Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
File: nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft (raw, json)
Hash identifier: nKQvENC8P7bs37sRJf5vNLesBs0xKY9UMXcBwwgrHBQ=
Subject key identifier: A8:48:8F:ED:4B:69:F0:9C:44:50:C7:9A:94:A2:8A:E2:88:F3:5A:06
Authority key identifier: 9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
Certificate issuer: /CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Certificate serial: 0194BD85943F817E12B536F6BADC56AF3320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
Manifest number: 0310
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa (hash: I6HoTfl6GNQQqkXZn/T89sRl04MZcoN1b181n8idbSk=)
2: nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl (hash: XCYLZWakvw+icoWXvsXiSHig7DdByInv043JLj2hTjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:3f:81:7e:12:b5:36:f6:ba:dc:56:af:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=a8488fed4b69f09c4450c79a94a28ae288f35a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:44:e9:bb:84:41:c8:a1:e4:45:e8:6b:66:
aa:cd:37:66:84:f0:16:b7:e7:77:93:f8:20:5e:5a:
20:59:85:7f:2d:bc:ed:2b:ba:5e:4e:e2:89:fb:a3:
4e:a1:37:8d:62:fa:e4:c6:74:15:b1:55:ee:3e:a9:
ff:a4:93:bc:3a:9c:f0:d0:ab:2c:ee:65:2d:1f:2c:
5f:0c:a6:b7:33:f0:fa:6b:3d:c4:33:9b:b6:10:33:
47:3f:12:23:ad:d3:e9:52:19:19:87:94:df:a5:14:
ac:85:c0:a9:7c:d2:82:ad:88:6b:5a:5e:15:5c:af:
7a:3a:cc:6b:c7:32:10:bf:1e:b0:e2:d8:d0:d8:9e:
97:7d:4e:54:36:ac:8f:eb:06:f8:11:ed:f2:49:ba:
e9:69:83:16:83:df:06:9e:cb:e0:06:f0:33:12:c3:
9b:c5:24:fb:26:b6:f7:ba:dd:a4:6c:02:0c:14:86:
70:18:3b:c9:00:e8:c2:4e:80:06:41:4f:e3:29:3b:
0c:2e:ac:3a:c0:98:66:67:d6:ff:1d:f5:79:0f:85:
50:a4:7a:9e:6b:7c:9e:4c:b2:d5:ef:71:ce:e8:49:
d2:39:55:ef:5f:0a:4e:fb:c7:05:fc:ba:f9:5f:66:
a4:21:ae:33:62:bb:3d:07:78:a0:88:cd:f1:3e:77:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:8F:ED:4B:69:F0:9C:44:50:C7:9A:94:A2:8A:E2:88:F3:5A:06
X509v3 Authority Key Identifier:
keyid:9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:07:50:60:e7:05:21:7b:6e:be:27:38:4e:3a:24:bf:98:8e:
41:22:32:0e:18:e7:bd:59:98:92:10:a0:41:89:49:f4:4e:2f:
b0:83:65:64:01:6a:04:c7:49:e9:14:c2:ef:d8:76:18:b0:31:
a4:61:c8:21:eb:fc:23:d2:b0:f4:f2:cf:7d:88:90:71:e9:39:
e1:36:92:98:31:16:91:23:da:40:e5:75:5f:7f:a9:8f:0f:83:
d7:c2:7e:8e:ae:dd:ac:2f:c3:f0:7a:13:ea:84:58:88:25:03:
a6:7f:7d:19:46:a3:63:fb:b7:b9:24:b5:24:5d:2d:cb:8d:ea:
18:6c:cf:83:0d:d0:67:25:8e:ed:51:59:21:43:38:a7:7e:5e:
22:41:46:e8:22:4d:72:dd:d7:f4:3d:63:0b:9d:8a:d5:f2:eb:
35:93:67:26:02:a1:aa:43:20:14:05:cc:61:80:0c:e7:3a:11:
da:09:9a:05:3d:88:4f:60:ea:22:47:c9:2b:a9:bf:9f:88:24:
14:61:e9:9a:ca:74:57:76:fc:87:11:e9:f0:cf:c3:47:2f:b6:
65:0f:ca:18:98:49:76:ba:a6:6f:e0:fb:2b:19:47:9d:fe:11:
e1:2b:61:7e:77:48:fa:f6:b0:9d:ff:d2:a1:76:08:17:35:b9:
9c:45:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:53 2025 by rpki-client