Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: i2n1w3cJoFmPsyXm4LAuyLlpqM6yKHH/xkQmDjpNN7A=
Subject key identifier: 0F:2C:7D:1C:17:4F:C3:F1:41:7D:63:40:98:23:A3:0A:92:2E:C3:AE
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 0195E0B418946E7F8ECF06CB45C28FEEB4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 047D
Signing time: Sat 29 Mar 2025 07:00:53 +0000
Manifest this update: Sat 29 Mar 2025 07:00:53 +0000
Manifest next update: Sun 30 Mar 2025 07:00:53 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: 8LMuhBWDJAOXOEsOK1TpH4N5be11rzv6OoS2SN+Ny8g=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:18:94:6e:7f:8e:cf:06:cb:45:c2:8f:ee:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Mar 29 07:00:53 2025 GMT
Not After : Mar 30 07:00:53 2025 GMT
Subject: CN=0f2c7d1c174fc3f1417d63409823a30a922ec3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:51:07:39:9f:e2:47:1e:54:64:3b:03:9d:
57:38:96:ad:18:43:18:9a:29:da:14:49:11:bf:1b:
03:d4:65:38:33:4b:2e:b9:b9:11:e9:35:c3:1d:63:
62:1f:4c:dd:fa:d0:5f:b5:87:cb:6e:4b:ad:fb:6c:
30:a3:90:c2:7c:29:ce:c0:e4:51:69:dc:ee:18:8f:
9b:bc:ab:53:1d:95:cf:14:ca:29:8a:8d:62:4d:9b:
7d:81:ba:1d:f7:c7:bd:0c:ce:34:07:51:6f:fa:73:
4a:52:91:b7:7e:2f:6e:70:25:9f:f3:84:c6:31:2c:
44:ea:f1:b2:2f:b8:ed:12:3e:bd:c5:63:4d:13:91:
54:a6:e4:51:97:bd:a0:a5:ae:a4:3c:76:90:e2:46:
2a:c3:dd:b4:1c:4b:c1:82:01:71:e7:8b:a9:65:9f:
c8:61:83:67:19:00:b6:fa:4f:9c:f1:a0:86:9c:27:
58:02:8f:8c:0f:98:26:30:e0:31:d5:48:85:87:50:
3d:07:87:a7:00:ee:17:33:dd:d9:14:9a:03:4f:0b:
1b:d2:71:61:70:d1:2b:5d:48:70:bd:84:14:ac:e0:
56:13:7c:74:72:27:93:0d:1a:6e:d1:03:5f:13:3b:
d7:d5:b1:e1:1a:23:31:54:15:0f:0c:b7:b5:c3:76:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:7D:1C:17:4F:C3:F1:41:7D:63:40:98:23:A3:0A:92:2E:C3:AE
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:04:8f:b8:2b:6d:7f:59:c2:99:87:94:ed:24:8c:f7:7f:d2:
c0:e1:d8:f4:f7:0d:e3:ca:0d:f9:b0:b8:8a:00:ad:fd:4c:54:
f1:04:14:cc:48:3d:03:8f:55:9c:4f:51:9a:10:3e:27:da:39:
28:a1:a4:00:c7:9b:ea:b3:76:44:23:f5:d7:d0:50:9a:b4:9f:
7d:ba:8a:60:79:c7:10:50:e2:06:54:23:57:05:ca:e2:cd:6f:
45:4c:61:f1:34:20:2b:fb:e1:f4:00:a2:69:df:69:66:48:43:
d4:cb:d7:5c:0c:4b:5b:94:bd:85:96:3c:92:29:fd:02:c2:7e:
26:dd:8a:44:69:5a:07:ae:07:0d:d2:64:26:ae:fa:26:a8:66:
17:0b:0e:b5:e2:ff:53:5e:5f:57:49:f8:4b:ee:79:c1:eb:a0:
31:e9:43:09:bb:30:e2:78:11:47:e1:fc:f2:41:40:e3:80:bb:
ba:2b:fd:7e:3f:c3:e2:39:37:20:db:46:aa:33:0a:c5:2e:61:
6a:51:b1:6e:e8:21:7b:13:f7:55:f3:b3:f5:ef:0d:a6:c1:8a:
23:f0:15:44:1a:3a:39:48:9a:7a:a3:f4:b9:aa:03:46:9b:95:
9e:06:4b:2a:8f:ad:0c:c6:59:32:0f:77:c5:96:d8:f7:b8:39:
5e:2e:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:14 2025 by rpki-client