Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: 2/aMsmgCkPKlUUCb3/woytHbkYilE9JCLmYZ6eWoPiQ=
Subject key identifier: 49:05:B6:3F:6F:E7:5F:F0:0B:DD:50:B6:78:AF:F3:54:87:CF:D0:03
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 0194BD17CBF94044461D1F6F4A2B4222F68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 0ECC
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: h1BYyUZXbth6jWsH8j0vLZBLG+leX4UeW8WwvuzKeb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:f9:40:44:46:1d:1f:6f:4a:2b:42:22:f6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=4905b63f6fe75ff00bdd50b678aff35487cfd003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:ec:13:d2:69:2d:5c:1a:36:18:ab:22:90:
b0:7e:95:3b:8b:f6:cf:a0:d5:59:e6:39:f3:27:6c:
ea:93:41:f4:da:8f:cc:a4:87:45:49:b3:c2:9e:c0:
20:40:3d:41:7a:cd:50:51:47:85:48:60:d2:fb:9f:
a1:78:2e:f4:59:4d:1d:41:c8:ed:dc:6a:d5:df:0c:
43:ca:63:f3:86:19:b5:d7:64:6f:95:dd:50:67:f6:
0c:01:0d:38:7e:f2:d6:0b:e2:16:58:1b:1b:27:84:
b1:da:c2:b3:2b:3a:47:98:1d:c0:6d:e2:98:1d:c1:
99:14:e5:f1:e4:6b:45:8b:ff:07:69:ca:c7:6b:0c:
d8:b2:ee:49:d1:8a:f9:ef:9e:8f:76:18:57:5c:23:
d0:8b:18:bf:8b:cd:4a:b6:dc:39:12:06:58:80:4e:
d1:ed:42:61:7d:01:ab:94:b2:ad:d1:4c:93:85:57:
cf:e2:e2:d7:a5:9a:b5:df:7f:65:21:b2:ef:a3:d9:
2e:47:c6:cd:13:6d:93:51:aa:a5:94:56:dd:23:41:
82:03:f6:8f:ef:62:93:48:b7:99:60:f5:77:1f:4a:
cf:40:2d:ec:93:06:ad:02:e6:5b:fc:ca:66:26:c1:
c0:87:4a:c7:ce:6f:e7:71:32:07:25:dc:17:0a:9f:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:B6:3F:6F:E7:5F:F0:0B:DD:50:B6:78:AF:F3:54:87:CF:D0:03
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:75:07:49:ef:16:37:75:1d:d6:da:7c:27:91:21:d5:cb:5b:
c6:f9:96:c4:ca:95:e5:2f:15:13:08:1a:8e:15:a9:da:e5:0e:
dc:e0:40:50:ca:b4:3d:69:76:97:ec:37:67:54:49:15:4c:27:
f8:33:9b:c3:d8:dc:40:b7:e7:fd:37:bf:1b:63:2c:28:2b:41:
8a:52:dd:15:69:7c:2f:3e:87:38:e3:51:cc:6c:d6:27:56:bb:
67:63:66:d6:04:4f:75:dc:2e:0a:f7:54:62:67:d6:b8:7c:15:
75:5b:d3:88:11:29:e7:f7:62:ba:80:f7:68:c4:60:17:92:07:
ce:cb:1e:ae:4d:85:df:e6:9c:e8:ce:f7:49:07:1a:b1:74:3a:
c9:f9:fd:38:c9:6a:a1:d6:97:d7:c0:7e:53:43:20:a2:98:57:
f8:dc:b2:74:2a:12:f1:2d:13:a5:02:7e:d4:be:e1:1c:0c:5e:
5f:83:f1:56:01:fe:55:c2:a0:01:27:6e:c0:7e:3d:5b:bf:6d:
53:96:62:78:d6:33:bb:96:3f:39:78:18:67:b0:dc:68:de:f3:
d6:b7:0e:53:db:e9:42:dc:ce:0d:69:ef:d4:8d:37:cb:4a:fb:
78:80:00:00:c9:17:27:4e:13:97:30:50:bd:7e:10:c4:08:92:
39:ce:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:01 2025 by rpki-client