Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: ujJdZ3/+K021kBYItjXhf6byCPwLM/tbqzodtRaVglI=
Subject key identifier: BB:8F:91:5C:12:43:4C:5F:31:06:9D:26:64:E2:A3:A6:FC:51:F5:F4
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 0194BD4EB88015116AFB7A2CE48D9C40ADCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: +kDXylufud1zLMjblz5CgoB6LfqtxEcy9JQ5jiGp9fE=)
2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:80:15:11:6a:fb:7a:2c:e4:8d:9c:40:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=bb8f915c12434c5f31069d2664e2a3a6fc51f5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:ba:b8:95:8f:a5:6a:6c:a1:74:d7:ab:cd:
10:4f:a3:02:3a:e7:20:4c:e7:95:95:50:e2:21:ce:
7c:64:19:ec:19:e1:5e:ff:04:19:53:a7:97:81:47:
83:10:7c:a9:0a:7e:9d:8c:95:05:28:7a:d0:ac:28:
1d:73:d2:30:b6:f7:a4:ce:80:60:25:56:a8:2c:fc:
b9:48:bf:f9:71:b3:af:e3:b7:e5:bc:39:ce:61:5c:
21:63:ae:7a:e4:40:56:93:b8:1c:68:d4:56:4b:0c:
18:fc:ac:c9:fb:ce:b8:fd:72:9a:fd:01:d9:fc:a4:
72:c6:27:00:cd:16:ac:4e:13:81:69:5e:67:0d:88:
01:37:7a:e1:ce:77:7d:90:37:89:6a:25:9a:b1:c4:
f5:03:86:65:bd:4a:d1:1a:13:ed:a4:a7:42:d2:a9:
4e:cc:9f:30:79:7a:fc:39:12:d6:b0:51:19:7f:fd:
d7:0e:a7:c3:af:5d:18:6e:d2:bd:38:9c:e5:dd:7e:
4f:7d:9e:34:c3:6f:dc:3f:47:ce:0a:97:d3:c0:4b:
14:83:f0:49:8b:81:d6:4e:f2:19:b1:bc:93:89:13:
a3:fb:1e:bc:c4:36:e4:86:c2:9d:54:b6:0f:18:54:
27:f1:70:39:8b:30:84:df:b5:dc:84:31:38:aa:7c:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8F:91:5C:12:43:4C:5F:31:06:9D:26:64:E2:A3:A6:FC:51:F5:F4
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:4a:08:e3:36:91:64:9c:29:2e:19:bb:e9:65:2a:f7:df:
54:4f:0b:3e:e0:8d:ab:fe:2b:01:7a:f9:41:cd:cc:b2:fe:0c:
26:48:9b:77:ac:02:a8:93:b3:fd:80:05:d5:5e:39:d7:5f:27:
4e:cd:5e:d4:5b:2b:e7:10:b2:d5:cd:01:d5:0f:0c:c0:e2:0b:
06:68:56:14:1a:91:01:8c:1c:67:8c:28:92:c1:34:51:71:91:
69:e5:7b:2e:49:cf:8b:a3:03:5e:c6:74:22:6a:3f:29:02:b5:
2f:e5:ea:79:6a:d5:de:96:e9:28:b6:0e:47:95:a8:68:3f:9d:
e9:96:d5:6b:ad:91:ea:38:87:04:4b:0f:8b:c4:3d:f0:5e:78:
d6:2d:29:3e:9c:e6:77:a1:c7:43:0a:fb:d9:76:48:69:88:77:
ff:20:06:9b:97:79:98:91:3c:aa:0e:e3:63:e9:d2:96:18:a8:
59:fa:2b:29:89:ff:62:8f:5d:78:93:58:8f:01:10:dc:6d:90:
30:a6:3a:e6:33:06:c4:29:b2:bf:d2:46:62:ab:5a:65:5e:02:
6f:9c:99:b4:26:19:f2:5e:95:0f:30:14:af:d5:53:5e:4a:ea:
dc:dd:d6:f5:e4:1c:80:54:d0:6d:ba:db:aa:b1:1b:7f:8b:fa:
31:8a:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:25 2025 by rpki-client