Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: HzFEufg288PyKVYCcvQ+qatL01gdT1n/KoEOptcdmmM=
Subject key identifier: B0:3D:77:DA:C4:11:1E:FB:31:A5:52:E0:4E:1F:A5:78:12:81:7B:0F
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0194BD4EA7CDAF00B30FC59C96251810D532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 1205
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: z0dFKx4IXe7ojaBjYveo/r2i+kx9//7UFJvc2Fl7AM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:cd:af:00:b3:0f:c5:9c:96:25:18:10:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=b03d77dac4111efb31a552e04e1fa57812817b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:52:a4:f5:df:88:d0:6d:95:b0:05:f9:98:
55:7f:ba:60:56:8a:ea:95:a8:13:74:3b:8d:86:c1:
46:9c:44:b2:27:28:26:56:43:35:c2:5b:63:1c:a7:
a5:ce:64:3a:72:6e:c9:92:47:10:54:5c:25:75:39:
aa:9f:63:73:18:29:b1:42:6c:92:6d:63:dc:b0:74:
9e:d4:db:8b:26:e8:92:11:39:cf:de:62:74:2c:15:
df:c6:b3:c1:34:4b:24:8b:fd:a5:58:f5:46:80:d6:
f0:f0:f3:b7:36:14:19:9c:e0:88:23:94:77:3e:1e:
e5:ed:88:82:13:c0:c5:84:28:5c:9a:56:6b:96:18:
6d:fe:c1:b5:d6:ab:50:6e:42:92:16:15:02:45:63:
c0:19:a8:59:f6:4f:b0:8e:f8:ef:00:97:f7:4e:0b:
92:49:1c:f0:e8:d3:d3:2e:11:1e:50:40:99:7a:ac:
46:9c:74:dc:6d:79:7c:66:65:e4:d3:0e:8a:d9:1a:
c9:4d:60:9e:26:8e:f5:17:97:de:6a:7a:a4:bc:ce:
29:f3:c6:31:11:e7:c6:56:be:44:64:95:3c:78:74:
08:bc:86:1d:d3:1c:6f:aa:d0:58:99:0c:9a:49:46:
f4:1f:66:e5:d6:62:8a:b7:e9:66:78:f6:2a:9e:15:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3D:77:DA:C4:11:1E:FB:31:A5:52:E0:4E:1F:A5:78:12:81:7B:0F
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:e1:89:14:de:19:05:19:d8:ce:d2:88:5d:97:9a:41:df:
55:4f:b9:df:3e:73:c5:f9:f1:86:38:6a:64:54:ce:71:32:38:
6c:2d:e5:db:2d:19:d8:95:09:f9:bf:9f:ae:c2:1a:d9:36:c0:
05:b3:16:4b:69:22:f1:86:eb:32:ae:81:c0:67:f7:ea:96:05:
9e:c7:69:27:42:e3:db:4d:26:d8:f5:d0:ef:ce:9f:c1:a2:f9:
c9:11:07:5d:88:44:cf:3d:8a:95:58:43:bf:06:58:96:da:52:
66:5b:1e:e6:cd:5e:c1:0a:73:99:a2:09:95:bc:5b:ff:21:0e:
d5:a8:22:0c:51:27:bf:89:c7:23:f7:f0:f8:08:b8:5b:fb:fc:
5f:f3:37:58:e5:fa:49:a7:9f:e1:82:09:b4:7c:c1:6c:d1:59:
5b:61:f2:53:b4:85:3d:10:91:31:41:63:a4:58:3a:e0:13:a6:
9b:c1:78:c5:4b:31:26:83:10:1a:11:99:04:3f:d9:67:97:5d:
7b:78:99:af:dd:bd:4d:14:12:34:89:d2:7c:95:74:88:e5:22:
74:ac:12:60:8d:7c:4c:79:34:8e:f5:e6:ec:a9:d3:97:8b:eb:
e5:d4:0e:fb:85:9e:47:f0:b7:0a:32:d5:83:cb:44:56:22:ee:
96:87:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:17 2025 by rpki-client