Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
File: nhiu6P5wNU916m2r-J7Y-UtqHlg.mft (raw, json)
Hash identifier: msRuEKFEH+XyGZvg6B0vQJwXOafc2gFsYcB6o3g1L3Q=
Subject key identifier: 54:92:E1:F2:C3:BD:7E:CD:FC:66:D9:18:71:8F:04:57:15:85:CA:CC
Authority key identifier: 9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
Certificate issuer: /CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
Certificate serial: 01909C17119C631C7EA2B0439C380BBE4C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
Manifest number: 0F77
Signing time: Wed 10 Jul 2024 10:01:15 +0000
Manifest this update: Wed 10 Jul 2024 10:01:15 +0000
Manifest next update: Thu 11 Jul 2024 10:01:15 +0000
Files and hashes: 1: cBz_sRQynCbyckXVJcll-kLy3ps.roa (hash: RNGhL8+9CctMB8QTeJRUOo4oXE7iUKLUP5FIGjzRKYU=)
2: nhiu6P5wNU916m2r-J7Y-UtqHlg.crl (hash: flYaVDJ0Qo0CPLQkcCkGNBExJUNtyzHpluwmNRSuodg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:17:11:9c:63:1c:7e:a2:b0:43:9c:38:0b:be:4c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
Validity
Not Before: Jul 10 10:01:15 2024 GMT
Not After : Jul 11 10:01:15 2024 GMT
Subject: CN=5492e1f2c3bd7ecdfc66d918718f04571585cacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:0f:e0:f7:b4:9c:fa:68:60:42:34:4f:3c:
2f:20:0a:e0:ff:3a:1b:13:e7:8e:88:0d:82:0f:ae:
f7:83:27:69:35:99:4d:8b:b7:5f:7c:b0:4c:f8:77:
82:df:a7:f0:ad:77:f8:a8:e3:d2:b1:50:41:78:1d:
43:18:c1:27:05:0a:2b:cb:bc:7a:af:01:ff:5b:5b:
9a:2b:ab:00:45:90:3a:3f:67:8f:e2:90:1e:25:4f:
d6:ed:ab:66:61:39:d3:c3:98:32:99:b6:de:4c:d7:
91:40:79:be:82:0e:30:de:55:88:69:36:b1:48:7e:
63:0c:6f:a7:cd:33:32:7c:b0:14:cb:0a:30:7b:ec:
c5:12:56:80:0c:8d:b5:a0:0a:e6:70:96:0f:d3:19:
ed:6d:f2:d1:c9:6f:5e:83:16:b0:f5:d2:6c:d3:ac:
ee:b0:a4:68:11:8e:aa:48:9b:cd:0f:d3:25:ea:b1:
13:e4:99:61:96:23:05:51:83:ae:86:fd:c2:99:22:
bb:f9:74:75:47:eb:04:d4:a2:c3:9f:22:f9:25:88:
a9:e4:58:58:80:26:81:44:48:3a:4b:55:19:83:b0:
2c:43:9c:22:e2:75:7a:50:32:59:ed:9a:3e:ad:6d:
2a:55:2f:24:41:48:66:57:b0:2f:ac:c0:c2:a4:c4:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:E1:F2:C3:BD:7E:CD:FC:66:D9:18:71:8F:04:57:15:85:CA:CC
X509v3 Authority Key Identifier:
keyid:9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3c:ee:71:1f:00:7a:df:b6:30:0d:d0:ff:51:9c:c8:c4:02:
88:5c:bd:f5:ca:24:e6:8b:55:ba:44:5e:5c:e4:88:81:1b:11:
48:b6:83:db:25:46:e0:f0:c8:f3:6a:d8:7e:6a:f5:ef:62:cc:
76:92:29:28:3d:8e:c5:4e:f6:ad:62:4b:a6:16:cf:85:43:6b:
20:47:d9:a1:0b:96:40:2a:eb:ca:64:11:14:4e:56:1c:1d:32:
6e:d3:fa:87:fb:23:14:a7:07:d6:01:7b:71:db:bb:e0:4e:26:
05:cc:f9:68:e1:e7:96:d7:3b:16:d1:ae:50:2c:28:79:57:51:
11:3c:fc:ab:cb:31:a6:ca:eb:6e:37:07:04:5d:cc:c9:8a:4d:
a2:a5:56:ee:b9:8a:e6:16:d2:a2:b4:94:4b:21:c2:c2:fd:5b:
2f:6d:71:4c:8c:c0:88:6c:9e:d8:9a:34:26:87:20:f7:18:95:
65:47:80:2e:49:6f:fd:63:a2:6d:b6:3b:f0:a2:da:42:1a:2a:
f0:5a:89:da:cc:fc:29:51:df:f8:d1:58:6e:18:1f:cb:9b:83:
8a:88:ec:4f:06:ba:33:27:36:11:66:13:29:a8:86:87:01:30:
1a:f5:76:cd:be:e7:fc:1d:38:a7:f4:28:64:88:55:d5:16:fe:
78:d1:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:39 2025 by rpki-client