Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: x6RxUQDkQ6sxGSid3SkHQTS7ERBbqGeXE/I34fnr5Qc=
Subject key identifier: 0F:AD:0E:ED:A1:BB:AC:26:E2:05:CC:33:35:98:98:0A:6D:D2:B6:38
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 0194BD858485A08B03DBA6AE981B91B4FDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: Pn5qLqR8UwUa3c5GVe2wv7z3AIoI2PCJ62GyrB95+xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:84:85:a0:8b:03:db:a6:ae:98:1b:91:b4:fd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=0fad0eeda1bbac26e205cc333598980a6dd2b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:8a:7c:5a:12:1a:a7:84:ae:bc:29:23:4c:
38:6f:fd:8a:8a:b7:ed:56:89:a4:73:e4:7c:e6:11:
e0:3a:79:b5:21:e6:9c:36:fa:0a:0d:d1:58:79:10:
86:f6:c8:d1:08:8d:61:35:b5:14:ba:8c:c3:62:11:
00:0a:43:33:9e:fd:c1:a0:13:7c:89:08:82:b3:42:
18:98:74:77:96:48:8d:a7:ae:f9:10:26:df:38:59:
2c:65:eb:f3:7d:80:12:14:b2:79:64:ec:1c:ae:b8:
7a:e1:3d:91:77:1c:03:17:74:2a:bf:57:22:01:1c:
72:c7:62:bb:e7:6f:2f:4a:cc:1d:c7:2b:e7:9e:87:
39:31:c8:de:35:5c:00:bd:eb:d1:e7:ae:39:eb:49:
bc:0c:06:df:eb:c3:80:91:0f:81:95:8b:7c:56:9f:
04:87:5a:f3:74:bd:f6:dd:1c:3e:07:cf:7f:52:a4:
c8:e5:4e:4e:fd:eb:ad:32:8d:f8:88:49:c0:58:6e:
11:cc:71:76:4b:64:4b:88:68:28:26:69:48:0d:b2:
b0:01:62:7f:1d:09:ce:35:fb:6f:84:4a:bb:d4:7c:
e3:71:e2:e6:20:4c:59:9b:02:89:7d:1e:6d:03:59:
ae:7f:26:87:94:37:b7:40:38:c3:0b:4a:fe:a0:5c:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:0E:ED:A1:BB:AC:26:E2:05:CC:33:35:98:98:0A:6D:D2:B6:38
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:6c:50:87:58:a5:62:88:5a:11:09:98:e9:d8:e6:d5:93:
78:9a:31:d8:e8:71:3c:e6:07:af:6c:8b:9d:66:ee:c3:ed:4d:
2f:5a:46:e7:30:9c:eb:06:1d:a7:2c:8f:c3:18:82:82:e5:e6:
55:7b:23:9b:57:54:3a:db:6e:69:3c:1f:87:17:4e:b0:74:83:
0e:f4:9a:4a:3b:a9:47:d2:56:0a:af:c6:6e:56:d4:37:1a:f5:
2c:fb:c8:ca:13:df:f0:e0:35:2c:d8:fc:51:43:fb:f1:68:dd:
50:4f:93:aa:45:96:59:69:33:86:e6:2f:44:40:ea:e8:9e:d0:
48:7f:c5:df:24:ec:c5:d8:55:69:05:91:a4:39:08:11:93:e6:
c9:3c:27:cd:bf:fd:fa:d1:50:53:81:48:89:ea:61:8d:57:43:
50:8a:b4:6a:51:3a:57:41:6d:19:0b:03:57:da:72:d2:a7:c4:
2f:cb:25:cf:ca:21:13:d9:45:21:1e:fe:c5:1f:57:c8:68:eb:
a1:65:05:a4:61:be:4e:a7:31:ea:d3:f6:43:87:a7:cd:e4:2a:
a5:e2:ed:65:16:43:96:5d:eb:9d:08:6d:68:94:44:40:0e:a8:
b1:a2:eb:d9:bc:3f:e7:49:04:bd:79:e1:76:30:9d:7f:07:01:
91:f1:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:22 2025 by rpki-client