Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: urf/334T6W1wK9W3pqYJhRkNAkYANgnNkA9sjMBmqhI=
Subject key identifier: 15:75:6F:5D:04:30:E6:24:90:BD:35:C9:3A:3A:2C:0D:05:F3:88:F8
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0194BD4E6C16198B5E4CC5DC4E1C869B1C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 08CD
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 7XD1IA3NuhgKaHE-JXDF1aaN9pQ.roa (hash: pAzeFuehJooQ3HnDhzcpevi2h5yf9fcJPHSsIig5+5A=)
2: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: QxyEj2u22fkTGpnR8kIMUYrLju0CuFmkL1ko2Liv+pM=)
3: fDsdK2tD77O7e4AR_nokgS7lFto.roa (hash: 29a/vkXJaunGUFq80jkR7W5FhU3JI/W9/SFVMkWYH+c=)
4: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:16:19:8b:5e:4c:c5:dc:4e:1c:86:9b:1c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=15756f5d0430e62490bd35c93a3a2c0d05f388f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:e2:ff:c7:e9:59:1c:3c:fb:6b:fe:c5:09:
9e:6a:e5:0b:cf:87:8c:b2:f7:2b:6a:d4:b2:b7:48:
dd:a7:7a:b7:56:85:6f:78:a8:e5:f4:0e:cd:cf:11:
82:f7:ad:c8:f8:b1:59:88:cf:cd:1d:f2:a4:63:e1:
40:4d:b6:55:e2:b3:47:a5:91:ee:d1:dd:41:5b:d5:
f9:c2:37:ae:8f:c1:98:fc:61:93:01:4f:fe:54:80:
7d:be:72:ef:e4:06:e6:d1:c2:74:81:12:27:64:dc:
98:7b:91:15:71:5c:2d:38:9d:8d:9d:57:38:d6:52:
d5:56:ac:da:73:be:c5:98:05:ee:ad:4d:b2:d2:6e:
b8:b3:b5:67:3a:0a:67:18:1e:cf:98:55:f9:63:6f:
be:f6:12:46:97:4a:63:10:cc:dd:11:7c:ac:46:ff:
13:95:e5:b5:b0:cb:76:31:c6:f5:23:95:f5:f4:d4:
25:e2:e8:1c:1a:7d:24:ad:3a:48:c2:89:91:be:85:
3f:e2:1a:08:fd:50:98:d6:af:73:52:70:80:55:6e:
4d:ee:af:80:50:a9:3f:bd:7a:12:a0:4c:3a:6c:27:
a8:bd:29:40:eb:95:29:8b:20:bd:27:27:49:76:c8:
20:7b:34:5a:e5:73:9c:a3:ef:02:81:05:f0:db:7f:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:75:6F:5D:04:30:E6:24:90:BD:35:C9:3A:3A:2C:0D:05:F3:88:F8
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:52:36:8f:a2:03:ae:1b:b7:6f:8c:72:d4:07:2e:2b:84:af:
7e:9a:3c:cf:c5:2a:f1:d4:d5:cc:56:1a:7d:3d:b0:ea:e4:89:
d5:e2:8f:e7:28:5d:7f:6e:95:ef:5d:81:f1:d9:65:fd:2c:aa:
a8:0f:e7:38:d1:eb:0f:95:cd:d8:34:f3:ee:bd:42:1a:00:ad:
96:f6:2e:66:89:12:ed:63:c0:b5:b5:26:12:ab:1c:5d:58:17:
7c:6f:46:6f:b4:e8:cc:5a:a5:c4:50:ee:f9:0b:83:d3:58:61:
86:44:14:80:0c:d3:1b:75:50:b6:42:68:62:ce:87:fe:4d:21:
38:3f:c5:2b:74:78:28:07:3b:d2:08:e6:70:1a:de:e0:2f:51:
68:89:ca:b3:74:8e:90:36:bd:15:93:81:3b:64:c1:4f:e7:81:
a5:d6:7c:3c:49:ed:cb:b8:c5:d1:03:b0:25:45:75:1b:12:72:
b1:83:c3:f0:6a:df:63:40:1d:c1:2c:67:73:fd:56:8b:dd:c3:
02:d8:42:39:ec:8b:b1:53:66:32:21:79:08:02:43:7f:54:3d:
02:3d:11:61:a3:94:e2:1b:15:2f:d4:13:b3:25:3d:00:5d:04:
80:dd:d2:f5:8b:0a:0e:18:21:9a:03:2b:dc:c9:98:6c:a1:7a:
59:d5:c1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:48 2025 by rpki-client