Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: K0ed2EN5jdeDdtE/yh1Rx3SQFUvReRVla/NaKN+1Wyg=
Subject key identifier: FA:EE:D0:FF:3F:81:37:C4:BD:5C:8E:BD:07:A6:86:AE:03:E1:58:B4
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 0194BCAA2B91A673D64780F7098079D3792C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: 6z0m87HYOstDIdCZZkx9Nqhlg+rtZ2YCxahtYzZ7dTo=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:91:a6:73:d6:47:80:f7:09:80:79:d3:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=faeed0ff3f8137c4bd5c8ebd07a686ae03e158b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:72:83:f3:6e:1b:7c:fc:49:e3:66:07:3a:
28:67:87:01:df:13:ac:a6:bd:4b:6e:b9:c8:fc:84:
7e:4b:19:e5:ef:9e:02:84:63:aa:be:19:b2:93:77:
d0:79:9a:a5:48:e8:70:cb:77:f6:4b:cc:7b:9b:af:
0f:e1:1f:64:96:59:84:e2:4c:13:05:27:24:ab:0a:
99:fe:5b:de:3f:da:c2:c8:aa:c4:b4:ef:ff:d3:bb:
20:99:5b:a5:24:b0:22:6e:a7:cd:a2:46:33:97:9a:
b7:df:9b:51:36:48:0f:c5:b6:4e:c2:99:0c:00:78:
ea:16:fc:99:04:cc:b9:ea:96:fd:86:c7:a7:b3:1a:
63:37:f9:e5:2b:b6:36:8c:5f:4c:49:1e:d8:cc:f2:
85:ce:ba:fc:e2:56:dc:9f:1d:2d:c0:5e:ef:9f:07:
02:50:c1:d2:14:a1:bf:31:2b:33:22:b8:f3:a8:d5:
24:da:79:f5:3f:2b:32:44:57:9e:d3:83:62:74:3b:
75:9d:62:1c:6f:75:58:2a:c3:1b:58:9c:7c:24:ba:
18:84:2f:86:d9:77:c5:43:6b:2d:84:c0:67:0e:f9:
b9:50:33:b5:0e:9c:06:a4:61:9e:ec:47:ce:32:39:
5c:af:61:a5:ee:7b:0a:88:6a:e7:67:5a:94:f7:2b:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:D0:FF:3F:81:37:C4:BD:5C:8E:BD:07:A6:86:AE:03:E1:58:B4
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b2:54:cc:e1:a0:f6:03:8e:76:b7:19:f8:05:7f:5c:01:09:
d9:34:ab:71:28:68:52:aa:92:68:45:ec:83:4e:7a:df:72:73:
5b:da:66:d0:e2:e1:a6:de:28:f7:0e:74:5f:8e:fd:fe:d6:1d:
f6:a5:be:6d:32:ec:d5:93:47:c6:a3:e7:0d:de:27:00:5d:b1:
68:f6:a6:fb:b7:1c:9f:0b:d8:a3:90:0b:5a:23:c3:77:31:a7:
f9:68:c4:ee:d2:34:8c:4f:d4:24:cc:a0:77:ec:89:d0:b0:34:
39:29:d6:83:b0:01:7f:74:54:0d:6a:8c:d6:58:14:96:48:b8:
f8:ed:55:74:63:b9:0b:fb:13:7f:02:40:8a:ec:b4:f8:18:ef:
bb:a8:48:00:22:6f:91:0f:da:0a:d4:fe:40:19:bf:e0:99:44:
b5:c9:a2:9d:98:d9:2a:dc:c9:e4:06:cd:e5:0b:3b:6f:da:1d:
5d:ab:ab:37:35:f7:9a:78:1e:d8:d4:27:01:03:f0:0a:4a:52:
67:2e:07:e7:e6:26:63:43:0c:38:6b:07:7b:f4:82:6f:71:4f:
01:f2:b7:f1:7a:dd:78:ea:64:86:06:bf:ce:7e:14:7a:8c:af:
67:1e:a6:53:9c:a6:8d:a6:bd:a1:9c:b5:21:23:dc:42:5a:bf:
d8:d0:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:06 2025 by rpki-client