Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
File: nA6h0d1bYGSFHYSccPHLFPyyo4M.mft (raw, json)
Hash identifier: 2i2vVqkSL2bzsXfErKg+tmE/jcd0XVPB4uYOXydHL6A=
Subject key identifier: 29:90:C4:3F:6E:3F:40:E5:DD:F2:15:2E:25:B9:B4:F8:CE:D3:CB:BA
Authority key identifier: 9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
Certificate issuer: /CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Certificate serial: 019521BA49A2ED53F00BF66261FAC1021B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
Manifest number: 0798
Signing time: Thu 20 Feb 2025 05:00:11 +0000
Manifest this update: Thu 20 Feb 2025 05:00:11 +0000
Manifest next update: Fri 21 Feb 2025 05:00:11 +0000
Files and hashes: 1: Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa (hash: P7IzVfswDuCa9rPQa+x0Y8KRXxnLbD76QVgGKU1lQe4=)
2: nA6h0d1bYGSFHYSccPHLFPyyo4M.crl (hash: Zubr/8IV7rbkNXHwj118u13Xr/iMQoGOpH4ZobDNm1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:21:ba:49:a2:ed:53:f0:0b:f6:62:61:fa:c1:02:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Validity
Not Before: Feb 20 05:00:11 2025 GMT
Not After : Feb 21 05:00:11 2025 GMT
Subject: CN=2990c43f6e3f40e5ddf2152e25b9b4f8ced3cbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:06:f8:21:aa:d5:94:97:8c:5a:03:22:87:
f1:7e:42:f4:1e:01:37:f8:43:cc:ff:75:50:12:33:
4b:e8:39:e4:9a:35:ac:63:8e:29:dc:f5:3c:f6:44:
8d:a5:ff:33:93:29:32:29:d8:c4:c5:13:8d:9a:62:
18:4b:d1:73:10:a3:67:11:2a:40:06:9f:a4:bb:15:
b1:e4:2c:de:d2:32:df:35:17:18:87:dc:05:fb:64:
a7:37:84:02:09:44:6d:43:5f:51:76:05:5f:62:dd:
37:30:b4:5a:59:73:5c:fd:8f:85:f8:35:c2:35:04:
15:6c:3c:af:58:2c:10:d5:2e:c7:71:d4:4d:20:96:
4b:17:4c:5c:17:01:8a:2b:e5:48:55:1c:8e:fd:7d:
d8:44:2b:ee:fd:9f:26:30:53:c3:79:9f:5c:09:95:
83:59:ff:b0:27:c9:c7:b6:8c:6e:91:ea:6b:5a:0b:
c6:44:b0:35:f1:5e:96:7c:f6:42:e7:15:9f:30:da:
2e:f3:84:b2:8a:0a:99:87:2c:96:b4:19:cb:08:92:
c6:39:d4:57:cc:fa:50:7d:04:d3:2a:29:ff:86:14:
a2:59:85:17:bc:5f:1f:f7:29:9b:21:23:65:5e:c9:
14:be:82:9e:52:32:10:4d:c7:52:80:ac:18:10:13:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:C4:3F:6E:3F:40:E5:DD:F2:15:2E:25:B9:B4:F8:CE:D3:CB:BA
X509v3 Authority Key Identifier:
keyid:9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f7:f3:16:d2:92:96:79:8e:eb:0e:d8:8d:f4:28:22:df:51:
65:05:51:6b:5b:64:3b:f6:b8:0b:a3:87:65:00:1d:3a:59:c2:
9f:b1:e4:d9:7e:73:b2:19:0c:c5:ff:72:9f:fa:34:a2:bf:5f:
37:6c:b0:4b:06:92:d9:7b:eb:fc:8e:4e:bc:a2:66:89:4e:6d:
b7:35:64:69:f3:35:e7:98:d8:bd:a2:c8:8f:be:04:b4:32:41:
86:54:53:c4:9a:20:75:05:e3:49:24:fd:49:ac:7a:48:1a:c9:
c1:4c:6b:12:74:c5:d2:e7:e0:c3:e7:51:68:a8:84:96:fb:6c:
f2:e2:85:fc:5c:ab:dd:aa:33:d2:e0:67:9d:0e:ce:20:af:9b:
1f:60:d0:f5:c8:eb:c5:f6:5e:5f:b3:4c:0d:29:ce:69:9f:48:
e8:60:8a:24:5e:83:8e:5c:fd:95:91:ef:0b:ad:9a:3b:4c:ec:
f4:47:f7:09:87:5d:d7:48:a6:6e:73:a5:58:81:24:c3:55:58:
19:c0:22:ef:50:3e:a8:b9:28:8b:e8:05:05:d0:63:e5:4e:80:
fb:47:cc:94:cb:70:26:37:77:58:20:df:ed:ce:16:8a:25:eb:
25:8a:28:e8:a2:88:c9:fe:02:32:21:67:bb:3a:f2:5d:59:d2:
aa:7a:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:10:15 2025 by rpki-client