Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: dOMDUSKM9tdYocPJKXcB0rGxlfKW9O5Bp6CStMhVE4I=
Subject key identifier: D2:08:96:A8:4D:CC:ED:3B:78:8A:72:FE:4F:C3:C9:FE:40:2A:F1:23
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 0194BCA9EFDB4B2492D2701C8C540B971767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: qi36l/FKOuwozhHecAB8lbWUHA8b3dqc1D2elWQtE1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:db:4b:24:92:d2:70:1c:8c:54:0b:97:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=d20896a84dcced3b788a72fe4fc3c9fe402af123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:ba:00:93:23:f0:11:2f:ad:fa:8a:57:4b:
53:95:e5:eb:08:d6:f3:a7:17:da:2c:72:2a:c7:6a:
5a:e0:0c:00:d4:ce:b0:64:76:90:32:08:9e:1e:2e:
73:df:de:92:e3:8d:38:8a:66:14:b7:b5:2d:a8:54:
5e:1d:e4:85:f6:26:61:5a:94:e6:56:1d:24:46:4b:
85:f4:04:1b:3b:44:fd:0c:01:51:3c:97:0d:a1:3f:
3b:94:50:8d:dc:88:0b:28:63:40:25:28:32:7a:88:
56:3a:c2:b5:08:85:fd:b1:0f:6a:b0:91:f4:ea:ff:
28:5f:39:34:f1:3d:4c:34:7e:fc:91:15:51:02:40:
c6:10:a1:7c:2e:e2:c3:18:fc:e8:2a:c4:de:4e:49:
0f:89:2c:41:aa:57:08:ee:f3:f3:b3:91:5b:93:cf:
e7:b2:4f:14:d4:c8:a2:2c:9c:9e:68:3d:57:87:46:
d4:22:9a:40:a3:30:96:9d:da:99:7e:81:04:c9:3f:
96:45:bf:82:df:7b:e4:04:f6:4f:4e:de:d7:79:0a:
20:08:9e:d5:49:75:63:bf:d3:b1:a5:4e:f3:de:c6:
9c:95:81:5f:bf:23:8e:54:33:74:fb:09:96:84:4a:
2b:ea:ad:bb:0d:d6:a5:43:5c:69:02:86:bc:f6:10:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:96:A8:4D:CC:ED:3B:78:8A:72:FE:4F:C3:C9:FE:40:2A:F1:23
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b8:b6:b5:79:84:de:73:49:a8:51:0c:33:e5:ad:5a:a8:74:
74:14:f2:12:be:f1:eb:9e:7c:27:4d:5f:cd:0a:b8:74:87:a7:
dc:7f:cb:51:53:77:20:20:6d:f8:9b:89:4f:cc:a7:be:9e:2c:
b5:60:e7:5c:62:07:4b:1f:ad:21:ea:76:b9:96:c3:12:92:11:
b1:b0:a3:61:d2:88:b2:d8:ab:cc:90:31:cd:1a:cb:e6:ce:65:
e0:a7:d6:72:c2:55:e9:ce:ee:2b:34:50:16:42:07:98:5c:7e:
44:f8:87:e5:4b:3b:0c:cd:ec:3e:10:f4:d6:01:af:04:fe:0e:
d4:02:22:86:c4:ae:d6:17:2d:39:ad:8f:f6:0e:ed:11:41:ce:
3e:d4:02:4c:35:ec:dc:81:03:17:bf:4b:0a:17:f3:dc:4c:5c:
78:02:d8:f7:c6:69:6b:ac:f8:a1:0b:b2:c9:f6:ca:42:48:cd:
e3:44:9f:4f:af:d1:e9:39:5d:f2:a8:87:ae:1a:9c:ec:20:ba:
52:8b:ef:ae:74:d1:33:aa:4f:a7:12:e6:e8:64:d7:e0:f3:4d:
c5:81:19:c6:44:94:2d:a2:85:61:c1:89:88:d8:64:f7:6a:f1:
6c:c8:64:e8:4e:70:2f:94:f8:13:68:1f:a2:27:8d:3c:39:f3:
97:e0:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:13 2025 by rpki-client