Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.mft
File: n2mIu99iU0fpxKf8P0_GPc7mqwc.mft (raw, json)
Hash identifier: 2AYQbsEGaXprIejQmLI42l0McOI13yaqrJPbhN8Nw/k=
Subject key identifier: 27:A4:A5:A7:D0:4D:20:AD:2F:DF:1E:9C:1E:85:85:F0:C6:83:30:6B
Authority key identifier: 9F:69:88:BB:DF:62:53:47:E9:C4:A7:FC:3F:4F:C6:3D:CE:E6:AB:07
Certificate issuer: /CN=9f6988bbdf625347e9c4a7fc3f4fc63dcee6ab07
Certificate serial: 0195157FC57F598FB7D4D4878A3B71724FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2mIu99iU0fpxKf8P0_GPc7mqwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.mft
Manifest number: EE
Signing time: Mon 17 Feb 2025 20:00:49 +0000
Manifest this update: Mon 17 Feb 2025 20:00:49 +0000
Manifest next update: Tue 18 Feb 2025 20:00:49 +0000
Files and hashes: 1: WpU6YXQuNLjYmG3DNjHXEYY5lyE.roa (hash: l6yPH4xUG3bIWBmY5Lylu2nSn79+vTxNhcVqPmyVtPs=)
2: n2mIu99iU0fpxKf8P0_GPc7mqwc.crl (hash: yU+5QuHUk4h4UxRNetBHsJ1sDtTBLbrGowd7z++cRns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:7f:c5:7f:59:8f:b7:d4:d4:87:8a:3b:71:72:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6988bbdf625347e9c4a7fc3f4fc63dcee6ab07
Validity
Not Before: Feb 17 20:00:49 2025 GMT
Not After : Feb 18 20:00:49 2025 GMT
Subject: CN=27a4a5a7d04d20ad2fdf1e9c1e8585f0c683306b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:e3:78:c4:31:7e:a5:30:66:45:74:0f:8b:
d3:9b:b8:72:96:1a:5b:a7:db:50:88:da:76:3e:8d:
4e:f9:30:7b:ee:a5:6c:97:cf:c8:ed:1d:73:2c:1d:
d0:11:46:0c:cb:dc:c5:96:4b:fa:19:06:49:c1:2d:
a0:35:a7:43:57:00:76:0c:50:5a:ed:ba:98:a6:71:
a4:ab:ec:fc:8c:a5:01:5b:bd:5d:1b:67:9c:3c:b4:
cd:14:b7:3f:5a:57:4e:56:d1:93:3b:5a:b0:be:a9:
64:2b:54:2e:94:1a:52:a6:a5:6a:c2:b5:c0:60:49:
27:8b:f9:a8:1f:b8:cf:34:17:76:c1:1b:f8:d9:f3:
77:02:9d:e2:c6:0e:e5:01:28:87:cf:0f:bb:89:55:
e5:90:54:7c:50:e0:06:66:69:30:dd:12:ab:b6:79:
92:87:34:d8:d8:01:f0:ee:c7:1c:ff:cd:65:81:42:
96:83:f9:6a:85:2e:8d:7b:ee:8a:62:00:2b:18:85:
cb:ec:1b:d4:40:62:7f:a5:aa:41:1b:94:7e:64:37:
57:2d:99:e2:3c:b0:02:5a:2d:2a:14:8d:8a:35:c3:
73:0c:00:45:35:ec:6d:b7:31:ec:44:53:e2:8d:a1:
9a:2f:c4:97:94:1e:22:06:04:b8:16:95:d7:39:99:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:A5:A7:D0:4D:20:AD:2F:DF:1E:9C:1E:85:85:F0:C6:83:30:6B
X509v3 Authority Key Identifier:
keyid:9F:69:88:BB:DF:62:53:47:E9:C4:A7:FC:3F:4F:C6:3D:CE:E6:AB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2mIu99iU0fpxKf8P0_GPc7mqwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/84ec37-3241-4758-b04a-842c6875bb40/1/n2mIu99iU0fpxKf8P0_GPc7mqwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1d:fe:56:66:13:3b:a8:a9:c2:7c:e4:ab:01:10:2f:43:0b:
fd:28:77:7c:99:c3:53:da:20:35:85:06:ec:d8:04:c6:50:e3:
3a:40:54:3a:90:dc:10:0d:6e:a0:54:d9:58:12:97:97:77:40:
9f:92:b6:2e:37:40:18:6e:81:6f:11:d4:23:a9:1c:bc:e7:22:
8d:bd:4d:72:6a:f7:cd:53:e0:15:ec:18:b3:83:1d:96:3a:9f:
ca:e1:cf:a3:e1:86:b3:62:dc:7d:b4:b2:28:bf:c8:73:92:6e:
aa:bd:a6:6d:af:5a:f0:9c:dc:c1:3d:09:de:1a:4c:ec:f7:a0:
55:de:43:ae:82:24:1c:bb:88:8a:9a:18:d5:21:35:75:85:2f:
bd:54:0d:c8:fa:24:c6:0b:71:ef:30:58:f5:0c:26:96:dd:14:
77:b0:80:57:5e:d4:6b:47:14:e6:35:a9:e5:5b:0c:d9:94:e3:
99:7a:75:11:54:cd:8c:b0:c7:5d:19:65:17:6f:90:4e:18:6d:
35:26:da:18:c2:f2:73:bb:98:f3:94:04:39:21:1d:a5:fd:ac:
32:ee:2a:5d:5a:57:c6:34:a4:88:b1:e6:f7:88:3b:46:eb:33:
84:3e:38:40:1e:30:12:62:6a:25:96:f7:0e:4b:42:d1:aa:9d:
43:70:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:46 2025 by rpki-client