Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: ZzTWzmdPPkwm2HuiaclmJlIHtmXbGe7KqZPTIk+nkKs=
Subject key identifier: 8C:57:44:D6:CD:22:18:36:97:D9:3C:97:E7:60:69:89:86:1A:A5:3D
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 0194BD17CAD6D737DF81D0425F7998962620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0315
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: WTtTb8eeztWTDx9GBg7Yl6wVkR1BCh3w98E5lRmZ1DA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:d6:d7:37:df:81:d0:42:5f:79:98:96:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=8c5744d6cd22183697d93c97e7606989861aa53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:1d:9a:98:3a:0f:89:95:48:54:ac:b9:8e:
5b:06:28:37:37:92:15:18:d1:bc:af:d3:a9:1e:b4:
12:10:47:a5:22:e4:18:93:d6:f9:31:6d:d9:94:ed:
ab:16:23:7d:5a:cb:13:6c:d3:0d:18:8d:a4:6b:08:
71:e2:7c:a6:db:9e:4a:e3:fd:95:86:83:58:82:60:
e8:77:ca:b5:20:62:02:a2:f2:cd:1f:69:da:94:76:
a0:05:23:5d:cb:9b:cc:1c:a1:d6:25:c8:d8:1a:9e:
de:18:bb:88:f1:fb:39:de:6e:50:75:23:c5:bf:0c:
7b:58:31:ee:15:f7:2d:18:a7:3d:0a:a3:e6:fa:b6:
39:48:18:53:4e:06:32:d0:8c:8c:43:8f:ad:4d:6a:
7c:81:bd:30:80:4b:24:38:6e:65:23:ac:94:5f:cb:
55:c2:09:6e:57:4a:19:2d:ed:cb:03:fa:f4:c0:7c:
39:90:53:4a:82:05:56:9d:a7:9e:33:b2:b8:de:a9:
52:27:4f:42:b3:36:82:83:ee:25:ef:2e:2a:a7:1f:
2b:4c:e0:0a:46:3b:77:d7:76:19:c4:70:07:b8:98:
b4:91:34:14:08:65:c6:24:ea:bb:f2:52:71:0c:bd:
24:4f:18:02:b0:b6:24:82:39:a5:74:af:9f:ea:83:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:44:D6:CD:22:18:36:97:D9:3C:97:E7:60:69:89:86:1A:A5:3D
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2b:9b:dc:d8:89:b7:3a:13:7b:50:78:77:8f:cc:30:e9:37:
43:61:4a:24:4d:b0:da:43:9b:bd:ed:3f:29:c6:d2:f4:7f:4c:
07:b2:a9:87:5b:81:a1:38:e6:4d:cd:4f:3d:cf:85:77:6e:8c:
fc:13:c7:28:8e:fe:20:72:49:d2:71:7b:ab:b8:cc:3d:c7:4c:
82:af:c4:ab:35:2a:32:72:54:26:96:4b:8a:7c:34:25:58:9f:
b0:af:ab:25:b0:a3:3a:af:a0:29:10:33:60:19:f7:74:27:3e:
79:03:cd:10:16:66:e6:42:ef:d0:16:89:6c:3c:c6:50:67:cb:
b7:41:db:8d:c8:c5:00:5d:70:ca:bc:f5:66:ac:53:ba:f3:ea:
a0:06:d0:37:88:05:a6:90:84:75:d4:c0:72:cf:2c:42:ec:45:
52:4f:8f:af:06:1e:7c:cc:05:a3:ce:60:95:66:30:a6:61:e0:
fa:57:84:17:9d:ed:0a:bd:4e:41:20:12:8e:a3:aa:8d:4b:c8:
ce:c2:5c:a5:3e:9c:d6:5c:9b:12:a6:34:d6:7e:b7:3d:1f:fe:
b0:de:d4:6d:f0:c7:e7:3b:a7:da:2b:07:1d:26:89:81:45:50:
9b:c8:0c:d9:d6:92:a8:ef:06:dd:1f:34:a1:94:3e:e5:88:11:
1c:02:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client