Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: 4VeWPbw49Ix5HAF9rDrHZFK0xL/mzcAIj7ual13TklE=
Subject key identifier: 1D:8D:5A:1D:FB:5F:F8:F8:2B:ED:4C:DF:77:D1:4A:A0:33:82:0C:26
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 0194BCA97BE853119817CA5DFC01BECB2B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 09EC
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: +JSsGx/3U51LB+3NYHMpBkPVSicqNv6lVd1RCcb0d7A=)
2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:e8:53:11:98:17:ca:5d:fc:01:be:cb:2b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=1d8d5a1dfb5ff8f82bed4cdf77d14aa033820c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:5c:dc:84:36:18:f8:28:74:9e:a7:01:20:
30:b6:de:08:6a:02:b9:7f:e2:3f:12:a4:6c:3c:9b:
d6:df:c5:50:6a:73:40:2d:93:12:dc:67:ae:8d:2c:
ac:0b:ad:8e:2a:78:85:fb:cb:eb:dd:fd:59:9d:44:
ff:9b:69:e6:5d:fd:87:61:67:e3:e0:7a:06:ab:ed:
07:30:03:79:0b:9d:03:2d:b8:dc:3e:a7:17:a7:9f:
b4:91:cf:d8:2c:dd:08:10:27:f8:69:e5:4b:51:fa:
0d:0a:1f:45:4e:a9:ad:a2:84:ae:71:83:31:86:e5:
a6:5d:ee:fc:26:b6:3f:3a:2c:f2:92:6d:a1:a9:cd:
ce:b1:16:22:82:f9:bb:c0:4f:23:0d:45:bf:fd:88:
73:60:35:c3:e7:88:ab:2f:36:30:75:7e:b4:1d:47:
dc:ab:5c:4d:d4:27:8a:37:03:52:54:53:80:77:90:
0f:6c:36:ae:8a:c6:4e:d3:83:ce:ce:6c:a2:5b:ae:
c8:60:12:13:98:03:21:3e:7a:c3:98:47:36:a5:43:
e2:4b:01:f0:75:09:29:dc:26:ff:eb:34:a3:95:e2:
f5:e9:47:9e:8c:61:35:db:00:c1:cc:96:e3:26:16:
cc:de:c8:19:90:ad:e9:b8:b7:ff:d0:48:d9:61:d2:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:5A:1D:FB:5F:F8:F8:2B:ED:4C:DF:77:D1:4A:A0:33:82:0C:26
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:38:d7:54:7e:f9:66:3f:11:7e:77:4a:ea:45:cc:d0:c4:
2d:63:e7:a8:fa:98:74:0b:89:2c:3b:92:87:07:81:04:aa:09:
1d:83:17:31:2a:12:7b:7c:62:72:c2:1c:1b:48:f3:39:92:57:
af:9b:d2:ac:9b:34:d9:2e:e4:82:24:f9:63:c1:93:6d:42:ae:
32:3a:da:53:6e:1c:41:92:88:a9:3c:9d:d5:ed:eb:5a:17:34:
03:d2:cd:02:01:a9:64:15:73:27:0d:ed:d4:82:6e:f0:88:d0:
89:0b:b7:65:9e:6f:03:03:c1:89:20:fa:bb:9f:77:ee:1a:98:
92:1c:05:6c:14:15:60:19:8a:8a:2a:60:d2:55:2a:d8:49:71:
6f:20:73:79:ed:38:3b:d6:19:e9:0f:af:a6:e0:d6:30:a7:47:
98:0c:bd:1f:bf:94:2d:a6:4c:a2:72:14:3f:d6:3a:7a:cf:04:
dd:c7:93:7e:d9:2a:6b:bd:ef:a5:ad:ef:c2:58:e2:68:d9:5b:
b0:9d:28:20:c7:e5:ed:c5:2d:a6:95:de:f8:fc:83:aa:68:52:
30:97:30:e8:39:d7:0f:1a:28:3e:bc:09:98:a6:cb:bf:4e:c2:
f3:d8:b5:62:4a:76:07:14:b2:b0:b1:d2:b7:98:8d:fa:c6:f1:
79:c0:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:44 2025 by rpki-client