Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: IjcJavRraKmeLtfq7XL6h4WiZci7QTDPwNW1AaDhUVQ=
Subject key identifier: F3:FE:2B:BE:03:61:B0:AA:F3:5B:11:CC:5D:4F:92:FB:52:18:13:FA
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 0194BD177413C2FCEDCD5D91A7CB03BA6B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 09D5
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: GHcWcHGDQJxbp7e2ULd2LqXPnOsuUAdn5bDu5fltygg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:13:c2:fc:ed:cd:5d:91:a7:cb:03:ba:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=f3fe2bbe0361b0aaf35b11cc5d4f92fb521813fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:d1:d5:2e:84:d8:df:8e:67:12:94:07:36:
9c:e0:e9:be:d2:2f:51:84:22:3b:a0:2e:24:fc:ba:
52:23:3b:99:12:84:99:25:d3:88:cb:3d:ed:25:2a:
a7:48:50:1f:24:b7:6e:c3:9a:3d:9c:c6:a9:43:52:
63:30:44:57:61:fe:dd:be:52:90:2a:97:9a:1b:92:
23:70:0b:ed:43:d8:84:c9:af:d6:dd:84:d0:00:31:
f5:2c:3e:c2:e9:7c:74:36:40:61:f1:43:00:cb:d5:
35:7d:f9:4d:ea:0b:2d:9d:63:b4:e6:f0:a4:e5:cb:
87:c1:56:c1:fc:ec:96:2f:3b:d3:5f:d8:fe:e8:c8:
3d:32:1b:9d:cd:1c:a2:c2:c8:85:ad:a4:85:b6:db:
4f:fa:3d:1c:9a:a5:7e:78:30:84:0d:b6:df:04:ff:
b8:f9:1e:fa:58:01:86:ba:3a:70:e0:db:e9:56:00:
0a:9a:ea:7e:c7:16:9a:35:65:93:8a:5b:17:1f:4c:
53:75:5f:92:3c:33:6f:c2:ff:22:fb:c7:38:7e:4a:
a4:99:e7:7b:9c:50:2d:7a:21:85:6e:ae:1c:80:4b:
70:47:74:a1:2e:7b:18:31:0c:16:a3:1a:ff:f2:13:
a4:28:89:cb:33:cf:c8:56:7a:ee:77:c0:c1:16:ad:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:2B:BE:03:61:B0:AA:F3:5B:11:CC:5D:4F:92:FB:52:18:13:FA
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:13:1f:2d:57:ee:14:02:22:d7:82:23:c5:05:61:c2:3b:65:
e0:ab:22:77:f2:e0:b3:49:1a:e7:4e:ab:b8:c6:55:4e:bb:65:
09:b3:24:ce:5d:7e:83:ac:f3:0b:08:ab:fe:55:7b:82:fd:20:
72:d7:17:b4:d8:00:d7:8f:e9:51:5c:2f:b3:20:80:66:63:16:
52:f3:66:d1:c9:83:b5:a5:e7:18:b5:62:f4:5d:d3:c2:39:f9:
2e:73:ae:6f:11:0b:85:ab:60:bc:04:23:9a:1f:13:53:c3:e6:
62:3c:9b:08:f1:80:54:f6:fe:42:69:d8:68:5b:67:49:f7:af:
54:8e:af:e6:96:d1:9a:75:bd:d5:ac:ae:e6:24:67:fa:05:24:
e2:3f:af:f0:7b:28:63:00:e9:00:00:3a:d5:9e:89:20:ed:e7:
7d:e7:ee:28:8a:ef:1e:49:5d:15:b3:00:20:dd:79:c0:83:b8:
80:e2:1c:f9:52:f4:7d:23:ad:72:3f:37:eb:0d:9b:73:bc:f1:
4e:b9:af:54:0a:4b:f6:54:cb:14:86:c6:b9:c7:18:bf:07:32:
a4:92:2b:3f:c3:e7:da:ec:4f:df:d1:ed:62:cd:92:54:3d:fe:
59:09:ee:83:2c:39:80:a5:36:4b:46:4d:5b:96:ca:c8:9d:af:
83:53:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:12 2025 by rpki-client