Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
File: M_NfwrXUmCjCbgfKYpwBLMESCrY.mft (raw, json)
Hash identifier: Mu6L9HwMJ/aapYrjHDVQD2mjMmPRmUqzMbUHTP6A7rw=
Subject key identifier: 51:6C:0D:E8:FA:FC:5E:89:99:D3:86:85:AD:34:39:BC:EB:C2:22:6B
Authority key identifier: 33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
Certificate issuer: /CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Certificate serial: 01943957BC2772ADB3535AECD42A47628CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
Manifest number: 023C
Signing time: Mon 06 Jan 2025 02:00:38 +0000
Manifest this update: Mon 06 Jan 2025 02:00:38 +0000
Manifest next update: Tue 07 Jan 2025 02:00:38 +0000
Files and hashes: 1: M_NfwrXUmCjCbgfKYpwBLMESCrY.crl (hash: 3BEmHJmTxNw81uZ63pm9mYYdpKUEWS9lm2CDADgPo1o=)
2: Zr4zrVa14qTk0DWVyU1eNk28OKA.roa (hash: MNGrogibrbUY/sCU5cxNK572ovoJBrCwCfX27ahi2B0=)
3: si5v-0IpPdDov5cDNtRJiV616_Y.roa (hash: DGCdknIJtsShLbGtErd2Gyf+7uZBYy3Kj1ErdnqNtl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:57:bc:27:72:ad:b3:53:5a:ec:d4:2a:47:62:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Validity
Not Before: Jan 6 02:00:38 2025 GMT
Not After : Jan 7 02:00:38 2025 GMT
Subject: CN=516c0de8fafc5e8999d38685ad3439bcebc2226b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:e7:05:a9:fb:88:de:5e:fb:9e:1d:7f:aa:
38:9f:03:86:8d:73:df:71:b0:fd:c0:f0:58:af:a5:
59:ba:8a:3e:77:38:d9:07:f4:fc:99:2a:0c:61:f2:
8f:20:fe:d2:cb:fe:0b:f6:0b:24:23:26:cb:bb:c1:
03:62:ac:8e:94:d5:0c:23:44:ca:b9:69:71:7f:75:
ac:60:cd:43:65:ed:36:fe:28:7a:94:69:40:07:34:
47:74:fc:fb:1e:c6:84:d7:66:f0:4a:f1:b0:c2:a8:
0f:c8:fc:98:ca:82:b6:34:3b:4d:e1:2a:f4:75:08:
7f:36:35:f6:44:56:fe:7e:c7:85:cd:32:31:b7:28:
e4:14:28:b4:3f:63:e5:64:55:b1:f4:51:01:ae:a9:
33:53:7c:57:9b:83:83:89:f1:c9:05:ee:56:56:ed:
52:3d:82:74:90:a7:cf:f3:77:b2:28:c8:09:92:57:
73:20:56:90:b6:91:35:29:bb:4e:9e:f8:49:2e:17:
5c:10:bb:cf:ce:3d:27:08:14:30:c7:fc:49:54:8c:
8e:d3:d4:c3:51:14:88:25:f1:18:e6:b7:6a:6a:43:
df:d0:b3:26:d5:9d:60:0e:9d:97:fc:b4:a2:94:ac:
fb:17:ce:7e:8f:a3:a0:04:57:ad:56:06:2f:02:0c:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:0D:E8:FA:FC:5E:89:99:D3:86:85:AD:34:39:BC:EB:C2:22:6B
X509v3 Authority Key Identifier:
keyid:33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bf:ef:66:9f:c5:6b:da:be:16:dc:d1:75:af:d6:72:15:31:
fc:57:ad:31:d8:30:07:cf:fd:22:63:1f:a3:af:91:0a:39:2f:
15:a8:f2:3e:cb:6a:7a:ec:e4:85:5d:27:6d:c4:15:08:55:12:
ef:39:99:c3:89:93:aa:22:72:d2:6a:e7:de:59:47:68:18:de:
b8:1e:47:bd:0c:70:62:78:07:77:6b:43:44:d9:e6:60:64:5c:
4b:0d:25:6e:47:77:f7:50:2e:45:01:6a:26:b7:96:d4:c9:59:
7e:b6:0b:a2:7c:04:34:75:26:b5:21:7c:7c:5e:bd:87:31:1d:
d5:8f:70:1e:0b:52:92:19:54:18:b5:d3:96:0e:c7:9c:9e:a0:
f0:fc:a2:d5:c3:4d:e8:8d:e8:61:d6:08:19:58:ee:37:9a:e2:
fd:33:74:41:67:cf:1e:12:45:e4:01:86:ec:a3:fb:f5:09:62:
91:e2:71:84:db:a1:7c:44:a8:e1:af:e0:09:a9:af:1b:5b:99:
fd:50:d1:ca:a8:be:80:7f:c0:ad:69:10:56:6c:d9:84:2d:96:
1a:dd:38:f5:4e:4d:7b:a7:87:0d:19:56:c9:b8:35:0a:69:d5:
6d:ea:92:b2:37:f0:e6:8d:7b:5a:d0:83:cb:47:e9:3b:a6:bd:
83:f0:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:17 2025 by rpki-client