Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: qdudAe4fk+6Ug1AOQ3pAyk9f1J0nSHm8ymJuoJz4QUk=
Subject key identifier: 47:21:BB:69:CE:B2:62:7D:1C:C0:57:88:01:30:CA:3F:CD:D9:DA:33
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 0194BCAA21E1F70D92499DB8E7E93D0DE39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0814
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: ob3Y8Dgj8USRJQ+AsFKBgLDF9AEJ0H08qa5jlB0sm3s=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:e1:f7:0d:92:49:9d:b8:e7:e9:3d:0d:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=4721bb69ceb2627d1cc057880130ca3fcdd9da33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:e7:d6:1f:44:4b:2b:e8:d3:3e:c6:a8:06:
36:28:59:46:ce:f5:10:84:00:d5:3f:ef:93:cb:24:
1c:ee:12:a8:ed:94:61:f6:99:a6:6d:4f:ea:53:49:
89:10:8a:a0:80:4e:9c:ba:2f:6e:a0:6f:b9:79:63:
40:b6:e4:e3:d8:11:31:47:96:c4:42:4c:08:3a:38:
7f:b9:93:29:c9:3b:bf:dd:4a:e7:6a:37:68:d6:b4:
ca:8a:fd:24:8b:ff:47:cd:66:b3:34:3d:68:74:88:
14:9c:61:c6:48:77:20:82:b8:ae:ed:7e:3b:64:a5:
74:86:ec:c1:c3:9f:80:d6:7e:c4:f8:ac:cf:46:70:
92:0c:ef:4d:90:09:a8:a7:7a:e3:78:4f:74:b1:d6:
fa:f3:4d:16:71:bf:48:75:e7:0e:69:d3:6b:96:b0:
7f:9b:0e:58:1b:b8:da:4b:26:b6:cd:e5:42:30:87:
58:31:34:45:7d:67:16:9e:30:af:5b:e8:c7:92:a8:
5b:21:4a:04:99:50:e9:50:e3:d0:d6:ef:02:c0:15:
7f:26:c4:bb:f0:6f:4d:25:bb:9d:e3:db:8a:a3:07:
73:e7:d6:e0:d3:8f:3b:f3:c5:c1:97:0e:fe:8c:b9:
21:b0:04:ab:b5:ec:da:65:f2:48:c7:51:88:aa:00:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:21:BB:69:CE:B2:62:7D:1C:C0:57:88:01:30:CA:3F:CD:D9:DA:33
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9b:e5:99:81:01:75:5a:fe:bd:d1:ca:4b:e4:aa:f7:85:c9:
65:f2:7e:22:1c:ac:46:65:20:e9:49:da:b0:8f:41:7b:e5:cb:
0e:e6:28:57:0c:dc:a9:24:cb:a6:bd:b0:d3:c3:6a:6b:1a:e0:
d0:bc:ab:9a:fd:52:b6:61:86:e3:9b:ed:09:45:1d:f8:9c:15:
6e:64:8c:0d:6c:12:82:dc:7e:42:aa:d6:79:a8:77:e9:12:88:
db:0c:93:56:fb:c4:17:f4:d5:8f:cc:ab:aa:10:7a:41:a9:82:
ce:29:54:54:58:30:de:b3:00:23:40:e2:fc:b2:bd:a6:07:4c:
31:e4:ca:cc:87:e2:72:3a:b1:91:17:c9:b7:43:5c:2c:98:8c:
d5:ac:a5:14:48:8b:56:ab:07:79:8e:d4:3f:b3:1f:ce:3b:53:
00:ba:b4:57:89:07:ee:e0:9f:16:6e:ab:0e:80:30:ed:d1:05:
c3:72:22:28:2d:03:45:d8:72:6d:fd:b4:11:e1:75:c0:2e:29:
2e:1f:8a:46:25:2e:c5:2a:ff:ce:4d:2b:13:b9:c6:12:5e:54:
9f:83:35:a4:73:d8:4a:bc:6c:f9:f6:1a:47:ed:6d:23:94:9e:
11:33:5a:c6:7c:02:8c:29:60:dc:14:83:b5:ee:29:1b:53:ff:
d0:71:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:55 2025 by rpki-client