Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: QpRzUF6iLD15z/fDU3cPmbZuFCG/pVq7K7spNVJr2Vg=
Subject key identifier: D8:AA:7D:5B:78:CF:87:E0:E4:4D:14:AF:2D:E4:CB:A7:64:D4:08:84
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 0194BC04D9B7A872A5C4CD9BB0482935B72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 04EC
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 1e-R_RVRVy4XvdCy2aS6EF3_EtI.roa (hash: BQhqOOFjoi+Ex8s0CUIBtj7pTDkrOo0Z4PQBLWx35W8=)
2: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: ECuho2WcemjVBc5mV/gFw9HcaWtsptK10McCSyaMdRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:b7:a8:72:a5:c4:cd:9b:b0:48:29:35:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=d8aa7d5b78cf87e0e44d14af2de4cba764d40884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:56:df:8c:52:d5:f5:39:e6:8a:50:52:67:
08:bd:4a:29:d1:35:70:2a:02:1f:7e:58:8e:c2:e4:
dc:f9:8f:26:e4:6f:5c:73:c4:91:89:af:be:5d:16:
22:65:72:1f:ee:3f:20:13:eb:67:19:be:c5:37:a5:
15:89:e3:89:55:a0:f3:a5:e7:7b:18:6b:9b:d9:1e:
0c:79:dc:13:06:07:73:a2:4d:91:88:94:23:23:c3:
14:80:40:55:7c:0b:36:43:05:ac:c0:3b:c5:55:20:
89:f9:49:fa:29:ff:5c:e7:72:4d:e8:5f:69:62:88:
40:d3:3d:b6:65:b0:db:03:45:39:24:93:1f:16:58:
a6:e6:ec:9c:2b:61:c8:25:1f:d3:d1:b1:a7:7f:3c:
a5:81:89:d0:c0:05:1f:ad:e6:13:dc:ff:35:6f:10:
9f:db:5f:ef:c2:18:a5:9b:9b:82:a6:76:e3:fa:29:
bc:33:4c:b1:fb:23:d9:0d:36:47:94:d5:d2:45:a7:
e7:f9:c9:d2:33:ae:11:29:65:32:97:07:d7:59:2f:
43:0e:75:b4:c3:de:a8:69:83:b9:70:83:1b:0b:2f:
03:2d:dc:13:c2:9d:21:33:35:4a:ed:54:2d:a9:1a:
50:f9:a7:36:87:3a:bd:c4:34:20:54:3d:c7:a2:ac:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:7D:5B:78:CF:87:E0:E4:4D:14:AF:2D:E4:CB:A7:64:D4:08:84
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:0b:a2:84:c8:c4:eb:86:c1:83:bb:64:6a:7a:ca:ea:9b:
89:45:91:84:a6:76:e9:e7:11:d1:e3:c9:96:a0:5a:9c:03:54:
08:5e:21:d2:6a:9b:47:91:de:e7:a8:d5:02:20:98:a9:f7:a8:
a9:96:cc:3e:96:e3:fd:e8:9e:6e:34:d4:76:cf:a4:25:b9:50:
6b:97:1a:74:cb:d9:d0:b0:10:7a:f2:2d:99:ec:4d:33:60:c9:
d3:0e:a8:e7:30:a1:14:ca:87:20:e6:49:a4:6a:44:97:e0:39:
a7:dc:97:a7:30:24:2e:35:b9:f2:fb:9e:b0:6d:5c:cc:32:c6:
31:da:a7:9a:f9:d7:ad:00:87:0e:fa:4c:c2:ad:68:95:8d:15:
59:c6:9e:d7:24:26:23:8e:9a:c8:94:12:e6:0c:42:83:06:1a:
28:e0:a9:a5:ef:b3:af:c3:77:1f:9f:7b:98:9b:5b:32:5f:88:
6f:13:d0:06:b9:e1:5d:5d:df:e1:63:39:d4:cf:10:39:d5:11:
22:ab:5a:26:54:74:28:6d:c2:ce:0a:e9:0e:55:73:f2:21:55:
1c:e4:ca:30:48:ef:52:9d:0d:47:0b:4a:5a:d9:4d:8a:a6:18:
5c:53:10:ac:b5:59:12:b5:dc:ba:78:51:f6:8c:cc:cb:02:bd:
bb:58:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:39:25 2025 by rpki-client