Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: dIJ+hHncISyPr1U7qxHEikffgmc0ytvJ+21OB7YdLKk=
Subject key identifier: F3:6E:93:24:42:EE:4F:66:33:B4:45:39:4B:44:89:5D:01:CB:58:71
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 0194BC3BCA066D6B9D537F6C1684D0DC8C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: OhU7IbZq2ONQwUsCaR4cUNEt7e5sSelJv4KpdbRPN3I=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ca:06:6d:6b:9d:53:7f:6c:16:84:d0:dc:8c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=f36e932442ee4f6633b445394b44895d01cb5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:7d:86:a3:6d:bc:ae:af:a4:37:22:38:ad:
e4:f7:1d:45:b2:98:15:a8:43:99:05:2c:7e:a1:9d:
0e:39:7f:df:e1:64:a4:87:2e:22:1a:13:61:56:14:
07:0b:2d:d3:6a:5c:96:bb:e1:c5:e9:ef:fe:c4:d8:
8b:c2:08:63:f5:e8:d7:26:27:cc:d6:f5:fc:6d:6c:
c7:e8:44:33:9e:06:5c:7f:ee:f9:72:70:a8:0c:fc:
59:83:b1:3b:1f:a6:27:35:90:07:bd:47:99:e3:2a:
9c:86:8c:0a:4e:22:9e:10:67:da:19:c0:26:32:87:
70:4a:db:9b:81:2e:cc:cd:95:c8:69:40:fc:81:e8:
bc:db:0b:77:67:b6:b8:a6:f7:8f:e9:d9:44:22:9c:
53:48:b6:10:0e:03:33:75:a8:2f:21:9c:f4:2c:f7:
9a:e0:a0:ac:fe:4d:13:a8:e1:53:1b:d0:9a:a4:07:
8f:5d:fa:b2:4e:2e:fa:61:96:4f:e8:90:2d:1f:75:
62:7a:4a:85:45:c3:51:97:5c:c9:8d:88:55:7e:29:
b5:5e:09:06:bc:cb:d1:8e:cc:86:a3:52:f4:3e:50:
ef:e6:c0:d1:ad:c5:42:17:c9:f4:52:cf:d5:02:a1:
f4:e0:02:01:23:f7:47:70:14:d1:c9:d2:ba:29:ce:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6E:93:24:42:EE:4F:66:33:B4:45:39:4B:44:89:5D:01:CB:58:71
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:04:5d:c1:07:8d:a2:53:17:dd:8c:85:1b:55:19:68:14:d2:
70:0d:4c:72:28:65:82:c8:d7:ed:0e:08:8e:ff:58:fc:d1:3f:
eb:4c:4f:6c:c6:34:0d:4b:c3:77:b3:a9:e9:ad:a6:7f:92:a1:
79:c4:57:65:f6:cb:6c:49:94:7c:d2:0f:c1:d1:cb:e1:8e:78:
4d:66:ca:47:21:c3:eb:62:56:71:99:93:97:10:72:cd:69:6f:
d2:5f:74:c7:e0:be:72:69:2f:07:af:87:ac:f9:f6:f1:5c:96:
78:25:58:89:50:7c:31:61:c3:3b:04:c8:d5:68:b0:74:b2:6f:
53:60:fe:a3:c7:d8:e6:a6:b2:3e:29:70:01:29:e6:20:5f:64:
0b:7a:13:3a:06:0c:f6:43:46:bb:a9:6d:db:da:2c:a8:6c:60:
b6:6b:15:1b:cb:aa:ac:01:e1:54:50:0a:33:c7:2d:1b:ce:77:
25:c7:3a:fc:42:20:e6:b7:33:12:f6:69:25:95:1d:7a:b2:1a:
4e:62:43:5a:d0:39:49:c6:03:e4:b0:b3:04:59:48:6d:9b:33:
58:a0:54:39:70:36:4f:cb:9f:a0:83:32:35:c1:43:2e:00:ab:
bb:b6:a7:d3:6a:8e:24:f8:1d:69:96:99:98:4f:04:99:6c:22:
4a:03:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:53 2025 by rpki-client