Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: hUP2WD8+ZwhrVHSJS5fw08tivcMYb21gRuobYLZFpto=
Subject key identifier: 90:4D:62:D5:72:31:1C:47:43:48:AB:93:20:C5:5B:E8:03:BF:45:F0
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 0194BC049E635F4ED366B82D4ABD726CF2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 1196
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: S/ED4qK8ITtgT0davmWn2acCOTQ8AyEj4sLHHjnVBcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9e:63:5f:4e:d3:66:b8:2d:4a:bd:72:6c:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=904d62d572311c474348ab9320c55be803bf45f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:56:e7:f7:30:75:d5:fb:b8:35:b1:c0:b4:
76:7f:0e:34:6c:8d:7c:22:66:41:e7:bc:d4:38:38:
07:56:90:98:a2:2c:87:7e:19:4c:bd:98:db:a3:dd:
aa:1e:a7:80:78:9e:c5:65:39:93:78:d9:0f:02:ad:
05:1f:78:ef:70:04:62:27:13:f2:14:42:8f:2f:3d:
19:b5:27:2d:5f:97:7a:31:64:86:1a:c3:39:fb:be:
10:7d:d3:30:d3:eb:7a:d9:25:02:bf:3c:3d:c3:df:
fb:7d:ed:81:22:b8:fd:7f:eb:7e:9e:e0:ba:cf:e8:
60:08:57:e3:9d:ab:f8:c0:1a:d3:92:a6:fe:cf:bf:
d1:91:72:72:b6:25:80:d8:94:65:36:8d:23:9a:1a:
06:cb:27:1c:90:06:37:4e:f4:bb:10:a6:a0:af:41:
1f:e3:3d:2a:23:7e:89:56:0c:fe:27:ff:cf:5a:93:
08:a7:87:a5:ab:e0:5f:d6:72:47:62:f5:24:b4:c2:
07:a1:6f:9c:18:fc:01:b2:20:99:93:94:62:81:3e:
31:be:51:1e:df:fa:81:5f:3d:d6:99:a2:b9:c1:f3:
50:6a:96:5f:6c:36:10:ba:2f:4f:2e:0f:c0:ad:ca:
34:09:3c:a8:ec:51:39:6c:89:49:27:9c:74:74:03:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:62:D5:72:31:1C:47:43:48:AB:93:20:C5:5B:E8:03:BF:45:F0
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5b:f8:ab:ca:66:a9:0f:9e:d6:c6:99:02:2e:e9:3b:99:7a:
f2:1c:13:7d:92:bd:bf:92:f4:e3:dd:17:6f:97:5e:e7:c2:2d:
aa:a8:4d:2b:23:e4:80:9f:54:e1:ec:ee:b0:54:43:de:a8:01:
c5:fe:ff:ce:98:b5:dd:01:ff:53:0b:c1:10:32:19:b3:33:e8:
55:56:5b:be:b9:55:02:66:70:26:9c:1c:8e:7a:43:43:df:ed:
b3:b1:83:8d:25:c4:03:54:e3:70:93:fa:e7:34:b6:52:27:5c:
a6:48:61:fe:b3:d2:aa:c2:e8:26:50:ed:b3:2b:99:73:f5:b7:
ef:e2:f9:12:14:71:98:f4:42:de:0d:d9:51:5a:b7:1f:ec:55:
de:88:88:59:43:2d:70:e5:6f:e1:80:49:87:10:7b:03:7f:91:
02:2d:0d:32:85:29:28:69:29:b5:98:b0:4e:1c:75:01:a0:89:
81:bb:b9:77:f8:71:d4:d1:b8:e0:51:e7:fd:39:2e:86:02:07:
71:6e:ef:f2:87:3d:15:63:45:74:36:a0:c1:d4:ab:9b:7b:e0:
47:cc:d6:a4:c5:80:5f:30:2f:e8:c6:67:b9:c0:67:71:6b:70:
7e:14:40:bb:c6:93:50:9c:aa:78:ec:a3:92:7b:21:70:ec:4b:
19:46:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:37 2025 by rpki-client