Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
File: nA6h0d1bYGSFHYSccPHLFPyyo4M.mft (raw, json)
Hash identifier: vqHv25JIzMQicjm0iqgODL5RZXeb9nOu2krS21i0zw0=
Subject key identifier: 1C:DE:BC:30:43:83:44:2C:91:8A:D3:C0:1A:08:BD:7F:32:19:F6:2F
Authority key identifier: 9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
Certificate issuer: /CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Certificate serial: 0195143610E482C7CDCC2C06530CA9F6646A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
Manifest number: 0791
Signing time: Mon 17 Feb 2025 14:00:42 +0000
Manifest this update: Mon 17 Feb 2025 14:00:42 +0000
Manifest next update: Tue 18 Feb 2025 14:00:42 +0000
Files and hashes: 1: Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa (hash: P7IzVfswDuCa9rPQa+x0Y8KRXxnLbD76QVgGKU1lQe4=)
2: nA6h0d1bYGSFHYSccPHLFPyyo4M.crl (hash: ZQdDhumr4vPcL/uzzGpjuW443reV5m7tpSWZfqknXEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:36:10:e4:82:c7:cd:cc:2c:06:53:0c:a9:f6:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Validity
Not Before: Feb 17 14:00:42 2025 GMT
Not After : Feb 18 14:00:42 2025 GMT
Subject: CN=1cdebc304383442c918ad3c01a08bd7f3219f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:7f:9b:68:94:33:50:44:81:4a:63:d9:00:
a3:ae:18:70:2f:0b:76:30:05:1d:a1:16:91:0d:f8:
75:b0:37:f6:f9:15:ac:ce:29:6f:d5:4a:13:fd:f9:
20:a2:d8:73:b3:47:fa:f3:6b:f9:b3:46:31:08:53:
5a:e8:c0:b6:61:66:7a:e7:fa:99:f1:b9:51:85:7b:
da:06:83:87:40:06:85:c9:00:71:88:1f:e3:3b:89:
5e:7d:64:9c:32:75:2a:a6:f6:37:56:35:a0:14:c9:
63:02:a4:a7:30:d2:b9:9d:db:dd:a4:a9:fc:c1:95:
97:79:fc:e1:4b:0e:7f:b3:cb:ed:2a:5d:0b:5d:5b:
9c:d6:19:07:c3:d1:f3:d1:2e:f1:04:60:54:7b:89:
d8:1b:d5:f1:a1:5f:23:b3:cd:c1:b6:22:7c:90:4d:
76:ba:23:b7:46:3b:bd:a9:23:53:a3:cc:0a:a6:47:
6a:80:4f:96:9c:20:ad:7e:b7:4a:cc:4b:69:22:80:
0f:0a:3c:8f:55:b7:ae:20:e5:42:b9:1c:d3:1b:c2:
a5:fc:0d:2b:44:08:e5:41:4c:cf:2b:b6:0c:c7:a8:
8f:70:24:7e:f7:9e:82:8f:ea:07:16:37:9a:ab:53:
9d:15:e0:13:ac:20:4f:d3:42:b5:4a:c5:50:dd:81:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:BC:30:43:83:44:2C:91:8A:D3:C0:1A:08:BD:7F:32:19:F6:2F
X509v3 Authority Key Identifier:
keyid:9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5d:5e:59:dc:3f:78:ff:94:11:df:36:a1:b8:13:8b:36:81:
6b:e9:eb:26:5d:84:53:e2:74:ca:79:cf:75:db:f8:e6:13:7e:
a2:ef:0a:f1:ff:dc:f2:19:f2:a4:77:df:a1:a1:49:0a:17:87:
46:1d:39:66:6c:39:10:06:94:69:71:1d:34:cc:94:5a:20:a5:
3a:1d:ef:6d:7d:a7:49:e2:7d:2e:24:18:2f:f1:01:b5:68:cd:
fc:aa:c3:2c:52:f8:2b:9c:e9:cd:1c:ad:65:bc:8f:dc:84:db:
0b:eb:a4:23:fd:0d:28:ab:75:e1:ca:86:73:cf:18:14:f5:75:
e8:39:ad:b8:8b:9c:6b:55:98:65:21:2a:1c:f6:79:99:85:ee:
ef:6d:da:15:65:1f:68:47:c8:35:29:c2:b5:78:c2:ac:b5:0a:
f5:41:61:13:1e:b1:f7:e5:49:74:6b:b3:e4:44:c8:94:d7:95:
67:dc:f1:e9:bb:23:ea:eb:38:a0:9d:15:17:dd:bd:40:cf:9e:
10:6c:4b:a9:04:13:ad:64:1e:9a:9d:d3:5e:ac:48:7e:91:3f:
82:e0:6f:b9:bc:6f:7d:f0:a3:0f:27:bf:74:fd:51:ec:56:9f:
e6:93:00:69:3f:9a:5a:11:4c:97:a7:ac:de:dc:64:81:d2:a0:
36:f6:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:33 2025 by rpki-client