Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: 9FCPFS0jJY007vhb5tCsG0XlzbDfxdZ0JocyjFQ3Be0=
Subject key identifier: E9:1B:3E:9C:14:EA:80:43:BD:75:BB:36:3E:F9:64:F7:3F:FB:5B:A5
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 0194BD17AB61CE338731004E23C22F4CA00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 05F2
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: 5uH6OvxksrRDm5+F16neV39BDgOiCRS69d0FTfE5sHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:61:ce:33:87:31:00:4e:23:c2:2f:4c:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=e91b3e9c14ea8043bd75bb363ef964f73ffb5ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:a7:5d:ff:49:6e:76:7a:bc:18:ee:99:b3:
44:8d:a4:5a:6e:5b:91:fd:26:6a:48:19:54:8c:e8:
31:58:f3:08:5e:a3:53:8e:1d:9b:38:c4:bd:3b:a7:
74:c5:fe:ac:ad:11:b4:b4:91:60:ce:bc:da:56:8e:
16:9b:82:fa:63:31:e8:7b:d8:92:9a:1d:4c:73:8c:
b1:00:c4:db:23:d4:dc:13:ae:ae:7e:96:53:51:26:
7b:4d:b1:b1:e9:7d:ab:17:bd:04:5b:a0:31:f9:a2:
5f:84:e4:cf:b0:f5:db:b0:50:80:e9:01:6b:ea:95:
a7:61:2d:cd:cc:77:36:04:a1:cd:6e:51:0d:dc:35:
92:e3:61:5b:ce:e2:53:e4:5b:fc:71:f3:f9:21:b7:
b5:aa:39:6c:18:f9:2a:a8:5b:93:7e:77:9d:4a:24:
b6:0d:c6:9c:db:b5:8b:13:c1:47:b7:22:be:88:c5:
a5:0b:57:44:94:1e:c5:91:b1:7d:71:1d:c6:0b:a1:
bd:fa:97:fd:fc:23:91:62:05:4a:b3:a1:5a:56:eb:
62:b8:02:e7:a6:f3:10:9b:47:0a:36:c0:da:68:34:
cd:cc:43:66:d7:ee:9b:80:9c:bb:81:c4:93:13:58:
8c:00:cb:88:c3:9d:f5:10:c4:70:49:8a:03:2b:78:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:3E:9C:14:EA:80:43:BD:75:BB:36:3E:F9:64:F7:3F:FB:5B:A5
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:08:67:4b:00:0e:a7:9d:e6:46:05:02:c6:86:d5:25:12:63:
c1:f9:97:b0:95:ed:52:e1:34:c6:65:a5:d3:45:b1:22:7c:1f:
49:f7:91:36:f8:58:d1:d4:29:06:db:99:8d:48:95:1e:7a:92:
cc:1f:24:ab:d3:b5:2d:bf:c3:9e:0b:91:ff:f0:2b:ff:b0:50:
df:ec:25:30:5f:78:4e:e0:fc:7b:30:47:3c:42:bb:b6:52:b1:
fe:b8:86:bb:23:ff:aa:b8:b1:fe:f6:46:51:9f:5a:bf:64:33:
0f:76:2a:c9:12:7b:ca:ea:48:59:b7:29:54:88:ae:9a:0b:78:
7d:89:9d:bf:b9:99:00:43:3a:2e:7f:8c:81:6b:24:ac:a1:fe:
51:c3:eb:54:da:72:52:dc:8e:44:11:cd:ec:28:26:0d:1b:4e:
10:1b:14:9d:49:f8:cf:f9:5b:d5:76:e6:53:d7:87:42:e0:d9:
25:5c:75:2a:15:18:4f:d6:25:d8:da:a4:0d:28:5b:81:92:68:
33:28:6f:dc:58:07:91:15:bd:0e:e2:6a:87:30:bd:6e:fb:c7:
b9:2c:90:06:81:c8:1d:d6:cc:36:2c:af:01:b7:4d:2e:11:4b:
1d:8b:47:86:18:09:54:f8:c9:b6:30:47:3f:c8:17:c7:87:ef:
76:0c:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:33 2025 by rpki-client