Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: ChcrMuKYMqnm0qANmnSAEkdI12GFLNbYrnQxYHvS2ms=
Subject key identifier: 71:28:C0:98:AB:05:49:9A:A5:35:1F:BC:00:C9:71:E5:DD:3C:BF:D6
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 0194BD177DDA430CD59743F6A44314B151C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: +dixA74GY3hecZyWBe51vHCkAg1Oxi5uDukMQUQxyxE=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:da:43:0c:d5:97:43:f6:a4:43:14:b1:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=7128c098ab05499aa5351fbc00c971e5dd3cbfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:c1:a6:cc:e5:4b:2d:8a:c5:1c:9d:b0:55:
2d:3d:f3:94:e6:ef:c7:ad:f3:d1:cd:e5:37:a5:86:
55:c9:d1:79:be:d5:be:95:1b:46:12:66:d4:5a:27:
b2:00:e8:6b:0a:db:ee:57:c3:26:ad:8f:cf:22:f2:
a9:4d:e0:4e:c4:51:9e:34:82:a9:61:1c:9d:fc:80:
06:ba:81:27:32:66:a1:6a:12:ff:c5:26:b6:06:a4:
a5:e6:6d:75:3a:57:00:df:d4:74:55:4c:3c:99:ea:
be:db:3f:37:05:d5:84:f6:60:91:c8:31:36:25:65:
af:8f:3d:0b:95:56:48:94:4e:e1:ab:3a:5b:37:8c:
38:1f:ac:40:ad:eb:26:e7:f8:fe:52:95:bd:75:59:
90:a1:5f:ce:f5:9e:84:c7:9a:59:f3:ee:98:94:ea:
ea:b1:5c:58:12:c0:38:fc:77:d1:1d:46:da:f8:7d:
18:23:39:33:8b:83:f7:59:9a:8c:39:0d:b6:2e:8e:
78:61:65:74:05:7d:61:1f:86:74:a2:a4:b6:3f:1a:
cd:43:ff:3f:55:81:e7:0d:3c:f2:f9:04:6b:3f:73:
fe:43:7c:25:7c:1d:95:1d:98:23:67:44:ea:d6:1e:
8e:00:c0:1c:fc:29:fc:c9:66:37:7c:80:c9:77:85:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:C0:98:AB:05:49:9A:A5:35:1F:BC:00:C9:71:E5:DD:3C:BF:D6
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:6f:2c:be:42:4f:fd:20:2b:17:19:43:0d:c2:1f:ca:e2:
47:35:73:91:5f:c1:9b:f6:a2:cf:0a:84:7f:5d:02:86:90:8f:
e7:cd:e6:8f:90:bf:60:6b:43:9d:37:51:83:3d:45:50:8c:96:
21:85:d0:79:b1:56:1e:4d:93:3e:b6:aa:7a:69:47:f3:c8:b9:
2e:e0:ec:7b:27:ac:b0:e9:49:f0:c5:a7:6a:2a:d0:ba:1f:96:
29:ad:71:5c:ed:4a:ae:a1:ec:7c:a1:69:3f:a7:df:f0:91:15:
8b:50:6f:88:cd:4f:3f:6f:0f:63:ac:1c:75:c4:85:ac:53:ed:
1a:02:a4:de:e7:f9:8f:98:b5:d7:13:1c:8b:a3:bf:99:0c:7d:
4e:01:cb:69:e0:6a:ca:21:a2:26:48:d9:19:27:50:71:60:91:
41:f3:23:b0:e2:f9:c5:c7:48:75:da:86:fe:bf:e5:26:64:91:
ac:ec:4a:1d:11:f3:60:d4:b9:53:96:66:66:aa:e3:2b:81:f1:
47:13:8f:bb:6b:0b:5d:ec:92:4e:ea:eb:20:e9:8e:de:7b:91:
aa:3e:e2:a8:68:53:99:3b:b3:c9:ec:f8:91:6c:9b:ef:9e:bb:
40:85:57:31:2a:03:aa:9a:2c:62:02:06:a8:fe:86:5a:5a:8d:
47:1c:63:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:51 2025 by rpki-client