Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: ousCF09AzdLyuJ7oj6/XBlf64yzDcePoTzEhD+1PyHs=
Subject key identifier: 12:E0:EC:0B:1C:62:97:09:1B:99:F4:D5:89:4E:81:9F:6C:EC:4C:2C
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 0194BCE0BA2F8AFE4AE946E4882CE00B1D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: sgkN1iD+0Xb/Pw/1iCSqxdN26gsl+VzrG5ULdkQNRwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:2f:8a:fe:4a:e9:46:e4:88:2c:e0:0b:1d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=12e0ec0b1c6297091b99f4d5894e819f6cec4c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:d7:94:23:4a:e6:2a:6c:1d:04:da:4d:25:
7f:b0:ec:4b:9c:a9:5e:88:ad:e5:1d:3b:13:94:b5:
64:6b:bf:e4:66:c6:b6:12:34:a9:62:2b:db:53:cb:
24:07:cb:8b:de:22:d7:aa:a7:22:f1:05:fe:61:76:
18:0f:d6:6b:e3:1c:20:80:6d:3a:3d:97:fd:c4:ac:
5d:df:3d:89:3d:41:14:26:fb:11:24:e9:3e:20:71:
ec:c4:7c:92:76:18:7e:39:e2:6c:7a:ad:c9:95:9e:
6e:a3:a8:ee:0e:8a:3e:4a:74:66:aa:51:c2:6a:db:
cc:7b:dd:ca:44:dc:8f:ce:6a:14:0f:f2:2b:a4:e9:
45:61:60:0e:bd:cd:c7:2d:f0:ff:fd:20:cc:e5:de:
89:5b:7b:76:44:a2:ef:17:78:ec:69:a7:67:9e:0b:
28:d4:c2:51:db:b1:b9:ae:32:42:20:25:21:eb:0d:
b8:25:b9:82:d3:43:97:15:75:08:ff:c8:b3:a5:a6:
8b:4f:0e:64:f8:35:91:2c:50:8d:16:8f:78:19:83:
b7:71:06:f0:68:c5:81:ed:03:62:db:96:f5:54:ec:
9b:96:b6:49:05:f8:6a:32:64:46:0e:a1:d7:99:2f:
e6:b8:13:b4:4b:88:5b:a0:6a:05:1c:87:31:fe:83:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:EC:0B:1C:62:97:09:1B:99:F4:D5:89:4E:81:9F:6C:EC:4C:2C
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ea:26:ed:1f:9e:83:b1:99:52:3d:aa:59:3b:b4:bc:c9:4f:
0c:a8:47:d4:f1:47:22:f5:3d:7d:0a:35:bc:28:64:c3:c0:e9:
6a:81:b8:c6:64:e3:d5:c0:63:ef:b6:8f:5f:ba:4f:c9:50:cd:
d3:c6:04:8c:c0:a9:94:ea:0a:0b:96:d9:2d:28:ba:fa:c5:81:
99:f1:69:b5:17:90:a0:1a:b5:42:a4:18:84:41:e4:a2:c2:d1:
cc:4f:0b:c7:cd:25:10:91:aa:70:53:76:28:df:28:27:9d:c9:
ff:c1:c9:4b:9b:ec:3e:02:25:c7:aa:38:9c:cb:41:57:d4:85:
d9:65:85:21:52:28:5e:1e:a6:69:cc:ed:fc:1c:90:80:01:55:
b3:c2:8d:8e:92:51:9a:2e:df:3a:05:6e:fc:a3:93:82:e2:81:
4e:ee:0c:e5:45:9a:b2:16:c3:0d:2a:13:4c:17:d7:be:5d:dc:
e8:c8:22:b6:d3:c8:c0:4f:71:f7:1d:31:0e:8f:83:21:9a:54:
72:5c:15:9e:48:fe:41:7c:3b:b8:ea:e5:c2:11:95:bb:8a:e4:
8e:02:93:8e:f7:95:91:5b:4c:61:c1:fc:e0:cf:e5:47:92:b0:
c7:52:84:46:f4:34:9d:29:55:5c:2e:a9:8b:21:ea:c2:78:36:
26:7e:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:53 2025 by rpki-client