Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: fxkhw2NkC0Cr72Nlawp4H9HUnrGJy2d3odzE9cZMgs0=
Subject key identifier: F8:52:1D:DA:DF:82:ED:61:F2:D6:09:23:52:D4:86:A9:27:0C:61:B8
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 0194BD4E53B2DEB82C2A9C00B97E676169F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 112F
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: H6FETCabGrMKVwjhE1kJY6J4dbs23Luqpr4hS+U9eaU=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:b2:de:b8:2c:2a:9c:00:b9:7e:67:61:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=f8521ddadf82ed61f2d6092352d486a9270c61b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:56:b4:52:46:14:8f:6a:00:c7:98:6e:15:
43:52:70:6e:28:8e:6d:b4:17:03:d9:8f:1f:08:40:
31:9c:88:ce:b7:b7:cd:e6:54:d7:91:bd:38:7d:90:
ea:0b:f0:32:b4:2d:d3:b4:96:ee:64:31:6d:3a:d8:
10:e1:82:b3:87:b6:e6:3f:ec:be:44:43:7e:7c:60:
69:69:f3:96:d2:5b:0b:7e:1f:05:f1:a1:55:5e:49:
83:04:a5:c1:52:97:b8:bf:11:e2:3d:5b:11:de:af:
02:cb:69:12:d5:3d:3c:33:0d:b3:94:36:4b:f7:f7:
f5:bc:30:2f:b5:48:9e:a6:cd:21:31:40:ba:e5:a5:
ef:23:81:dd:60:f6:28:5a:be:ce:7f:7d:3b:7f:f7:
64:a9:ce:a2:76:74:17:ea:1e:c1:3b:9d:71:e3:1b:
ba:fa:8d:41:f7:a6:64:7b:0f:9a:52:48:f3:f3:ac:
2a:11:f1:27:fb:fe:96:21:43:b8:60:40:7f:1d:05:
4b:fe:ee:9b:5c:ba:7f:ba:c7:2b:a8:4b:a4:5d:d2:
77:bf:d3:2a:1f:4c:ac:c0:39:34:e4:f0:f2:7e:9d:
54:20:63:e7:45:64:0b:fc:fe:26:8e:e0:de:1f:8f:
c5:d8:b1:b2:8b:3e:e9:2b:74:73:09:c6:ca:aa:a3:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:1D:DA:DF:82:ED:61:F2:D6:09:23:52:D4:86:A9:27:0C:61:B8
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d2:09:97:ca:81:84:84:82:bf:da:68:d5:9b:87:2f:55:f6:
10:5a:1a:de:76:1b:20:f6:36:46:49:02:e5:73:a7:a1:02:6e:
a8:fc:fb:b4:6d:da:dc:65:da:de:4b:b4:b3:ed:97:fc:8d:4b:
99:7b:d0:07:53:5e:08:6f:01:30:a3:da:3e:7a:34:15:ba:b5:
05:ca:7e:b1:7d:0d:08:91:7f:44:d6:03:6b:fb:4d:16:73:aa:
c3:88:7a:d0:c8:bc:e3:d3:9a:72:dd:cc:fa:f6:86:95:26:54:
04:c6:f6:df:d5:bd:23:c9:d0:8b:f5:97:ae:a6:e0:2a:12:b5:
48:2d:20:26:d9:93:5e:d5:a9:20:d7:30:56:b9:19:5e:cd:4c:
83:38:38:a2:f7:73:d5:7c:61:23:07:f7:02:7a:04:c9:a7:da:
27:f8:eb:0e:b1:12:c2:56:f0:c7:8c:a4:4b:95:29:e7:99:03:
3b:4a:02:a4:47:ff:15:3c:ce:14:83:cd:fa:43:03:a8:4e:b2:
a4:e1:74:91:5b:53:f7:07:d1:46:82:79:d7:ef:c2:b6:71:e7:
a9:4c:cd:91:f5:16:67:cc:96:12:b7:94:c6:9b:b6:e9:48:b9:
64:a1:a0:dc:d9:27:5d:f1:4a:ca:13:45:47:3b:b6:8d:55:38:
66:4e:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client