Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: JfSGIstFwo/W9dhBDsFc6+HvJThEAg6mSBkvI6ij4yI=
Subject key identifier: 17:AB:AA:F7:CF:5B:39:59:75:B6:21:E2:EE:FA:FE:6C:7F:9C:0E:E0
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 0195E046416F2BDF78DF93F6520F27D6A73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 07F4
Signing time: Sat 29 Mar 2025 05:00:55 +0000
Manifest this update: Sat 29 Mar 2025 05:00:55 +0000
Manifest next update: Sun 30 Mar 2025 05:00:55 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: BxYwnVImYwUgkkXDxSR0RE5hDVH4qW64VFoYxx/Bixc=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:41:6f:2b:df:78:df:93:f6:52:0f:27:d6:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Mar 29 05:00:55 2025 GMT
Not After : Mar 30 05:00:55 2025 GMT
Subject: CN=17abaaf7cf5b395975b621e2eefafe6c7f9c0ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:18:5a:a9:48:5b:a6:0b:b0:ed:11:0f:db:
34:6f:18:44:cb:10:a7:9e:d7:29:71:ec:9a:11:7d:
27:80:dd:65:8a:b1:a6:45:80:af:5d:a3:c9:a5:ba:
ca:fd:ec:18:0b:ec:c8:46:4a:ac:be:1f:31:b1:76:
9d:36:94:36:8b:80:8b:ff:bb:45:63:7c:61:c1:75:
55:5a:5c:8b:6a:ab:ef:69:3e:f9:5e:bf:14:87:88:
99:13:29:ff:df:6d:eb:62:b3:a3:e5:ef:34:41:9b:
70:0f:a6:59:4a:6c:14:eb:54:44:07:50:29:41:da:
18:d9:05:90:0d:64:95:c3:fa:71:98:d3:b4:f5:08:
cb:53:a8:f6:22:40:4f:ec:74:1d:43:b9:09:9d:00:
59:6b:87:e2:86:de:5c:f1:33:2a:f6:3d:ae:6d:32:
08:52:31:d0:d1:8e:0a:3d:51:df:46:e6:14:13:26:
e0:c4:53:e1:2d:b1:a4:b5:a7:a1:ea:02:31:d6:29:
67:9a:8b:a8:c5:ef:4f:7d:aa:be:29:ec:c5:0d:1f:
78:6a:e6:36:32:71:c9:39:5a:11:17:14:43:c7:1c:
24:e6:bb:0a:54:9d:5e:27:cc:95:c4:b4:8c:88:b7:
3a:83:54:b6:52:d6:ec:7d:d9:5d:4a:8f:0f:94:6f:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:AA:F7:CF:5B:39:59:75:B6:21:E2:EE:FA:FE:6C:7F:9C:0E:E0
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:9a:08:27:db:3f:6e:99:95:72:bc:e9:1c:37:9e:57:c1:
a0:cd:b6:f1:bb:e3:78:c6:7f:f7:aa:41:c7:2a:e7:78:18:13:
f8:03:c5:b8:4a:e6:c4:18:8d:79:45:07:8d:1e:67:39:78:1e:
03:55:fa:21:54:0d:93:0b:7b:90:ad:71:bf:f1:ed:9f:eb:f5:
f5:64:68:13:3e:ed:25:9d:32:3a:35:4b:b4:a0:a9:af:7a:64:
66:13:94:a6:12:2d:56:96:c5:43:34:81:d1:60:14:40:68:cc:
d7:57:46:f0:0c:af:be:a9:a8:89:c5:96:21:d4:35:00:e1:79:
42:1d:74:fd:fa:b3:04:d2:79:68:3c:a8:de:ba:d3:54:c1:2e:
28:f0:05:99:e1:97:1d:25:a1:21:3a:44:a4:cf:7a:37:8a:0e:
af:4f:7f:2d:ce:55:48:29:e6:e3:74:bb:35:e7:ed:e5:ef:8f:
f5:a2:39:9f:d8:51:36:29:3f:87:1a:af:ba:e9:8e:71:d2:2c:
75:f4:63:4d:73:9f:0c:40:74:41:60:61:73:d6:2e:f2:b0:e9:
3d:89:25:60:96:64:10:6d:e2:18:36:5d:5b:9b:76:3a:f5:b7:
23:2e:03:47:38:da:2b:39:d2:11:9a:28:46:d2:bc:49:c4:05:
e8:09:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:52 2025 by rpki-client