Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: yCuJjT5ajKxpljQYV+t7QXCOHa76W6QFn60wgR5Qsuc=
Subject key identifier: 9C:20:4C:24:8D:B4:47:28:AE:FB:9E:06:6B:45:C2:D7:54:92:E1:63
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0194BC04EC053824BFAC56D0F439E8C22361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0E29
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: DNYNs6ttmA3gNBylwUFSO8LbYWLTsuxKyivLCQ3ugO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ec:05:38:24:bf:ac:56:d0:f4:39:e8:c2:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=9c204c248db44728aefb9e066b45c2d75492e163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:66:6a:a9:fc:79:1b:87:8c:1a:4e:f1:02:
f8:37:b4:9b:fb:df:c9:d5:49:25:a6:a5:58:6f:3e:
34:52:86:0c:55:99:17:a4:c3:86:6c:5a:32:12:99:
bd:f7:b3:9b:7b:53:bc:5a:45:07:db:24:22:b6:61:
c8:70:d9:08:b7:3f:f3:78:d3:0f:2e:65:de:03:ef:
b8:ff:88:f1:4c:21:b3:66:57:0b:48:cd:6f:1b:11:
6d:95:6a:81:f3:18:41:bf:48:e3:43:29:7c:4b:1c:
60:c3:28:aa:9d:23:3b:cd:47:03:b8:7f:09:a9:fb:
db:4b:5e:32:c2:43:c7:1d:91:8d:0f:93:c1:db:76:
1b:fc:51:dc:45:e5:c3:f8:64:e2:ec:49:d0:7a:fd:
7d:da:16:28:69:9f:ca:28:9d:8d:0d:68:41:20:d9:
36:4d:68:7b:59:f2:a9:9f:69:4e:62:73:77:53:50:
7a:f0:4a:59:4c:50:f9:fb:be:7b:bb:d1:c2:b1:96:
d7:64:64:7f:3d:b0:9f:61:fe:29:71:4f:1a:37:25:
34:a5:8d:c4:9d:b7:46:14:c8:ff:12:d1:0b:ec:d8:
93:c8:8b:a2:02:61:56:bc:4e:87:45:e4:13:0c:aa:
13:a0:85:fb:5b:91:bf:c6:0f:60:75:37:2d:66:38:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:4C:24:8D:B4:47:28:AE:FB:9E:06:6B:45:C2:D7:54:92:E1:63
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:d9:fe:d1:a1:a5:9f:f2:48:69:5b:89:51:aa:b2:da:9a:
db:94:f1:33:d6:30:b8:7c:4f:a2:76:3c:e1:54:f6:d6:d0:ea:
4f:34:d4:aa:04:38:ff:90:cb:0c:62:dd:ba:be:b6:80:58:a9:
c3:0e:d7:75:a1:09:71:ce:bf:08:ed:ba:61:a2:a2:7e:58:43:
22:74:01:77:29:a8:46:84:87:51:fe:3f:18:38:1d:85:13:77:
96:7d:8f:d9:37:f3:b3:39:59:81:09:e8:5e:fa:08:bf:08:d2:
c2:a1:9b:5b:39:52:9d:53:78:9a:92:47:7d:6a:e3:1a:e0:04:
8b:34:97:d5:db:24:d4:6e:a5:1e:1c:2a:e9:8c:f7:9f:6e:d5:
c0:c6:41:c3:1d:21:44:36:44:e3:dc:76:2d:3f:f9:dc:4d:5f:
ec:a7:0e:6a:c6:a7:07:bc:dc:88:79:59:dc:09:ff:0a:af:0b:
1d:39:6b:52:cd:13:c0:2a:be:cf:01:5b:48:09:cc:8c:32:ee:
72:b3:87:71:89:f3:6f:df:6d:3f:bd:9f:02:2b:53:a5:2b:f6:
a2:75:f9:de:a9:dd:99:13:eb:e0:06:7c:47:53:c5:46:1a:b0:
d8:8a:7c:8c:aa:ce:28:3e:61:00:ea:25:4d:25:df:5d:e4:5a:
57:00:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:45 2025 by rpki-client