c5:55:a6:
93:43:e7:56:e7:da:d9:3b:91:e1:2b:07:c0:b6:e6:c6:e1:0d:
40:09:b9:40:c6:ec:67:e1:9c:94:9c:29:5c:ca:93:b6:c5:24:
6c:0c:5e:16:d3:f7:f7:61:55:d6:7e:86:dc:a0:77:24:b4:08:
d8:a8:1f:33:5d:48:a9:e1:fa:f1:11:98:12:84:45:da:26:6d:
38:94:7b:e1:70:89:dd:9b:4d:c5:57:00:f8:ea:e3:08:a5:f0:
5e:d4:2c:5b:9d:cd:83:89:e9:bc:44:0c:f9:06:a1:3f:83:1d:
81:82:99:e5:7e:33:d6:d9:c3:07:9d:77:fc:5c:9c:24:90:51:
d5:e0:68:4b:c0:64:4b:6f:cb:64:30:03:6f:4c:e0:a5:37:7b:
b8:a7:e7:26:b6:9f:db:30:c5:d4:71:75:2e:26:3e:f4:3c:a3:
21:fc:5c:3b:38:e9:cd:37:28:3d:55:36:e1:8a:c9:29:1d:0d:
d7:ff:2e:b0:5a:7c:56:f4:24:d9:b6:5a:a3:fa:d2:b7:37:b4:
00:d0:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:07 2025 by rpki-client