Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: oMfN78VXJ1WDmgvZlM4ygR9gmguF0uQWkA7yNMbbKI0=
Subject key identifier: 29:EE:1D:55:04:15:8E:B8:C3:90:9B:1B:77:48:7D:51:6F:05:FA:E7
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 0194BCE0D0F2448F1078491F27D6E405D783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 019C
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: jeOnALQAcxSQujyjJX6T4YEGjm/mkCqhUQ4cCSnLNgs=)
2: qd_aojRPaOqKMiZNW3iZSWq-Zug.roa (hash: Iydb2z6A8hY+GEZIdNxcnror4vRoJJD+unhFZp9Fwjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d0:f2:44:8f:10:78:49:1f:27:d6:e4:05:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=29ee1d5504158eb8c3909b1b77487d516f05fae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:84:f8:81:44:cb:c5:02:2e:14:fa:bc:ca:
04:39:a7:d6:05:8d:d9:a0:28:c8:78:db:01:b6:43:
9d:b7:97:b7:39:5e:c7:f0:90:32:58:c7:ec:02:5e:
91:7d:ba:b6:11:62:8a:20:dd:75:8f:d5:f8:c5:df:
a7:b4:55:55:4f:b5:a1:7f:9b:08:04:40:d8:6b:2c:
aa:f0:1a:8f:1d:9d:15:f5:21:d3:d5:5e:d7:67:95:
4b:cc:dc:d1:e9:87:31:b1:d2:d3:0b:b6:26:97:6f:
9a:83:2b:49:fd:fc:1b:dd:c2:f2:6f:4e:4e:a8:37:
7b:01:fc:81:9f:d3:ac:8f:e6:a0:c7:51:b1:87:dc:
df:bd:a2:43:0d:40:9c:60:70:48:98:e1:6b:03:2e:
74:e5:c8:3a:18:b7:43:2c:fb:70:61:3a:46:59:6d:
1b:a0:9a:21:32:89:63:df:31:fb:df:14:07:bd:fc:
37:62:87:0a:11:d4:c0:76:ee:0f:0f:91:74:48:64:
f6:13:fc:7d:36:a2:2e:d2:89:bd:d0:29:20:22:bf:
7d:14:f2:cc:3d:c6:2f:6b:a0:29:de:05:0b:a0:74:
da:65:b6:65:2c:2a:73:ec:a6:a2:a4:5d:c5:a3:60:
12:f9:a9:d7:0d:7b:e4:24:4f:db:b2:45:f2:a0:11:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:1D:55:04:15:8E:B8:C3:90:9B:1B:77:48:7D:51:6F:05:FA:E7
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:38:2c:0e:3c:1a:c4:d8:22:48:0a:4b:b3:97:0e:05:80:43:
8a:3e:80:55:c8:39:3d:54:b9:d4:06:47:4e:ce:bc:ed:24:0f:
81:29:73:5c:f1:df:18:78:b6:dc:25:91:9b:94:7e:fb:3b:93:
7b:72:2d:00:6a:f6:47:e9:9a:ec:77:74:ac:b6:7b:15:e5:fd:
61:e6:89:2a:b2:21:8f:83:1a:a8:70:4c:59:d8:18:54:25:99:
d8:09:0e:fb:b9:3f:48:20:b0:d4:5d:bf:cd:90:49:87:15:4f:
f2:04:e3:b3:64:46:23:61:72:6b:42:3a:7d:7b:b3:c8:81:3e:
a1:4a:96:80:00:29:9e:81:6f:96:64:c5:dd:7b:6d:f8:ee:be:
90:49:56:b9:0e:f9:ef:34:9f:df:b2:25:71:3d:8b:8b:c3:a7:
9a:14:a6:19:58:b0:c1:85:58:6b:9e:ae:cf:b1:95:b7:cd:86:
49:00:b6:ba:47:d0:85:5f:6e:ad:d8:30:b0:88:07:d7:ef:01:
95:ad:49:d9:a7:fb:89:17:a9:e0:dc:50:4c:8c:c8:4f:c2:82:
a2:6d:c7:74:26:cf:c7:d4:8f:6c:c9:83:87:8c:96:44:d4:bb:
5a:ae:38:8e:92:1e:07:8a:4b:87:42:08:15:56:3a:a1:20:1b:
5d:01:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:30 2025 by rpki-client