Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: 3uRmpE4SMQg1cfVP6zAUWjt4oiJPpaIynSBMToCDuqc=
Subject key identifier: C7:96:E2:7A:B8:4F:4F:5C:48:99:1C:45:28:9D:9D:29:3D:60:34:A7
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 0194BD852FA4A33375A87F9D57FCEDB8316F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: Q2Zemgd8sOWW0+Ps7+Nq3sdpf+4jZUIr3TzTWKFXgos=)
2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:a4:a3:33:75:a8:7f:9d:57:fc:ed:b8:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=c796e27ab84f4f5c48991c45289d9d293d6034a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:af:62:84:39:7c:b0:ab:a2:03:b9:1a:f4:
9c:e6:91:29:d6:5e:67:15:03:80:92:a1:36:1e:1f:
6f:3a:60:d9:b5:78:58:75:ab:08:7b:cf:5f:ac:79:
1e:cd:0d:27:dd:d0:c4:d7:a0:01:c1:9d:05:5a:2f:
06:22:59:66:68:53:82:84:96:db:ae:6a:dd:27:d2:
ff:96:16:77:a1:5b:cf:67:1b:60:59:f8:80:74:bb:
db:84:b5:2d:aa:98:59:27:35:0a:a9:42:9e:27:01:
5e:20:61:0a:24:0b:09:5e:51:6c:7f:bf:94:e9:36:
a0:de:5a:96:3f:67:4d:14:13:80:84:3a:3b:8b:3d:
03:02:84:08:c9:81:3f:5b:90:2d:93:40:df:40:03:
70:93:92:b4:dc:46:9f:c7:43:bd:b7:8a:5c:57:a6:
31:f6:bd:cf:a3:66:85:d9:a4:27:2f:9c:97:b3:d8:
ae:d1:7d:bf:39:7f:49:b5:43:90:d7:79:0c:ae:ec:
07:c9:76:e0:25:95:9d:49:89:f8:ba:96:99:51:90:
da:09:99:f9:a9:ff:eb:00:f6:fc:80:36:09:bd:71:
c8:3a:28:46:a2:71:28:64:a6:be:5f:19:cc:14:9d:
5f:a8:b2:b4:7f:50:90:af:29:f7:8b:a7:f8:fc:00:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:E2:7A:B8:4F:4F:5C:48:99:1C:45:28:9D:9D:29:3D:60:34:A7
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ea:6f:4f:80:05:f1:9b:ca:13:f7:51:0b:ef:66:67:97:e9:
a9:13:ee:33:15:cc:2a:9e:84:6b:df:06:29:5b:8d:5d:47:8a:
c8:8a:c9:d1:58:23:47:53:24:30:89:fb:d7:e1:02:93:a1:43:
ad:e2:67:ac:54:d7:5e:74:be:78:d3:ec:51:90:a8:1e:23:00:
bc:56:07:e0:d7:7f:0c:d5:8a:a7:79:38:2e:8f:f7:30:21:21:
0b:2e:27:0d:0c:8b:c7:28:a1:b8:37:2c:26:2b:0d:f9:c7:07:
ce:8d:22:ca:c8:32:80:3b:a5:13:fa:42:ff:06:9f:15:59:e7:
45:7d:09:5b:91:e0:e9:cb:7a:f6:f3:bc:c1:69:6e:ea:6c:6d:
07:4f:c4:d9:e5:4b:99:e4:4f:e8:64:68:96:79:53:f1:82:9b:
56:89:5b:2b:21:3f:3a:c3:c5:63:46:a1:79:b8:25:7d:71:74:
57:25:77:eb:ad:1f:15:c8:20:77:e4:7e:f0:e0:f2:ad:b0:55:
1d:0e:59:33:f6:69:29:41:f1:0f:c7:40:19:8a:fe:3e:00:e0:
28:52:ab:27:09:a1:a4:1e:f4:48:09:12:e9:07:9d:e1:2c:1e:
c2:1c:a5:0a:78:ca:fe:b7:e3:06:fc:b3:6e:9c:19:7d:f4:f6:
88:af:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:21 2025 by rpki-client