Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: TjU3GxxELBmzbzDE/bRhNQFsvJYF8bzlams6g2QSpn0=
Subject key identifier: E3:C2:47:8E:BC:75:86:0C:C2:07:45:4B:9E:29:C3:D0:82:40:3E:31
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 0194BCA9D89FACD6316ED9B298D8A1AC613E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: CcvSY2EyxabF4hAO+fMoZlSPz5AC6sf0XSq+VYoNaqM=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:9f:ac:d6:31:6e:d9:b2:98:d8:a1:ac:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=e3c2478ebc75860cc207454b9e29c3d082403e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:bd:69:87:e0:b6:6b:df:ce:94:ce:58:57:
00:a4:92:b7:f5:ea:be:44:af:8e:82:95:eb:11:47:
c6:1b:f6:27:e9:9c:af:64:e5:c3:3e:36:37:93:49:
75:74:5b:3f:c8:cb:69:20:be:06:19:71:9a:69:27:
04:45:9e:0b:99:ba:66:de:95:e4:c2:ba:85:b6:49:
56:f5:c1:b9:fe:d2:95:e1:52:2a:5b:10:a1:62:af:
17:9f:ef:cf:48:a4:35:2c:4d:3e:88:c6:80:fe:07:
ac:cb:c3:eb:3d:51:f3:24:ad:09:05:8b:34:b2:cd:
48:ed:d7:0f:fe:5f:a1:a9:46:52:52:63:c2:2c:c9:
00:a0:a4:f4:6f:13:26:d3:9d:d1:21:52:2a:07:4a:
39:0c:96:25:be:36:8e:15:3c:c9:0f:76:52:28:e3:
28:e8:e6:39:90:26:8f:b2:4f:6c:5e:ae:03:44:0d:
d0:f9:02:0f:ee:78:b6:70:e1:e6:74:50:94:fb:2d:
a6:3a:a7:77:ea:8a:8f:f8:e4:aa:f1:cf:6f:aa:f9:
4d:1b:b4:93:b9:8a:c2:8a:ef:9d:d0:46:d1:af:3e:
18:9c:7c:13:0f:63:51:26:91:e3:20:c8:fc:b8:c0:
5a:a3:22:cf:fd:97:53:dd:f8:16:8c:6d:30:29:bd:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:47:8E:BC:75:86:0C:C2:07:45:4B:9E:29:C3:D0:82:40:3E:31
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8f:c3:7d:17:49:24:00:56:0b:1b:14:4b:29:97:e1:e2:d5:
8a:0d:b8:c9:b4:a9:b3:1d:dd:a0:d8:b5:6b:0a:1b:20:e6:37:
d8:ad:1a:bf:ad:f6:a9:c5:c1:f7:bd:3c:4d:49:2e:92:2e:99:
99:4c:b7:84:ef:9f:8d:81:46:79:dd:62:65:c1:af:91:8b:8c:
9c:f7:ae:53:a2:44:21:f6:02:2a:b0:44:1e:d9:53:90:e6:d2:
ca:f1:05:7c:d4:29:73:f6:f9:d4:59:14:29:52:0f:44:c0:38:
c6:eb:b1:53:99:86:87:f6:80:54:6a:a0:7e:37:d7:67:3b:5e:
15:89:c0:ee:84:20:97:9f:23:46:d2:5a:27:f0:b3:df:b3:99:
12:43:68:07:28:6d:9d:21:34:43:e0:68:5a:a8:e4:9c:28:7a:
a3:19:06:20:41:ab:ee:12:72:4c:f9:1f:05:a0:62:6f:64:de:
c4:eb:de:d6:1b:e4:b9:06:65:5e:57:2d:d6:34:b7:63:96:1f:
dd:35:49:50:44:bc:18:38:e3:dc:21:6c:8d:36:bc:f5:a3:31:
86:43:c6:f6:65:8d:c1:9e:4e:2f:03:60:e8:36:96:4a:fe:24:
4c:1a:5c:74:93:1e:68:6c:1c:68:a2:e1:cc:80:5d:19:a1:19:
4a:4c:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:33 2025 by rpki-client