Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: Z3TrdjKJbBZxhPdvFA4GVjD4FzZUrOdo4Ch5443juTA=
Subject key identifier: 0C:BD:E1:94:5E:94:B7:FC:71:05:7C:7E:EE:74:EC:2A:CC:77:94:9F
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 0194BCA9F5489F0C7484A530F892C27581D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 0D50
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: IOV+SsGdQ2BKUgp0wRkaxgR0+ZQBaQ0Rscjw0t1ZVes=)
2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:48:9f:0c:74:84:a5:30:f8:92:c2:75:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=0cbde1945e94b7fc71057c7eee74ec2acc77949f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:b1:a8:d3:1c:36:be:fa:5e:1c:c0:20:a5:
79:eb:8d:05:5e:19:08:d0:f0:9e:ee:9f:0d:f0:9d:
6d:51:17:57:d5:0a:1d:bc:8b:80:ad:98:b3:c8:10:
60:b7:00:bf:11:e6:43:2a:29:8e:6c:6f:59:70:06:
7e:1a:14:33:0c:bc:ca:5d:89:7a:f9:3e:cc:37:81:
e7:a5:9f:d1:e7:14:db:0f:c5:2f:34:b2:ac:48:84:
0c:ad:89:15:b7:c8:26:8e:f4:05:14:82:98:67:2c:
b7:2f:3e:d1:1b:d8:a5:d4:5e:79:79:82:cd:8f:86:
d6:50:cd:c9:69:91:69:c4:76:74:d8:2c:47:b7:f5:
c6:57:29:94:23:e6:a6:b3:54:07:77:34:b6:43:73:
5f:f3:83:52:7e:9c:9f:de:bb:7c:1c:51:3c:81:5f:
e4:d8:04:fa:1a:5d:b2:e9:f8:59:1f:7c:62:a2:fc:
09:c8:a9:79:5a:0e:b6:96:fa:1e:5e:50:6e:4e:1d:
7a:90:d9:fe:19:38:39:92:03:cd:df:b7:4f:1f:5c:
b0:67:eb:50:bd:65:c2:46:d5:20:7d:34:0b:fe:c1:
b3:82:d8:50:bb:fc:54:60:89:6e:ad:1c:73:90:a4:
dc:64:58:fc:56:a0:af:aa:43:76:95:d0:19:76:b9:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:E1:94:5E:94:B7:FC:71:05:7C:7E:EE:74:EC:2A:CC:77:94:9F
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:66:32:9a:26:60:71:97:d4:50:76:06:ec:fa:db:1e:dd:e5:
38:c7:67:ba:6d:38:b8:95:e0:a1:db:1e:8f:ff:87:d8:fd:eb:
33:92:b4:93:06:4e:65:ea:16:eb:ae:a4:7d:fe:ec:25:13:f1:
71:84:f0:c7:99:0d:02:a7:00:f5:f6:2c:04:71:36:dc:71:f1:
03:8e:32:80:ae:d2:5c:ea:1c:fd:fa:ce:ac:6c:e3:dc:22:3b:
b2:46:bc:2d:85:e5:cb:3e:da:31:54:89:35:c5:8e:e7:96:c6:
c7:b1:15:b8:2e:9f:43:c5:3f:93:fa:c4:78:4c:d0:f8:eb:8d:
a4:98:72:70:93:4d:7e:6e:9a:57:07:74:55:c0:7e:96:a8:23:
e1:d4:fe:46:ea:b7:e7:97:cd:b6:da:43:df:75:b3:61:28:35:
37:09:93:82:50:0d:a4:7c:34:58:c4:87:fb:a5:c4:9c:5e:c4:
8c:ac:fc:77:52:5e:38:83:cd:5e:d1:4c:79:54:d5:e2:00:76:
c4:6c:da:c8:fb:c1:d6:8d:58:4b:c1:70:4f:0d:97:05:07:67:
fa:50:53:52:d8:a8:c8:0a:33:a5:ec:14:55:05:1d:ae:a0:bb:
48:89:53:c5:61:2b:7a:3d:7e:ce:13:39:3e:5e:fa:a3:c5:ba:
2b:e1:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:41 2025 by rpki-client