Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: nvoDgRThbSZRwY0lKVohdkFA8zB8QS04zHbxhvH6lhY=
Subject key identifier: E3:61:49:6A:91:D2:0A:7B:45:39:1D:29:16:79:1A:8F:26:ED:86:AA
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 0194BCA9BFBADAFF08A1E8CA3743CE044D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 12E0
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: TDD1gOJhhfD/vlai6aYwyHxdVCo6Sy4AhOUkqyMCV/M=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bf:ba:da:ff:08:a1:e8:ca:37:43:ce:04:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=e361496a91d20a7b45391d2916791a8f26ed86aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:64:d2:89:6a:b9:f4:0a:81:83:2c:09:bf:
d4:14:59:8d:95:69:33:aa:09:77:b0:e6:6b:99:2d:
09:47:aa:fb:17:be:6f:81:4c:95:9f:02:3a:13:00:
73:95:a1:89:ad:4b:50:a7:83:cb:88:2b:42:12:be:
5f:ad:48:8e:f3:8d:71:15:95:0f:e8:48:e8:75:9b:
29:cf:ee:54:e3:a5:aa:3c:45:e8:ae:1a:8d:ae:52:
60:a8:79:36:92:cb:f8:9f:7b:75:c5:21:44:d2:02:
54:69:c1:9c:9d:dc:fb:01:8b:4d:22:9a:e1:ea:bd:
37:fc:0f:3f:c7:50:72:3a:e5:46:d8:39:e3:a8:f0:
70:c0:96:97:ba:50:67:13:4c:de:17:38:4e:31:8a:
71:2a:4c:c3:42:3e:13:59:56:55:80:78:e1:d7:97:
87:0c:4a:39:b9:4e:78:2c:0b:05:31:8b:e3:b4:4f:
de:29:95:8d:85:51:64:9e:d9:c4:30:6c:84:67:5a:
89:2a:ff:68:b9:13:27:a3:69:43:16:29:8d:e0:bf:
78:6a:9c:ef:00:d4:60:a1:48:53:2c:75:52:18:0f:
74:92:96:10:b1:c8:42:8b:d1:c1:2a:d9:57:47:98:
ef:c2:e8:7c:ff:74:a2:30:e9:da:45:88:5a:07:04:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:49:6A:91:D2:0A:7B:45:39:1D:29:16:79:1A:8F:26:ED:86:AA
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d9:24:5d:e8:d0:54:64:bd:d6:16:c6:86:17:9a:74:d8:e6:
af:4e:94:db:e5:cd:61:ee:0c:3f:e0:76:c8:a1:fa:a2:21:be:
eb:6e:ab:24:27:b1:8e:e8:fc:1c:4e:9d:df:d3:a7:2b:9b:98:
81:fd:b5:a8:ac:11:62:87:a3:ac:dc:3d:ba:e7:23:1d:9a:3d:
c3:1d:53:14:bf:bc:1d:41:b5:12:5e:2f:c2:dd:cd:74:4b:09:
82:cd:52:1d:5a:42:e2:91:14:50:f7:e4:20:45:b3:3a:01:76:
6b:09:20:de:2e:cd:3a:a0:79:79:12:b8:b1:71:f6:9b:7b:b6:
9b:56:cc:8e:d4:93:85:f5:95:57:7b:76:4c:c1:12:0f:9d:cc:
c9:e0:82:cb:96:37:08:7d:8c:90:27:cc:12:6b:33:bd:4a:b0:
9b:56:dd:a5:74:cf:dd:47:64:64:bd:a0:63:97:54:6e:ae:fe:
88:35:42:01:e5:71:b0:8d:bd:93:c9:e9:90:c9:f8:9e:4c:aa:
82:01:19:a0:9b:c6:80:0d:55:05:a5:7b:6e:1a:c9:15:ce:42:
1e:4e:f1:4a:e1:b2:2a:7a:7c:29:fe:af:1c:65:48:e8:80:fd:
c7:a1:46:8e:c5:8b:5d:9b:94:fa:80:9b:5c:88:2a:f8:ab:a9:
58:cf:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:28 2025 by rpki-client