Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier: loYpAT7QVgQWT/ifvnYJvRatzKxESDcmMX7GC1jLm9I=
Subject key identifier: FF:A7:72:F7:F7:DD:87:1E:EE:92:B4:EC:49:01:2E:60:ED:22:39:A4
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 0195DFD9093742109284C6A26A7E0922BE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 03:01:37 +0000
Manifest this update: Sat 29 Mar 2025 03:01:37 +0000
Manifest next update: Sun 30 Mar 2025 03:01:37 +0000
Files and hashes: 1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=)
2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: Zup8UvfAVjyo7YEVWxTMQVic0LNj3zv1mU7ql4yMUeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:09:37:42:10:92:84:c6:a2:6a:7e:09:22:be:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Mar 29 03:01:37 2025 GMT
Not After : Mar 30 03:01:37 2025 GMT
Subject: CN=ffa772f7f7dd871eee92b4ec49012e60ed2239a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:73:6e:f7:7b:e1:54:eb:1a:93:8d:43:6e:
88:4c:eb:de:9a:9f:25:d6:ef:61:a8:4c:f8:f8:f9:
3d:4f:3c:b5:d7:2a:3d:26:42:1d:68:63:53:e6:2d:
08:76:32:25:46:d4:96:ad:22:36:f4:32:97:63:43:
ba:ef:79:3c:43:e8:8c:13:b0:3c:f6:fe:84:9e:c4:
74:f6:f1:fc:7e:a9:9f:e0:ed:35:b7:86:7c:91:6d:
c0:3a:81:97:45:02:a1:ac:67:8e:90:8a:f7:3b:b1:
ba:41:b1:dd:40:a0:aa:3a:f0:96:f7:08:22:e9:f8:
1f:fa:b4:5d:8d:d2:9f:80:ed:4a:8e:e9:80:c4:7f:
ec:2c:ff:8c:20:66:07:c9:53:c3:31:8b:d5:02:aa:
fe:ba:fa:c6:2c:e6:d6:af:ae:ae:f2:6b:7f:81:6a:
49:66:5c:c2:3d:0e:3d:af:cb:cd:0c:e6:8f:55:97:
f4:40:0a:f1:b4:0f:bc:10:93:64:fd:4d:ef:52:ee:
11:b7:d6:2d:13:53:65:74:42:6e:8f:5f:64:5d:53:
30:66:20:62:80:46:2b:d9:1f:06:1a:94:e0:56:e3:
8c:af:57:8d:74:a0:38:00:be:0b:27:3c:b6:08:d9:
3a:33:7d:ec:87:ea:15:34:e2:aa:f3:7e:2f:3e:1c:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:72:F7:F7:DD:87:1E:EE:92:B4:EC:49:01:2E:60:ED:22:39:A4
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:de:2e:93:bf:49:52:be:71:22:8a:e5:dd:9b:a6:b7:6d:
be:b7:c1:aa:12:0b:86:d1:b8:cb:f3:30:52:2c:76:07:50:55:
8a:8d:09:f0:13:9b:2e:b9:0c:be:88:a9:68:f6:ac:53:ab:e6:
8c:89:62:aa:b6:43:ae:c2:ea:97:c9:b2:6b:b6:bf:9f:42:e9:
b5:53:83:fa:48:6e:ed:6e:2b:90:b2:a9:71:89:16:b3:84:31:
f8:5b:aa:f9:8a:7a:4c:af:3e:4b:b5:87:88:74:fe:4b:5b:bf:
74:4e:b9:39:91:6e:e0:e3:69:f7:35:26:cd:70:48:64:6f:f8:
8f:0a:21:46:b8:2b:bf:eb:e9:10:7b:18:b3:f8:85:87:d3:29:
06:41:88:af:3b:b0:7c:8d:a8:a9:b3:1c:dc:67:37:a0:8b:c4:
53:dc:7b:d2:98:42:f5:73:88:2b:d1:d4:ea:a4:6a:28:36:56:
56:f2:87:7b:3c:09:49:d8:80:ec:d9:97:5f:c8:ac:e5:47:d3:
97:76:95:f5:67:1c:ff:89:7d:0f:a3:3f:cf:85:4e:37:62:cd:
72:4e:26:10:7b:8f:7e:27:99:c6:47:89:30:04:55:27:3d:6c:
6b:2b:a9:09:ad:94:84:75:73:f7:62:4c:c8:8a:43:14:4e:ab:
54:c4:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:52 2025 by rpki-client