Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: OL55SLNV7E8WQSs7xvW2bQ9p1sE6F1jsiJdOnBXs2s8=
Subject key identifier: 58:4C:FA:24:DF:E3:57:3F:CC:26:29:D5:D7:93:51:C0:20:06:BD:DC
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 0194BC3C5718C287EFE313D6DD12BF02315E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0924
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: /ZrbaPYIdSTPd9VAkb7rOTSdvt/u10CqbkDahdz3G+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:57:18:c2:87:ef:e3:13:d6:dd:12:bf:02:31:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=584cfa24dfe3573fcc2629d5d79351c02006bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:6c:6b:93:bf:25:9e:a8:20:4f:6d:a0:51:
17:79:6f:dc:37:cf:2d:45:58:f4:9e:48:ff:75:66:
af:b1:e6:19:34:8e:8f:4e:99:69:ee:44:eb:f4:97:
42:e4:38:cb:c7:74:a1:f0:67:a6:d0:b7:5f:37:a9:
39:98:bd:65:18:3f:15:f9:4a:98:84:ec:dc:11:d8:
06:f3:59:2f:a5:a8:65:79:be:09:aa:be:28:86:cc:
4b:b8:4d:42:4b:fe:3d:1b:5b:11:14:08:d1:13:9d:
18:b9:ba:93:a2:7d:93:96:f5:aa:8b:2d:dc:41:1f:
81:a5:08:73:25:06:58:a0:a6:23:5b:12:8f:24:12:
04:5f:aa:c8:b6:4a:6e:95:bf:68:fb:64:80:c1:df:
aa:f3:52:0b:3a:2f:78:92:86:23:ec:34:a3:1e:32:
91:f2:74:a5:33:54:3d:d8:1b:1e:25:c6:43:1a:a9:
b5:3b:ca:c5:aa:e0:f6:0d:ec:4f:d1:be:5c:74:7c:
dc:a2:43:de:6a:a2:80:fa:15:70:f1:20:66:50:9a:
9f:b3:36:60:f4:36:5c:c6:55:7b:63:22:fc:d2:c4:
3e:ec:ff:78:3d:64:57:26:27:f6:dd:96:ef:52:e0:
3f:d6:f0:82:d7:95:33:0f:81:38:da:74:01:04:0c:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:FA:24:DF:E3:57:3F:CC:26:29:D5:D7:93:51:C0:20:06:BD:DC
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:30:ec:5c:b8:66:f6:b5:21:e2:e0:d1:28:19:f1:1a:08:9f:
02:f2:72:5d:5e:e7:eb:3e:5b:a7:b4:ba:2d:8b:4e:39:51:f3:
0b:a6:13:76:fe:76:ad:6a:67:18:1c:4d:9b:5c:26:1c:9d:ae:
0c:ad:00:5e:bc:d6:f9:fb:e7:41:25:9e:f1:5e:0f:ae:0f:a6:
f9:f4:82:0e:fe:27:9d:90:52:b8:16:40:3b:15:b7:20:a2:7c:
69:69:fe:08:7e:d1:21:49:6d:69:2c:1d:03:31:63:cd:2f:d2:
e7:2c:90:34:7f:a3:b5:db:6e:19:ed:bd:88:99:46:3c:a0:e0:
4f:3e:9c:a9:26:bd:5c:bc:8e:3c:6c:ea:e4:61:f9:01:c2:f3:
d5:a6:47:49:14:2f:a0:6b:ca:c7:28:63:eb:97:5c:62:fe:b4:
d3:e8:0c:5b:37:a5:bc:cb:6d:e3:78:44:e2:47:5a:a0:d9:21:
a2:b0:1e:4f:49:e6:b0:89:0f:3f:4a:98:03:45:e5:d8:99:7f:
b0:9a:4a:64:6f:25:06:0c:f0:1b:cd:8b:1b:05:c3:ed:98:cf:
b4:0b:75:40:e2:70:0c:d3:92:fd:3f:bd:fb:dd:df:71:fd:8c:
f5:76:5f:3b:6a:09:d3:b2:60:d5:d0:d1:4a:96:1f:5d:36:8d:
b9:73:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:04 2025 by rpki-client