Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier: 367zJR3VSuX+zDUKcfrQIDAKCh00RbU+sfLp/vHS9a8=
Subject key identifier: 7E:CF:54:1B:B3:71:89:06:81:30:D5:BB:0D:E1:03:5C:45:5A:4A:F4
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: 0194BD4E7D7FFCFA65AE5E16A89C3071639E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number: 0D56
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=)
2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: Um4tiNMLYcRCrycCz3N4fGzUHCpuT2l57JeYnvEVTJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:7f:fc:fa:65:ae:5e:16:a8:9c:30:71:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=7ecf541bb37189068130d5bb0de1035c455a4af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:b2:00:83:55:3c:d1:b1:b8:70:74:2d:66:
20:30:89:78:ae:d6:1b:b5:6e:be:37:ea:41:1d:97:
fa:e6:08:03:e6:fe:54:3a:77:23:71:41:5d:df:9e:
05:28:e3:de:0b:7b:0a:b5:69:91:09:4e:d5:4e:19:
cb:7d:9e:d5:2c:6a:e5:fa:b6:0e:67:0c:26:69:1d:
09:f5:61:52:25:3e:a7:5a:93:40:a1:a7:46:6d:a7:
6c:0a:50:21:f8:f3:f8:e0:08:47:a7:42:45:22:00:
98:59:ec:39:6e:fc:e0:2b:16:4d:78:2a:ce:0e:80:
c8:10:ad:44:60:dd:67:ad:6f:72:ed:10:1f:e6:81:
63:e1:ff:a5:92:2b:e6:a6:7a:b3:26:c6:35:c2:47:
9a:70:97:70:28:05:fb:3e:3c:b3:d9:a3:32:3e:d8:
bc:11:51:54:33:1f:6f:ec:82:c9:2d:02:22:6a:64:
de:70:f4:d5:da:52:26:ae:d3:2b:05:06:01:a7:17:
02:1f:c5:74:23:c5:d6:47:f2:23:e5:fe:e8:42:ab:
4f:ad:5c:28:76:95:53:d8:b4:f6:23:9c:cc:21:9b:
35:cd:c2:e8:a1:fb:c4:53:4f:0d:36:a8:8f:5f:58:
7e:a0:99:a2:87:50:23:2f:f6:ff:b1:2a:0d:5b:85:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:54:1B:B3:71:89:06:81:30:D5:BB:0D:E1:03:5C:45:5A:4A:F4
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:30:0a:e9:85:a1:b2:d1:c5:00:19:b8:b6:4a:3b:44:fc:19:
76:39:bf:08:d4:b9:e8:20:7a:07:4c:4e:c0:d5:18:a7:1b:3d:
55:47:a2:a1:a8:bb:95:5e:be:6a:fb:34:98:55:be:91:fc:6e:
5b:9c:9f:f4:32:87:48:e4:8f:80:bb:4c:6b:d7:06:c4:f5:6a:
5b:8b:16:7a:62:3d:65:03:3b:ca:9f:09:b7:c8:a1:3e:d1:74:
c1:27:7b:7a:bd:2a:eb:c2:4b:c4:ae:ab:da:6b:85:e9:ee:2f:
f5:a7:9a:6d:ec:37:0b:85:07:d4:b8:87:b8:82:d5:49:b6:05:
8b:a1:a5:58:b1:51:75:48:83:02:ab:13:cd:62:e5:4d:18:e0:
4c:b0:e3:42:ff:01:c2:c8:a3:93:c9:30:f5:c1:00:f4:7f:6c:
7e:47:8c:77:b5:67:bf:df:e7:0a:b1:f0:ef:e3:7c:17:9a:f9:
3c:a6:70:de:a1:83:fb:26:43:a3:45:f5:05:38:3b:5e:c6:22:
a4:15:78:06:c3:9a:f8:2f:9c:4c:e0:d5:6c:68:da:36:3f:0a:
55:93:61:8a:41:b7:5d:1f:ff:10:84:7b:b5:97:55:de:e2:6e:
d7:8e:7d:41:c5:ea:9f:d9:b0:fa:80:12:a9:55:e9:3f:70:86:
ab:32:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:03 2025 by rpki-client