Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: bapg4/597L76OfOQGnjSIYy+kBp3YAiW9J2929ZTHog=
Subject key identifier: 29:8F:91:EC:55:1C:24:94:CF:8F:F2:C6:E8:62:A4:A0:E4:46:B9:56
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 0194BCAA406343264C3F4B6CC8120A71CD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: i9SzgcJtpwj0WUdV5SRgTwgmjbMYQJX2CO4ztoPpkeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:40:63:43:26:4c:3f:4b:6c:c8:12:0a:71:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=298f91ec551c2494cf8ff2c6e862a4a0e446b956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:cf:68:3e:89:40:fc:c4:58:a2:32:d8:a1:
5f:42:2a:4d:f8:5a:9e:fe:dd:e5:6a:14:5d:e4:ee:
a3:84:36:33:d4:d4:82:44:dc:16:19:68:ab:71:74:
f8:c8:ac:e0:a5:a2:1b:ac:0d:bf:fb:72:2f:9e:7d:
80:da:bd:ac:6b:60:36:15:73:0f:76:b1:90:cb:44:
98:a9:e4:d5:b3:03:80:ea:96:91:45:67:5d:5c:32:
92:cc:c1:99:4a:f5:8b:91:3b:21:fc:21:aa:f6:47:
70:3f:d2:ee:1d:70:af:2f:59:38:9d:db:a8:48:8b:
5a:7d:ff:1f:c7:a3:4e:3e:a5:2d:db:9e:69:16:01:
12:cb:f4:04:67:b9:1f:71:21:7e:72:c9:da:12:bd:
3a:55:e1:02:fa:5a:9a:a5:fa:7a:60:67:96:57:c8:
b3:76:a5:eb:72:0c:59:0c:43:72:3e:4f:07:c1:ab:
11:44:5b:8c:10:a2:c2:7d:cd:a8:bc:e1:f1:97:40:
98:80:10:d6:a8:da:95:34:29:1a:1f:44:f4:a7:c7:
18:da:28:b2:f4:af:e6:c7:c5:d8:0b:04:4f:08:2d:
45:f9:73:b6:7a:ad:29:b7:07:b4:51:26:91:d0:ef:
f6:f1:01:f8:03:8e:44:79:d4:5e:8d:40:97:1b:85:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:91:EC:55:1C:24:94:CF:8F:F2:C6:E8:62:A4:A0:E4:46:B9:56
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:10:18:ca:76:55:52:14:4a:b9:b9:6a:6c:8b:69:31:d1:
52:ef:ae:f2:97:a0:6d:ce:17:cc:0b:f7:a1:ab:c9:e5:03:5e:
0e:ac:ba:2b:30:cb:b6:f2:f6:eb:35:eb:18:33:86:59:6c:eb:
94:c0:a2:8f:64:a5:80:ed:10:0d:b9:b0:14:1c:28:e3:ab:7b:
2b:be:f6:c6:f3:63:c0:42:0d:33:57:d9:66:e5:d3:0e:dd:c3:
f0:8d:32:58:83:03:95:5e:98:46:22:d4:f1:fb:b1:17:54:70:
0e:21:ab:c9:bd:5e:1e:c2:ef:1d:fe:ba:61:32:a2:1a:93:7c:
58:95:bc:0a:89:1d:84:a8:49:a9:4c:a1:59:26:0d:f5:29:00:
af:f9:c4:84:42:7b:eb:b3:9e:b3:71:72:b9:a1:f3:0e:a6:d2:
09:a8:26:ea:74:4f:04:88:02:83:9f:32:67:48:2e:d4:16:b6:
c9:3c:24:31:1a:4d:d6:d5:39:34:f8:2e:0d:84:d8:aa:84:62:
26:be:2e:e0:b4:96:2e:26:6f:2c:10:a2:3e:a0:63:ef:5b:9d:
c6:cf:56:0a:bb:07:d0:f6:ea:6a:99:d4:fa:23:0e:44:96:9a:
dc:15:ca:4f:5b:a0:3e:87:24:86:16:ea:24:9e:0c:44:8b:15:
45:bf:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:36 2025 by rpki-client