Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: Wx/V5btakdYUDQpCqn3hxnRDyBn/J4AxlYXawX4Kr1U=
Subject key identifier: 67:1C:F2:EC:60:12:0E:A1:EC:0F:93:EC:C5:C1:57:D9:49:E9:0A:96
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 0194BC04F0EE7B8967E99F0062B5CA74185B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: l80rKtMT+1zO3e0TL7h6Z6j9NwCN1rgEEAcVzMYn4bA=)
2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:ee:7b:89:67:e9:9f:00:62:b5:ca:74:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=671cf2ec60120ea1ec0f93ecc5c157d949e90a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:f8:71:f0:b2:64:60:fc:e0:be:07:a8:45:
cd:4d:ed:cd:99:33:42:7a:f8:7c:96:13:99:36:4d:
49:b1:34:65:a6:77:45:5a:0d:a3:e5:e3:3a:29:bb:
a0:c0:3b:ba:d8:dc:35:7e:7d:07:cc:c7:0c:22:35:
d2:0c:06:8f:2a:5e:3f:e7:ce:6a:d8:02:88:39:88:
b1:d2:4f:d7:fb:d9:41:5f:e4:5c:ca:f9:47:d6:42:
52:ab:89:ed:2d:d1:d3:32:83:73:e4:94:4c:20:f9:
0c:63:8c:c8:5f:94:7e:22:08:72:29:de:c1:e3:2f:
0f:52:3a:6f:72:8c:2b:73:b8:dd:96:0e:14:e5:64:
d9:30:49:d9:71:90:2f:29:07:be:5a:92:f4:e3:73:
ab:15:0e:ae:f4:50:8b:90:64:5d:60:11:21:7c:23:
42:37:c9:08:69:84:64:94:84:75:55:5a:95:1c:a2:
24:04:4e:14:8a:5c:25:ef:37:34:fc:51:3f:8e:48:
b3:f6:c5:bc:6d:c8:db:3e:5f:14:84:83:79:5a:df:
ed:eb:2d:bf:66:94:e4:71:ea:49:ce:97:c6:72:71:
c3:6c:23:60:89:f7:89:21:4b:c9:33:b6:8d:73:17:
e0:b3:e2:18:a8:be:ea:40:19:5e:99:50:10:03:9c:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:F2:EC:60:12:0E:A1:EC:0F:93:EC:C5:C1:57:D9:49:E9:0A:96
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:68:50:57:d9:ff:b8:a3:b7:04:60:0e:67:6e:08:4d:1c:94:
b7:1c:c8:94:e0:2c:49:61:52:66:1b:84:9f:d2:ee:be:6e:9b:
c1:00:b5:82:0b:fe:c6:8b:43:5f:a0:31:54:5e:13:60:0d:37:
2f:f7:e1:2f:6e:2b:87:84:8b:8a:a7:e2:e0:28:76:54:3f:99:
a7:42:a3:e8:12:0c:53:63:84:3d:b7:ee:3d:d3:97:f2:8c:1e:
10:ea:2d:f4:b3:05:4b:dc:88:8a:6a:0c:a6:0f:76:ad:10:2e:
5c:eb:3f:44:01:47:41:90:85:c2:fe:52:17:ea:b8:0e:c2:17:
3b:02:86:c7:be:74:a8:21:93:5e:3b:61:ad:2d:23:02:b8:3c:
5d:3a:59:46:9d:f1:4e:1a:19:31:50:61:b9:6b:8a:12:ed:9e:
2b:77:73:34:0a:78:35:04:76:6d:ca:ca:94:7b:04:d7:8c:65:
31:d0:59:21:60:cf:36:4b:a9:9e:e2:5c:7d:df:68:f3:9c:e1:
ff:5e:1f:9a:95:8c:44:f1:82:67:22:bd:1e:5d:2f:c9:6c:11:
02:64:d1:91:6b:2f:3e:9a:19:89:bb:da:ef:8f:ad:60:fd:e8:
33:8b:5e:85:db:00:a4:a1:d7:43:85:ea:9b:71:b0:8c:ff:b1:
2a:87:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:59 2025 by rpki-client