Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: 9Uwi6A/jvvEySgNdjMTZvE4XnIzPje+KUedxDgYYTbI=
Subject key identifier: F9:E4:33:97:5F:0F:CD:AC:B7:8C:00:F6:08:F4:AF:06:92:2F:E3:5B
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 0194BD85537D088D10F6788F352EA9C66C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 0FB1
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: Qkf4cIkX7Yt9VBrY6VdaYRpVtyMfZNuC8QozOBd8m1Q=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:7d:08:8d:10:f6:78:8f:35:2e:a9:c6:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=f9e433975f0fcdacb78c00f608f4af06922fe35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:b9:1f:2b:ed:33:e5:a3:59:28:89:0b:81:
2b:65:19:db:d1:a9:ed:38:63:ad:7f:57:12:0f:e5:
04:1b:45:a5:be:76:d1:3e:cd:d3:7b:e2:f6:f6:22:
64:ba:a5:00:37:6d:e0:ec:b7:9d:52:82:85:17:66:
e1:3d:b8:4b:b9:ca:1b:e1:59:73:9e:45:4a:27:05:
de:42:ac:50:e5:83:97:64:13:c2:d0:dc:33:c4:4f:
b3:72:e9:8c:43:51:4f:21:28:48:d7:83:1f:2f:5b:
41:8a:0a:0b:c4:c6:81:9d:95:9b:09:d6:4a:74:c5:
3d:95:ec:95:bd:e5:a8:66:6e:e6:f6:57:4c:16:c6:
f4:a6:3d:55:48:b8:38:63:3b:5f:88:f7:d5:ce:7a:
66:57:33:7f:04:20:a1:d2:a8:9d:fe:bb:08:38:17:
1c:b4:c4:95:cd:7a:98:02:cc:d6:68:62:f8:8d:17:
ba:55:32:d2:64:e4:09:50:6d:bf:02:b0:75:cb:11:
15:a9:21:cf:61:a8:1b:ee:21:4c:54:4c:99:5f:fb:
c6:5b:4f:04:f7:e7:90:c1:3e:d1:29:0e:71:fb:cf:
bf:5e:bf:90:36:a4:b8:3b:97:6f:e3:1e:7c:37:33:
bc:0c:5c:4b:65:97:b0:c6:d7:38:cc:14:95:d3:a1:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:33:97:5F:0F:CD:AC:B7:8C:00:F6:08:F4:AF:06:92:2F:E3:5B
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:4a:b9:21:a0:12:d3:e8:89:03:4d:26:03:12:24:89:72:
8a:b9:dc:97:e2:23:1b:5d:ab:4a:5b:c6:72:b1:2f:1c:ea:69:
65:89:b3:17:80:c3:50:a3:23:9b:47:5b:92:ce:1b:45:da:f4:
64:37:09:bc:7e:3e:27:4b:82:86:28:1c:61:c2:12:d4:18:3e:
5d:26:b6:16:a3:f3:ed:6b:9c:0e:7c:70:01:a6:7a:91:14:cf:
30:34:2a:e8:26:8f:8d:3f:22:61:19:86:f5:05:e1:9e:6e:4f:
0a:c1:22:89:1d:75:77:92:b2:d6:0c:16:57:f7:08:49:19:ab:
ed:82:7c:09:92:3e:f3:ea:4b:1b:10:41:c0:2d:6b:6a:16:12:
63:0d:c5:56:fa:dc:a6:07:7e:56:e9:77:a4:a6:74:1c:b3:52:
b0:5d:4d:6a:a1:16:d6:3f:a6:d5:89:fd:ae:d1:ec:77:d2:97:
e7:24:7d:60:cf:7b:e7:00:d7:93:26:d3:03:1e:bb:d2:a5:64:
55:b9:b8:49:9d:5f:1e:69:90:06:aa:7f:fa:54:36:96:d2:3b:
7b:8a:a4:67:4c:c7:3a:d8:5e:5b:f1:c6:ab:3c:0e:06:14:80:
e1:49:82:a6:60:37:47:0b:21:c9:69:4a:93:fc:a9:b8:c6:18:
52:37:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client