Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: heudBtkIO5qKNqIuLHuXCcZk5RdnPfu/Cw9sw1Ml9Mc=
Subject key identifier: 61:19:8C:F2:3B:DE:A8:6C:8C:65:30:77:81:FF:37:FA:28:B9:2A:A3
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 0194BCE0E300AADE3D1B669D83D63E44C62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0A3C
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: 9mgiL3CcVjkNmoDRlSJzlVho1y71iKcyJjAISJw1+fA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:00:aa:de:3d:1b:66:9d:83:d6:3e:44:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=61198cf23bdea86c8c65307781ff37fa28b92aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:51:17:7b:e4:70:0f:f5:66:6c:db:2f:b2:
75:d4:87:b2:e3:07:f8:90:b0:01:85:be:cb:a3:f8:
15:55:22:6a:3d:e7:4d:5c:06:2f:a0:28:96:2c:e4:
c7:52:10:da:ec:d3:03:94:a3:66:ba:47:ef:ce:83:
21:b9:f6:e0:29:d7:c3:3a:d7:c8:3b:17:24:b4:23:
f0:e7:b0:4c:36:d9:09:41:bc:f8:66:ae:0c:73:98:
da:ee:ba:d1:fc:54:1f:89:9e:ee:30:9f:16:80:6d:
9c:2d:d0:e5:a2:42:83:b1:1b:d8:56:7c:b7:87:b9:
87:3a:27:af:7b:5e:30:00:37:62:b5:da:8b:87:98:
e7:70:cd:98:bf:2c:07:0d:bd:f6:c0:f2:b8:d7:65:
27:7e:b4:95:ef:72:10:01:2b:57:fd:06:62:43:b3:
9e:f4:da:9e:5d:29:54:32:44:3c:5c:f9:0b:c1:35:
fc:6d:be:01:52:df:e4:5b:2a:b9:ff:6f:55:e5:27:
15:0d:70:94:63:77:7e:46:c6:56:b8:04:b7:90:b6:
c9:51:0f:cf:b7:80:83:18:ba:a2:57:af:0b:da:40:
3f:13:c9:95:5b:e6:f6:1e:4b:aa:ea:e9:d9:22:1a:
69:ee:ca:14:a9:01:d9:37:5e:49:88:03:5f:af:a3:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:19:8C:F2:3B:DE:A8:6C:8C:65:30:77:81:FF:37:FA:28:B9:2A:A3
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:7c:d0:1e:35:cd:40:29:69:f6:52:6e:a2:8a:67:af:39:
74:42:89:30:7d:cc:f7:56:00:9a:aa:db:de:eb:6c:e9:e5:31:
c8:83:51:36:03:33:56:5e:61:47:8a:2a:ff:ee:7e:7d:d6:63:
09:d7:c4:d1:8d:fe:b1:67:8d:ec:5d:53:dc:ec:68:f2:57:a5:
99:d8:db:4a:55:d8:56:3e:a8:f7:d9:cb:dc:4b:60:bc:40:f3:
88:db:16:61:18:ca:69:a7:c8:9e:f4:6d:8c:9f:45:d2:24:40:
19:d1:b2:d6:92:87:e0:32:01:be:2c:5c:fc:f8:2f:0f:da:8d:
19:e1:46:dc:3f:95:2c:aa:dc:07:6a:9d:c8:ad:9a:e8:e1:b0:
e6:90:6b:b4:ca:86:6c:2f:56:5e:92:94:0d:0e:a8:2f:d2:9a:
63:36:ee:ac:96:07:d6:5a:1e:9e:43:db:14:c6:1c:fe:84:62:
08:fa:ed:24:0c:01:6a:44:9b:2a:17:af:65:69:4f:e1:f9:7c:
ab:d1:0b:c4:b2:3b:e0:80:4c:65:87:00:0b:fc:90:db:5e:43:
89:7a:38:9c:f3:59:d2:c8:23:8f:57:4d:c8:5e:af:07:c1:55:
3b:ff:c0:7d:3a:73:01:13:c7:59:76:ac:6b:4d:86:91:11:a3:
30:1f:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:40 2025 by rpki-client