Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: DMWqkkBHeWlk44xH00iNU6U5v/bZv3ZbDpeI9RR2IR0=
Subject key identifier: 58:40:ED:59:EF:4B:63:A0:EA:3D:8C:9F:6F:1A:D9:A0:66:5B:A7:F7
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 0194BCE0AAAEBFD1D8D9C4AE1616DAA7F71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0278
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: Uiseu+flnXkYq3Q/4pbqcCWqJPu+UGHW38UQbkceypE=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:ae:bf:d1:d8:d9:c4:ae:16:16:da:a7:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=5840ed59ef4b63a0ea3d8c9f6f1ad9a0665ba7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:ea:88:56:ae:26:49:37:36:cf:d6:15:87:
f2:15:82:0d:e9:d0:c5:e1:d7:35:32:a4:12:c8:62:
16:0d:bb:d9:ec:17:75:43:b8:ae:59:9f:6d:29:0e:
6c:5e:8b:8a:14:38:4d:ca:c9:e6:fd:83:77:93:62:
49:59:94:2b:8a:f2:df:8a:c0:82:84:6c:c5:aa:bd:
16:71:c8:23:4c:ab:49:f9:37:d6:6b:55:34:aa:d1:
ee:09:cf:9b:f5:98:5a:1c:89:89:ed:50:c2:19:2f:
7e:f4:01:25:bb:b6:a0:4e:bc:55:31:20:67:58:58:
0f:3b:31:a6:1f:e0:72:ab:98:5b:88:59:c2:7d:e1:
a6:29:f3:89:93:76:c9:26:81:31:59:ec:c6:71:ea:
24:4a:20:85:5c:a8:0c:31:49:71:4e:55:eb:16:4b:
43:3c:3d:ad:45:1c:68:18:5b:d6:35:ae:03:9b:12:
2a:ec:88:2d:a1:1e:c2:1a:f8:96:bf:d4:b7:71:0a:
cb:e4:79:97:2c:ac:03:df:a1:fd:87:6f:17:82:1e:
5c:dc:c3:15:91:31:48:17:1e:a2:a2:e1:b1:d3:d3:
e2:a4:a6:d2:b6:27:1c:aa:dd:60:dd:de:58:21:0a:
b2:ce:16:61:57:b1:61:43:72:2e:51:30:02:65:32:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:ED:59:EF:4B:63:A0:EA:3D:8C:9F:6F:1A:D9:A0:66:5B:A7:F7
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7a:7d:9d:f4:72:63:41:07:11:32:37:97:63:e0:11:93:7b:
e1:1c:26:d0:3d:53:fe:e2:7e:86:a0:6e:e5:ec:95:65:81:e2:
25:9d:ad:e5:ee:b1:89:ff:44:17:23:e8:63:66:7d:a9:60:69:
1a:d6:56:95:14:72:c6:06:15:4d:76:de:94:77:44:3a:b1:8d:
e1:db:69:78:e8:9a:81:a4:31:4f:34:de:19:0f:c2:9a:de:d4:
bf:9b:e5:9e:b9:d6:25:95:44:dc:c9:90:75:f2:33:fc:ab:e5:
94:b7:91:e5:b1:3c:1f:e6:53:f8:8e:57:f9:51:bd:5c:22:3d:
79:55:64:6b:30:68:34:9a:47:95:ef:d1:92:38:67:5b:92:56:
39:5b:44:6b:28:75:26:84:42:76:6b:42:8d:c1:82:8e:b9:7d:
24:f5:72:d6:4c:98:80:00:24:10:85:0a:98:1f:7c:fa:8d:51:
a3:46:08:5a:a5:c9:b1:ae:69:b7:24:a9:d1:52:54:63:c6:ad:
c8:55:eb:8c:19:40:a9:73:90:b2:5a:31:54:dd:28:17:ba:5f:
07:26:3c:f4:c8:3b:88:19:ed:94:56:4c:33:ea:d5:b3:e2:09:
35:91:ab:d9:4f:34:1f:f1:d4:2d:99:53:c2:d5:e3:8a:ca:d6:
78:a6:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:25 2025 by rpki-client