Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: DIIsuazRF/4PPi169FixL+yJQCv6HQoS+U166LWHOpk=
Subject key identifier: 23:A0:39:5A:D2:32:36:C9:69:74:00:93:98:77:3D:56:67:4B:A0:76
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 01962F06F2B890F14C4869245514F3456CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0AB6
Signing time: Sun 13 Apr 2025 12:01:46 +0000
Manifest this update: Sun 13 Apr 2025 12:01:46 +0000
Manifest next update: Mon 14 Apr 2025 12:01:46 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: kF1TlGTSyqthVN6p59d/OelfET043No+2mqeBoQ7vJs=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:f2:b8:90:f1:4c:48:69:24:55:14:f3:45:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Apr 13 12:01:46 2025 GMT
Not After : Apr 14 12:01:46 2025 GMT
Subject: CN=23a0395ad23236c96974009398773d56674ba076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:9f:f5:c5:ff:87:44:8b:ab:8e:78:a0:4f:
a4:36:f6:19:0b:8f:ea:a8:57:2f:00:09:35:00:95:
f7:73:8d:69:61:55:f0:0e:cb:a0:65:40:c7:ff:4f:
fc:04:0c:b9:bc:97:b1:41:22:3c:91:2b:16:8d:db:
fe:9b:6f:d7:dd:db:a8:e3:f9:09:69:29:7d:0f:13:
d4:7f:2a:0d:91:af:6a:f9:e3:d8:61:38:83:f2:68:
c7:88:96:88:1d:61:8b:89:be:6e:8e:99:68:3f:36:
3f:2e:62:9a:c9:d9:bb:5a:fe:78:2b:28:64:d4:16:
3d:4f:c5:26:95:d2:fc:ee:fb:e2:c0:e4:ec:bc:42:
c6:90:a6:cf:b3:9d:f1:7a:a6:9f:b3:b1:9a:ff:89:
70:a8:cb:6f:6e:2b:8a:1e:19:b1:18:40:8d:1f:9b:
bd:60:51:b4:44:78:c6:48:58:0b:cb:05:72:19:42:
b1:bf:b8:f5:33:e4:b9:41:46:98:37:0b:77:23:11:
b1:6d:8a:b2:cd:27:80:0c:85:59:c8:30:36:26:68:
e3:b1:5d:1b:89:af:2d:d8:45:59:d8:92:7d:97:ef:
b2:fa:42:16:92:71:9f:2a:cc:f0:07:b4:09:61:c6:
17:bf:a5:d2:77:71:41:90:07:b7:5c:ae:76:82:8d:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:39:5A:D2:32:36:C9:69:74:00:93:98:77:3D:56:67:4B:A0:76
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:b7:a0:e2:63:63:7e:c4:19:9e:48:cb:7e:30:e2:5d:b6:
0f:91:31:f8:ab:f0:92:b1:45:3b:14:bb:02:08:88:f2:cd:9e:
5f:ae:bd:11:5f:ea:c5:d2:6a:de:8c:dc:44:ac:cb:a3:b2:21:
a1:2e:18:01:1e:21:fa:b5:ec:2f:59:68:2b:2d:8a:6d:74:8d:
04:e2:59:b7:0d:d1:23:08:4c:07:67:c3:a1:23:42:b6:5e:22:
7a:1f:62:87:7a:6d:27:85:a3:e8:13:44:83:c1:f8:af:9e:1d:
e2:34:28:0a:d1:c2:59:06:2b:d4:1c:cc:86:66:a3:3c:45:50:
e4:67:11:65:28:2c:a4:e8:5c:00:01:89:2b:6a:f0:5f:fe:01:
3c:ac:e6:a1:67:63:07:7e:d6:15:a1:23:34:be:66:35:d0:15:
03:07:10:cd:50:80:fe:94:f5:7d:ba:97:8c:c0:45:ec:14:8f:
6f:5a:bf:92:b1:27:3a:9d:d1:d0:3b:c6:6d:c7:8c:98:8d:46:
e5:b9:db:6c:b0:7a:cb:88:b9:96:9f:ec:da:b4:25:b9:b4:2b:
0f:e1:65:0c:0a:c9:e4:bb:8c:fd:39:c4:a6:f1:2b:72:5e:22:
e9:59:30:46:2e:d1:a7:02:15:78:88:63:ff:27:29:5d:ba:ec:
24:d9:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net