Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: 6em0pNXTWUqeQCt5q/BFPP4JtdpQWRlmvCa617FhSmg=
Subject key identifier: 75:08:83:2E:CA:0E:30:1F:91:CB:CF:88:D6:DA:E7:49:79:4B:C5:19
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 0194BC3BE7B6F372CD8AE630D565F1C4A1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 10CA
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: PH2dDQGSkSU6Vt/SwHFGDxoLTGZZEWkGbHDuvp0KPMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e7:b6:f3:72:cd:8a:e6:30:d5:65:f1:c4:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=7508832eca0e301f91cbcf88d6dae749794bc519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:a3:65:bf:5c:43:00:e2:ad:50:e1:90:53:
be:ee:c2:6c:e2:67:fc:3e:8b:94:2e:20:9a:38:ab:
ae:25:79:98:ed:79:51:bd:02:51:16:bf:51:78:37:
8b:f7:04:54:a3:0a:58:50:e0:89:7c:c8:c2:b3:c6:
b5:a5:47:9f:16:eb:fb:eb:3b:c6:8c:e0:d6:5d:d3:
00:cc:99:ab:b2:93:f5:2a:b5:fd:0f:a0:1a:f4:e8:
ca:f7:50:34:70:ce:81:fa:aa:5c:7d:b6:3e:53:49:
6d:e8:8c:13:97:4d:4f:62:a5:3a:50:5c:76:09:56:
1e:eb:30:dc:4d:9e:bb:b4:1a:ad:e8:e5:34:c4:54:
95:ef:68:2d:b2:ad:93:8e:c0:10:06:18:09:ef:2b:
00:d8:30:c0:25:0b:1b:a1:19:c2:cc:e1:ac:d3:df:
03:95:d0:28:d4:c2:c0:85:de:91:35:3d:04:6c:6b:
b7:c5:78:6f:a2:9f:ff:dd:57:95:82:49:81:02:cd:
7f:9e:5e:89:f4:e3:0d:bf:69:0a:87:84:7d:ae:00:
fa:c1:70:9e:af:77:b2:ee:b7:d7:45:0a:74:53:c5:
fd:68:53:62:e5:21:03:67:2a:f2:77:cb:b4:69:8f:
39:2d:37:e3:02:84:a9:ef:ad:dd:72:35:e5:7b:40:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:83:2E:CA:0E:30:1F:91:CB:CF:88:D6:DA:E7:49:79:4B:C5:19
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:09:a2:fd:8b:74:13:2c:c8:89:47:64:43:63:11:b7:b4:
80:13:a4:5c:e5:c5:e3:b2:4a:bd:e8:c7:db:17:2b:9d:73:d8:
33:f4:be:a3:bc:7c:4b:37:21:78:bf:4f:d4:04:25:76:90:bf:
f5:df:a9:08:54:87:6f:24:2e:37:74:ae:d5:54:77:4f:47:d5:
cb:78:c6:6f:3c:53:26:41:eb:f4:f0:09:72:e3:bc:8c:af:e8:
0b:85:4f:29:43:97:27:de:0a:de:41:06:72:83:37:d2:3d:45:
a7:4d:45:53:0c:85:31:12:22:cf:ff:8b:87:9e:84:fe:0f:c7:
53:6b:cd:2a:e8:09:b4:2b:71:d2:5a:59:d6:bf:49:77:ca:86:
01:f9:f1:33:85:98:14:5f:de:c0:66:aa:67:0c:9f:58:98:2a:
08:03:26:67:05:24:fe:5d:5b:bc:58:ad:0a:78:0c:df:91:df:
0d:69:8d:33:8f:ff:5f:74:fb:4d:fa:a7:ea:72:f5:dc:5d:a5:
84:f6:1f:07:ff:54:b3:57:fa:59:30:b6:86:dc:c6:72:33:90:
98:95:32:ea:8f:b4:cf:2b:48:5c:15:b5:0a:44:e9:1d:b3:c9:
8d:c0:0f:dc:f1:e8:05:f4:a2:14:ff:25:e4:ba:70:ad:d3:0d:
42:24:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:19 2025 by rpki-client