Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier: bKoyIdqec2oGjfzYdfzLHGikvw6nJJFe2y1vFJoLWPw=
Subject key identifier: 84:19:3C:05:B6:80:2B:4B:85:98:45:D8:B0:66:CA:CE:AD:8D:2E:93
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 0194BC3BF95BBB3A78E3A6BB02B517056287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number: 05DB
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: gghdT8Omu6ugaugRxSXhlvtuJmHS3aTnoMfjD7qy1dE=)
2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:5b:bb:3a:78:e3:a6:bb:02:b5:17:05:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=84193c05b6802b4b859845d8b066cacead8d2e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:5c:99:6e:62:8b:d2:6b:88:04:f3:b6:a2:
6c:41:43:d1:65:5a:b1:c0:90:84:78:ec:d1:2d:f7:
3a:7a:29:d7:67:5a:48:4b:f0:53:cf:5d:4e:56:e8:
87:21:7d:f2:15:18:05:a7:af:f4:e6:bf:48:43:cf:
ea:92:bb:4c:69:32:05:94:4d:d0:23:ce:b5:3a:98:
12:b9:dc:b8:01:86:d5:79:5e:6a:2b:f4:6a:99:02:
54:41:23:f6:e8:f5:de:7b:7f:98:7a:e9:d2:ca:ed:
3c:a3:52:cc:ee:15:dd:86:5c:be:b9:a9:09:71:75:
72:60:11:d8:2f:6b:5c:0b:56:b9:33:50:1c:4b:67:
86:cc:12:67:bf:7e:a9:2c:fe:b0:c0:06:e0:7d:0c:
b4:12:20:db:f5:44:12:9c:20:e7:35:4f:62:f1:60:
49:ec:f7:3a:e3:b2:98:62:50:ef:df:97:8b:35:e7:
54:1a:bf:96:8b:74:26:01:4a:b1:29:b8:c0:da:a4:
90:06:a4:61:7d:6c:14:7a:1f:54:46:e3:d9:e1:6a:
f2:8b:e7:d5:e1:e0:c3:79:d3:37:25:84:7f:44:fe:
72:3c:62:41:fb:65:f1:49:c2:1c:06:74:52:92:42:
9e:b4:ee:c8:78:59:34:b2:04:00:c2:2c:1f:02:47:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:3C:05:B6:80:2B:4B:85:98:45:D8:B0:66:CA:CE:AD:8D:2E:93
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:07:9d:45:de:09:63:4a:93:90:a9:a4:e6:f3:69:92:e4:0a:
0d:1c:36:be:95:25:9d:ea:16:b9:b1:15:4e:9e:82:63:91:0a:
94:1d:2e:d4:ab:0c:4f:d7:c5:d1:73:4c:fc:db:f4:42:a9:db:
0b:bb:9b:ba:70:d5:29:83:77:92:52:92:fc:ce:fd:0e:b2:40:
bb:db:11:71:ed:31:a1:c1:7d:5e:cf:84:5b:77:87:47:4c:c4:
d3:d3:6e:b9:1a:0f:39:75:04:99:0a:a0:b0:69:c0:cb:79:ea:
af:ed:38:ff:02:25:7a:1d:1f:89:9e:75:27:c5:da:19:3d:66:
a2:ef:e6:fc:1a:68:12:0a:df:b3:c1:87:f1:5f:51:08:16:47:
3d:01:11:e1:25:39:33:ef:83:7b:4f:7d:69:65:a7:52:2a:6e:
29:66:a1:64:83:50:bc:48:89:a4:4f:b6:8c:bf:57:96:7e:ce:
8a:d7:a9:48:ad:0a:29:c7:63:09:71:21:2d:2a:a6:40:e9:82:
76:69:59:83:37:72:0f:6a:53:22:b3:e9:29:e6:60:6a:e6:14:
fc:8b:6e:18:98:e0:48:9d:e4:f7:43:1d:d9:ad:7b:af:76:e1:
13:0f:2f:40:7c:8b:1f:d6:42:9a:46:6c:ed:43:59:82:ab:41:
d6:e9:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:04 2025 by rpki-client