Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
File: nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft (raw, json)
Hash identifier: JOZRGl+g9dsnKbRVPCVRDsb9lFecLAcfD75nnxELUdk=
Subject key identifier: 94:2C:7C:E1:38:B5:63:C7:EA:9A:85:80:9A:9F:DF:C1:D2:70:C6:10
Authority key identifier: 9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
Certificate issuer: /CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Certificate serial: 019546A2BF15272398EA8D4DFC59C9A1311F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
Manifest number: 0357
Signing time: Thu 27 Feb 2025 09:00:25 +0000
Manifest this update: Thu 27 Feb 2025 09:00:25 +0000
Manifest next update: Fri 28 Feb 2025 09:00:25 +0000
Files and hashes: 1: X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa (hash: I6HoTfl6GNQQqkXZn/T89sRl04MZcoN1b181n8idbSk=)
2: nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl (hash: dO2DsbHotLvhvjzouDIf+MHrbvAm3w3vMRxaD7lK/Rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:a2:bf:15:27:23:98:ea:8d:4d:fc:59:c9:a1:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Validity
Not Before: Feb 27 09:00:25 2025 GMT
Not After : Feb 28 09:00:25 2025 GMT
Subject: CN=942c7ce138b563c7ea9a85809a9fdfc1d270c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:ff:56:af:12:f3:15:51:c2:cc:d3:ec:e2:
88:fd:00:ec:de:16:4b:d7:39:d3:b2:ed:72:50:1e:
d9:58:3e:6a:9f:86:06:00:a3:8f:ad:2f:0e:5a:fb:
ce:86:40:25:90:45:5b:23:3f:05:cb:60:fd:f7:d2:
b6:32:85:1e:1e:5b:fe:7c:4f:7e:5e:d6:72:f3:c5:
00:d8:34:5d:2e:a1:be:7d:9e:2e:75:f5:3e:db:4f:
e7:47:5d:06:7e:c3:c2:07:b6:8b:06:6b:72:87:88:
28:9f:d6:ce:ae:bb:78:f8:df:d6:a3:6f:e9:be:46:
ae:18:fa:ae:f1:d9:b0:b6:34:7f:89:c9:47:69:0f:
c0:1f:dc:3e:72:52:6b:2f:b4:9c:d2:18:78:ba:9c:
eb:dc:be:1c:83:fe:b1:b7:5d:0c:9d:eb:45:bb:b2:
91:61:68:c7:63:bd:a9:a3:f1:f6:6b:d6:a2:a6:1d:
f7:6a:63:03:74:93:12:97:6e:6e:90:b9:f9:a7:4e:
9d:c9:66:d7:9f:4c:3a:7b:d3:d4:77:ad:b7:e8:a8:
7d:a4:02:17:dd:63:9b:55:dc:bb:fd:00:10:ef:df:
3a:d8:84:d1:4a:b6:be:49:14:7d:b0:85:f3:79:59:
08:37:d1:31:57:51:d2:3d:14:b0:a6:b8:bc:66:2d:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:7C:E1:38:B5:63:C7:EA:9A:85:80:9A:9F:DF:C1:D2:70:C6:10
X509v3 Authority Key Identifier:
keyid:9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:36:3c:fc:34:20:c5:a4:d1:1e:8d:a5:ad:7f:e7:0c:ff:2a:
75:fb:b6:88:7a:5d:b0:01:c8:38:f8:ad:08:51:11:41:13:64:
13:88:b6:93:d4:e3:1b:e6:1a:e3:99:4f:bb:dd:ed:10:4c:c1:
21:4b:d1:b8:fd:2c:26:6f:d4:ff:f5:f2:83:1b:2a:59:ea:6f:
8d:f9:03:4b:8e:19:2f:3a:57:1c:ec:53:41:6b:c7:dd:a7:bc:
a8:14:27:81:ab:3c:e9:08:aa:8d:ec:4a:c8:ee:ad:ba:3f:1d:
16:e8:0d:a9:23:36:49:98:7c:d6:c9:1a:72:64:3b:16:49:b0:
4f:09:21:1b:f3:74:ec:3d:88:99:b8:92:9a:da:ec:86:3c:11:
d9:04:75:d5:e5:ef:6b:6e:ac:c9:fa:c2:a8:ad:d2:73:12:dd:
e9:c3:bd:50:d8:24:e9:58:ff:51:d1:08:55:38:2a:31:6e:55:
03:23:d1:80:81:8e:c3:3e:c8:5e:91:8b:91:22:81:47:67:57:
a2:46:23:98:f7:1d:e4:21:92:33:14:89:5a:10:b3:d3:35:7d:
ec:5e:5c:60:35:5c:a1:e6:65:d4:16:fd:22:65:71:8d:d9:b1:
65:0c:a1:b7:7c:ba:1c:6f:e5:ac:bf:0c:51:4a:80:c8:3e:ef:
56:40:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:25 2025 by rpki-client on console.sobornost.net