Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: NPVR6vEBm4vEFK0DkrmQFV30K5aX6Yat6bnJihw908M=
Subject key identifier: 2B:92:B0:16:B0:EE:E9:3B:0C:57:E9:C2:15:50:83:64:EB:47:0B:00
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 0194BD17CC76EF980DCEE21D635E406D66FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: u+BFzW+ZJedCOYh2G7ulxzjfQ3Ni/zJmB4CuztPQXF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:76:ef:98:0d:ce:e2:1d:63:5e:40:6d:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=2b92b016b0eee93b0c57e9c215508364eb470b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:6f:c6:3f:54:c9:27:17:a5:32:91:79:6a:
9c:7c:4d:6a:9c:8d:ce:21:72:5f:67:0a:e5:94:60:
85:ab:2a:29:2e:6e:97:73:4b:08:a2:b2:c8:18:d8:
aa:20:fa:3c:3e:45:c1:d4:9b:7f:66:0d:9f:e5:d5:
96:ae:c8:d9:11:9b:44:f0:c1:f3:7e:78:dd:d2:fa:
ee:0a:13:99:9c:9d:db:38:a9:61:6b:4d:93:f3:fd:
97:ed:36:9c:58:7a:05:bb:f5:a2:57:57:2c:84:d5:
79:50:f8:30:ea:08:2e:df:53:f5:51:98:78:6b:5e:
f0:bf:12:26:bf:a1:ea:fc:84:f5:2c:56:16:e6:da:
d8:37:2f:ed:64:32:a1:d0:8e:31:25:40:81:20:7f:
41:f3:93:a6:50:7e:9b:ed:53:75:b4:5e:0c:36:aa:
0e:9d:f4:86:87:1f:ce:88:c3:2e:6e:e7:12:e0:16:
b8:4f:48:bf:8f:e8:fc:fe:4c:16:5f:7a:28:82:3c:
e9:b3:1c:3d:b5:10:99:51:1b:50:3a:be:2a:3c:35:
d0:6d:39:1a:91:14:ee:87:f9:b0:ed:c3:e5:d3:0c:
b8:95:d0:d3:88:a3:19:86:ce:02:e0:0b:c7:f4:11:
8d:b3:7d:26:e2:21:0b:c0:81:f1:75:5c:57:57:87:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:B0:16:B0:EE:E9:3B:0C:57:E9:C2:15:50:83:64:EB:47:0B:00
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:2c:9e:c2:35:f9:26:62:aa:63:85:f6:2a:e4:86:d6:cc:
02:4a:af:43:9a:14:dd:21:d0:67:1f:86:df:8e:fb:63:3c:f5:
70:5c:10:aa:36:08:34:e2:6e:9f:1c:f2:f5:6c:5b:02:b8:66:
55:b0:40:32:3e:25:d2:b7:8b:f6:43:34:81:49:57:c7:87:a1:
e5:ed:92:9a:6a:6e:07:b9:f9:d1:13:4d:42:9e:5b:5e:5e:15:
5b:72:27:e0:31:31:b8:03:36:a3:c1:1b:e6:a2:20:5c:5f:3d:
94:a9:d8:d8:ff:44:25:c8:e6:6e:f3:3a:7f:06:be:78:f2:34:
74:42:e8:55:aa:50:6a:20:41:48:82:2e:68:28:b7:3b:5b:b3:
48:eb:1d:e6:8b:f7:cc:a1:f2:fc:1e:71:b7:27:2b:6c:5b:b7:
bc:70:37:05:4b:f4:23:fa:3a:22:3d:8a:b5:19:52:e8:4d:dc:
cf:f3:84:f7:d6:52:fb:65:4a:b3:83:8c:d7:47:4e:93:61:48:
cc:df:48:9d:d6:93:94:58:fa:11:c6:67:1e:1d:92:ba:8a:4a:
1d:5f:a6:61:84:f7:74:a2:8c:3a:2c:e7:1f:f0:7d:a0:3a:53:
ca:da:4d:9c:43:6a:0e:68:b8:59:f7:68:0c:af:2b:02:89:bb:
c0:c0:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:26 2025 by rpki-client