Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: Sovv6EU9bil8EO+ojVlpu3epcWoEMH8Il5dCPdJtDdo=
Subject key identifier: A8:BA:F7:B0:56:59:4A:E7:F4:75:A6:AE:D6:B1:61:E5:D1:52:64:68
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 0194BD4E37070812796F6B390DB9870E0E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 09
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: 3nedGrjfPvShnnlvactMC8gOQyzfY/VUVv1FqY9Xxng=)
2: 2_qP_wNq8AHUW-EoyL-lwp2z10s.roa (hash: s2dQbzadExO8v0zgkawY9FWp62vIpIla71iZ5vtmqv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:07:08:12:79:6f:6b:39:0d:b9:87:0e:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=a8baf7b056594ae7f475a6aed6b161e5d1526468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:72:1a:82:5a:0a:9a:de:12:b2:fd:aa:88:
16:6b:5e:df:53:66:ba:40:41:4b:0d:3e:86:4f:44:
57:c1:3e:2e:60:86:12:ad:12:68:af:e2:dd:f5:2e:
66:b4:04:8a:85:58:f1:91:da:10:02:9b:14:bb:09:
58:5b:52:c8:e1:1c:d2:8a:54:83:ad:37:6a:4b:97:
fa:2e:44:e9:01:d3:ed:f9:45:84:f2:c9:2a:70:70:
be:9a:58:c0:73:64:1f:8a:32:96:55:42:28:2c:22:
83:bb:18:87:c0:e9:a6:8f:19:2f:1b:97:ac:ec:32:
b0:de:30:f5:c8:1e:28:61:bb:3c:04:f0:9e:ff:40:
8d:55:4a:03:13:5b:70:96:da:7e:7f:34:f9:16:c5:
25:4b:25:31:cb:4b:e3:b7:cb:9a:dc:70:40:aa:d4:
07:5e:95:2a:90:28:41:d8:f7:75:bf:b9:ba:af:0b:
07:a2:c5:51:83:ad:4e:04:93:38:89:6d:90:47:b2:
d1:30:6c:45:96:e4:0c:78:62:2b:4b:96:a0:48:d0:
b3:5c:b1:c0:67:75:4f:89:9e:c3:c1:ba:a8:0c:69:
8d:5c:99:f4:7b:b7:e2:4e:d4:66:51:05:c4:0c:e3:
4a:ea:ee:44:ca:5c:80:e3:1a:01:b3:6b:eb:20:45:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BA:F7:B0:56:59:4A:E7:F4:75:A6:AE:D6:B1:61:E5:D1:52:64:68
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b9:13:56:ae:dd:96:b4:73:a8:d2:c7:f5:1d:b0:73:c1:e4:
33:8a:52:95:b7:88:1f:d4:79:35:21:6b:89:45:d2:b3:80:39:
b4:3c:4a:d9:c3:81:b9:82:77:ef:77:48:0c:1c:4a:84:9c:24:
2e:28:18:f8:75:e2:5a:33:21:b1:70:fa:e4:19:f6:ed:d7:4e:
8b:d1:57:8b:5b:cc:e6:9d:67:c9:99:fd:29:69:84:f2:03:ee:
c8:26:a5:c6:8b:44:59:06:6f:24:d5:33:5c:d4:04:f0:0a:e5:
f8:aa:45:3a:d7:fb:11:8e:15:69:98:ea:5b:92:b8:a2:fc:bb:
9d:03:50:a3:10:4d:f5:e6:c4:7f:0a:a7:f8:24:4b:19:26:61:
33:eb:31:29:49:71:d5:0d:6a:f2:9d:aa:83:47:cb:cd:9e:61:
c0:b7:60:f3:cc:a0:2b:22:d4:3b:78:63:23:c5:70:99:0f:fb:
83:b4:2c:07:26:4a:df:ea:a2:18:e5:f2:17:d5:d8:9d:4a:6a:
b2:28:29:55:a0:92:5a:89:d5:02:20:2c:21:d6:eb:09:fc:16:
29:bb:6d:3c:f2:ec:83:9c:83:0c:25:e3:1e:4b:3f:d4:1e:e2:
1a:34:95:3b:55:09:d4:fc:67:f8:f5:74:8f:36:36:2b:15:40:
af:63:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:18 2025 by rpki-client